This Privacy Policy governs the processing of personal data provided by users and those interested in the services offered by Brain and Code , in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ( GDPR ) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) .
This Privacy Policy aims to explain how personal data is collected, processed, and protected by Brain and Code , and is addressed to:
→ The applicant for information related to any of Brain and Code's products and services.
→ The owner of the personal data collected through the various paper forms or those available on the website and other digital means (social networks) of Brain and Code.
→ The holder of the contracts signed with Brain and Code.
It also regulates the processing of personal data provided in the past through various means of contact with Brain and Code, always to the extent that it does not contradict what was expressly accepted at the time of collection, which will be respected in all cases.
It also aims to maintain the business relationship and carry out information, training, advice and other activities specific to Brain and Code , guaranteeing confidentiality, security and compliance with current data protection regulations.
DATA CONTROLLER
Identity: Brain and Code
NIF: B72407810
Postal address: CL\Uribitarte 6 Floor 2 - Bilbao
e-mail: info@brainandcode.tech
PURPOSES OF PROCESSING PERSONAL DATA
Brain and Code processes the personal data collected for the provision of academic and extra-academic services and the sending of communications by physical and electronic means relating to our activities and services, as well as for the creation of profiles linked to the preferences of users and interested parties, without this implying the adoption of automated decisions with legal or significant effects for people.
Under no circumstances will Brain and Code make automated decisions with legal effects or that significantly affect the interested parties.
DATA SOURCE
The personal data collected comes directly from the information provided by the interested parties or from Brain and Code 's information systems.
Brain and Code gets its data from:
→ The information you provide to us through the various web forms and paper forms that Brain and Code makes available to you for obtaining information.
→ Managing user registration on Brain and Code 's service portals.
→ The information you provide to us through the various contracts you may enter into with Brain and Code .
In general, the categories of personal data that will be processed are:
-
Identifying information.
-
Contact information.
-
Academic data.
-
Economic and billing data.
ACCURACY AND TRUTHFULNESS OF THE DATA PROVIDED
Users and those interested in Brain and Code 's activities and services guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated.
CONSERVATION
Personal data provided by users and interested parties will be kept by Brain and Code as long as necessary to fulfill the purposes for which they were collected in each case, in order to maintain the relationship or link of the interested party with Brain and Code , without prejudice to the right to object to certain processing (including the withdrawal of consent for those processing that required it) and/or to request the deletion of the same.
In the event of any of these circumstances, your personal data will be blocked, during which access to it will be limited to the following purposes:
→ For the handling of any potential liabilities related to the processing of your personal data.
Once the blocking period has ended, your personal data will be permanently deleted.
If you have provided your personal data through any of the contracts that you can formalize with Brain and Code , the blocking period will be ten (10) years, starting from the termination of the contractual relationship or, where applicable, from the date on which the right to object to the processing or the right to erasure of your personal data becomes effective.
If you have provided your personal data through the various forms available on the Brain and Code website, the retention period, in general, will be three (3) years, without prejudice to the specific period that may be established in each specific processing of personal data.
In any case, they will be kept for the periods necessary for compliance with the legal obligations required of Brain and Code .
LEGITIMATION. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The legal basis for processing personal data will be established in accordance with Article 6 of the General Data Protection Regulation (GDPR) , relating to ordinary data, or, where applicable, Article 9 of the GDPR, relating to special categories of data. The data subject will be informed of the legal basis(s) applicable to each service provided, which may be:
→ Legitimation by execution of a contract or legal relationship in which the interested party is a party.
→ Legitimation by compliance with a legal obligation applicable to Brain and Code .
→ Legitimization by legitimate interest of Brain and Code , provided that the rights and freedoms of the interested party prevail.
→ Legitimization by the express consent given by the interested party.
RECIPIENTS
During the processing of personal data, Brain and Code will not transfer it to any third party, except in compliance with a legal obligation or with the consent of the interested party, who will be informed of this and of the consequences that refusal to consent could entail, in particular the impossibility of providing the corresponding service.
The provision of Brain and Code 's various services may require the use of communications with IT service providers or other suppliers acting as data processors for Brain and Code , who are subject to confidentiality and security conditions in the processing of data. These providers may be located outside the European Union. In these cases, Brain and Code guarantees that appropriate measures will be taken to ensure a level of protection equivalent to that required by European regulations, through contractual agreements or other legal mechanisms for international data transfers.
When international transfers of personal data are made to third countries or international organizations, Brain and Code guarantees that appropriate safeguards required by applicable regulations will be applied, such as adequacy decisions of the European Commission , Standard Contractual Clauses or other legally valid instruments.
RIGHTS
It has the following rights:
→ Right to request access to your personal data.
→ Right to request its rectification or deletion.
→ Right to request the limitation of your treatment.
→ Right to object to treatment.
→ Right to data portability.
→ Right to withdraw consent.
COMMERCIAL COMMUNICATIONS
In accordance with the LSSI, Brain and Code will not send advertising or promotional communications by email or other equivalent electronic means that have not been previously requested or expressly authorized by the recipients.
In the case of users with whom there is a prior contractual relationship, Brain and Code is authorized to send commercial communications relating to Brain and Code products or services that are similar to those that were initially contracted by the client.
In any case, after verifying their identity, the user may request that no further commercial information be sent to them through Customer Service channels.
CONTACT AND COMPLAINTS
To exercise any of the rights described in this Privacy Policy, the user may contact Brain and Code via email at info@brainandcode.tech or by written request addressed to CL\Uribitarte 6 Piso 2 - Bilbao
You are also informed that you have the right to file a complaint with the Spanish Data Protection Agency ( www.aepd.es ) if you believe that data protection regulations have been violated.
Last updated : July 2025