Privacy Policy
Last updated: 5/9/26
This Privacy Policy explains how Learn Spanish with Mer collects, uses and protects the personal data of people who visit learnspanishwithmer.com and/or use our Spanish tuition services.
As a self-employed professional offering online teaching services based in Spain, we comply with the General Data Protection Regulation (GDPR – EU 2016/679) and Spain’s Organic Law 3/2018 on Data Protection and Digital Rights Guarantee (LOPDGDD).
1. Who is responsible for your data?
- Trading name: Learn Spanish with Mer
- Contact email: contacto@learnspanishwithmer.com
We are a sole trader based in Spain. For privacy reasons, our full legal identification details are not published here, but are available on request to the contact email above, or to the relevant data protection authority, where required by law.
2. What data do we collect and why?
| Source | Data collected | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, message | Responding to your enquiry | Consent (Art. 6.1.a GDPR) |
| Free level test | Name, email | Sending you your test result and following up about lessons | Consent (Art. 6.1.a GDPR) |
| Free resource download (PDF) | Name, email | Sending you the resource and, only if you expressly agree, subscribing you to our email marketing | Consent (Art. 6.1.a GDPR) |
| Lesson bookings (Amelia booking system) | Name, email, phone (if provided), booking details | Managing your booking and delivering the service | Performance of a contract (Art. 6.1.b GDPR) |
| Online payment (Stripe) | Payment details (processed directly by Stripe— we never see or store your card number) | Charging for lessons | Performance of a contract (Art. 6.1.b GDPR) |
About email marketing: downloading the free level test or a free PDF does not automatically add your email to our marketing list. We will only do so if you tick a separate, explicit opt-in box, and you can unsubscribe at any time via the emails you receive.
3. Who do we share your data with?
We do not sell or share your data with third parties for commercial purposes. We only share data with the service providers (“data processors”) needed to deliver our service:
- Web hosting provider: Hostalia
- Booking system: Amelia (plugin installed on our website)
- Payment gateway: Stripe and/or PayPal
- Email marketing tool: Hostalia, Google
Some of these providers may be located outside the European Economic Area (e.g. the US). In such cases, an adequate level of protection is guaranteed through European Commission-approved Standard Contractual Clauses or other equivalent legal safeguards.
4. How long do we keep your data?
We keep your personal data only for as long as necessary for the purpose it was collected, and in any case:
- Contact/enquiry data: until your enquiry is resolved, or for 1 year if there is no further interaction.
- Data of students with booked lessons: for the duration of our relationship and, afterwards, for the periods required by law for tax purposes (generally 5 years in Spain).
- Email marketing data: until you unsubscribe or request deletion.
5. Your rights
As a data subject, you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data (“right to be forgotten”).
- Object to processing.
- Restrict processing in certain circumstances.
- Portability: receive your data in a structured format.
- Withdraw your consent at any time (e.g. unsubscribe from email marketing), without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please email us at contacto@learnspanishwithmer.com.
If you believe your data is not being handled correctly, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es, or with your local data protection authority if you are based elsewhere in the EU/UK.
6. Data security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration (for example, secure passwords, and reliance on providers such as Stripe, which meet recognised security standards such as PCI-DSS for payments).
7. Cookies
This website may use technical cookies necessary for its functioning (for example, from the booking system or payment gateway).
8. Children
Our services are aimed at adults. If you are under 14, you need the consent of a parent or legal guardian to provide us with your data.
9. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be published on this page, along with the date of the last update.