LEGAL
Privacy Policy
LEGAL DOCUMENTS
Terms & Conditions
Privacy Policy
Legal notice
Cookies policy
www.spanishwithfede.com — Last updated: 9 July 2026
1. Introduction
This Privacy Policy explains how personal data is processed in connection with the website www.spanishwithfede.com (the “Website”) and the services offered through it, namely the sale of digital Spanish-learning materials and the provision of one-to-one online Spanish lessons. It has been drafted in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
2. Data Controller
Owner: Federico P. Lemos (trading as “SpanishWithFede”)
Tax Identification Number (NIF): 54779822-D
Registered address: Carrer Serra d’Agullent, 46980 Paterna, Valencia, Spain
Email: spanishwithfede@gmail.com
Website: www.spanishwithfede.com
3. Personal Data We Collect
Depending on how you interact with the Website and the services, the following categories of personal data may be processed:
- Contact and enquiry data: name, email address and the content of messages sent through contact forms or by email.
- Lesson booking and student data: name, email address, time zone, scheduling preferences, language level and learning objectives, lesson notes and progress records, and the details reasonably necessary to deliver, invoice and document the lessons.
- Purchase data relating to digital products: digital products are sold through an authorised third-party payment provider acting as merchant of record (the “Payment Provider”). The Payment Provider collects and processes payment and billing data under its own privacy policy. The Controller does not receive or store full payment card details; the Controller may receive limited transaction data such as your name, email address, country, the product purchased and the order reference, for customer support, accounting and tax compliance.
- Billing data for lessons: where lessons are invoiced directly by the Controller, the data required by tax legislation (name, address and, where applicable, tax identification number).
- Newsletter data: email address and, optionally, name, where you subscribe to receive communications.
- Technical data: data collected through cookies and similar technologies, as described in the Cookie Policy.
The data requested in each form is necessary for the stated purpose; failure to provide it may make it impossible to attend to your request or to provide the service. You are responsible for ensuring that the data you provide is accurate and up to date.
4. Purposes and Legal Bases of Processing
Personal data is processed for the following purposes, on the following legal bases:
- Responding to enquiries submitted through the Website or by email — legitimate interest (Art. 6(1)(f) GDPR) and, where the enquiry relates to contracting, pre-contractual measures (Art. 6(1)(b)).
- Providing one-to-one online lessons, including booking, scheduling, delivery, follow-up and customer support — performance of a contract (Art. 6(1)(b)).
- Supplying digital products and providing after-sales support in respect of purchases made through the Payment Provider — performance of a contract and legitimate interest (Art. 6(1)(b) and (f)).
- Invoicing, accounting and tax compliance — compliance with legal obligations (Art. 6(1)(c)).
- Sending newsletters and commercial communications about the Controller’s own services — consent (Art. 6(1)(a)) or the exception in Art. 21.2 LSSI-CE for existing customers. You may withdraw consent at any time via the unsubscribe link or by email.
- Managing cookies and measuring Website performance — consent (Art. 6(1)(a)), except for strictly necessary cookies.
- Establishing, exercising or defending legal claims and preventing fraud — legitimate interest (Art. 6(1)(f)).
Personal data is not used for automated decision-making producing legal effects, nor for profiling beyond basic audience measurement where consented to.
5. Recipients of Personal Data
Personal data is not sold. It may be disclosed to the following categories of recipients, to the extent necessary for the purposes described above:
- The Payment Provider (merchant of record): an independent company that acts as the seller of record for digital products, processes payments and issues the corresponding receipts, acting as an independent data controller under its own privacy policy.
- Service providers acting as processors under Art. 28 GDPR, such as web hosting, email, cloud storage, scheduling, video-conferencing and marketing platform providers.
- Professional advisers, such as accountants or tax advisers, where necessary for compliance with legal obligations.
- Public authorities, including the Spanish Tax Agency, where disclosure is required by law.
6. International Transfers
Some service providers may be located, or may process data, outside the European Economic Area. In such cases, transfers are carried out only to countries recognised by the European Commission as providing an adequate level of protection or subject to appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission, supplemented where necessary by additional measures. You may request further information at the email address above.
7. Data Retention
Personal data is kept for as long as necessary for the purpose for which it was collected and, thereafter, duly blocked, for the periods required to comply with legal obligations. In particular: enquiry data is kept for as long as needed to deal with the enquiry; student and lesson data for the duration of the teaching relationship; invoicing and tax records for the periods required by Spanish tax and commercial legislation (generally between four and six years); and newsletter data until you unsubscribe or withdraw consent.
8. Your Rights
You may exercise the following rights at any time, free of charge, by writing to spanishwithfede@gmail.com and providing information sufficient to verify your identity:
- Access to your personal data;
- Rectification of inaccurate or incomplete data;
- Erasure of your data where it is no longer necessary;
- Restriction of processing in the circumstances provided for in Art. 18 GDPR;
- Data portability, i.e. receipt of your data in a structured, commonly used and machine-readable format;
- Objection to processing based on legitimate interest, including direct marketing; and
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain (www.aepd.es).
9. Security
The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss or disclosure, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as required by Art. 32 GDPR.
10. Minors
The Website and its services are addressed to persons aged eighteen or over. Lessons for minors may only be contracted by a parent or legal guardian, who must provide any personal data relating to the minor and give the corresponding consents. Personal data of minors under fourteen years of age will not knowingly be processed on the basis of the minor’s own consent, in accordance with Art. 7 of the LOPDGDD.
11. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect legislative changes or changes in the processing carried out. The version in force will always be the one published on the Website. Where changes are material, reasonable steps will be taken to inform users.