Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how personal data is processed when you browse or use the website eolymp.com (hereinafter, the "Website"), in accordance with the General Data Protection Regulation EU 679/2016 (hereinafter, "GDPR") and the Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (hereinafter, "LOPDGDD").

Who We Are

Controller: EOLYMP ACADEMY, S.L. (hereinafter, "Eolymp" or "we")
Registered office: Calle del Perú, 186bis - 08020, Barcelona, Spain
Registration details: Commercial Registry of Barcelona, Volume 48547, Folio 20, Section 8, Sheet 587753, Entry 1a
Tax ID: B-72828122
Email: support@eolymp.com

What Data We Process and Why

When you contact us by email or through the forms on the Website, we process your name, email address and any other information you include in your message, in order to respond to your inquiry or claim. The legal basis is the performance of a contract or of steps taken at your request before entering into one (Art. 6.1.b) of the GDPR). We keep these requests for three (3) years after they are closed.

When you register on the Website and use our services, we process your name, username, email address, profile picture, country and date of birth, as well as the content you create on the Website, in order to provide the services you have contracted (Art. 6.1.b) of the GDPR). When you place an order, we also process your billing data, shipping address and telephone number to process and deliver it. We keep this data for the life of your account and delete it within seven (7) days of an account deletion request. Invoices and accounting records are kept for seven (7) years to comply with our legal obligations (Art. 6.1.c) of the GDPR).

If you subscribe to newsletters or marketing communications, we use your email address on the basis of your consent (Art. 6.1.a) of the GDPR), which you may withdraw at any time by unsubscribing.

To protect the Website against abuse, fraud and attacks, we automatically record the IP address, user identifier, requested resource and time of each access. The legal basis is our legitimate interest in keeping the Website secure (Art. 6.1.f) of the GDPR). These records are kept for thirty (30) days.

When you take part in a proctored contest organized by Eolymp itself, your screen and, if so configured, your camera and microphone are recorded for the duration of your participation, so that the contest jury can verify that the contest was conducted fairly. The legal basis is your consent, which you give before the contest starts (Art. 6.1.a) of the GDPR). The recordings are deleted within fourteen (14) days after they are made.

Users under fourteen (14) years of age may only use the Website with the authorization of their legal representatives, in accordance with Article 7 of the LOPDGDD. If you provide us with personal data of other people, you must have informed them and be entitled to share their data with us.

Spaces Managed by Organizations

When an organization, such as a school, a university or a company, creates a space on the Website and invites users into it, we process the personal data within that space on behalf of the organization, as a processor, in accordance with the Data Processing Agreement. For that data, the organization is the controller, and requests regarding it should be addressed to the organization. Where the organization invites users under fourteen (14) years of age, it is responsible for obtaining the authorization of their legal representatives.

This includes proctoring in contests organized by such organizations. When the organizer of a contest enables proctoring, the screen and, if so configured, the camera and microphone of each participant are recorded for the duration of their participation. The organizer is responsible for informing participants and for obtaining their consent. We only store the recordings on behalf of the organizer, do not view or analyze them, and delete them within fourteen (14) days after they are made.

We share personal data only with the service providers that process it on our behalf: Amazon Web Services (cloud hosting and email delivery, European Union), Stripe (payment processing), Holded (invoicing), Sendcloud (shipping of orders), Grafana Labs (monitoring, European Union), PostHog (product analytics, European Union) and, where you use AI features, Anthropic and Braintrust (AI providers). We may also disclose personal data where required by law.

Stripe, Anthropic and Braintrust may process data in the United States. These transfers are carried out with the appropriate safeguards provided for in Chapter V of the GDPR, such as the Standard Contractual Clauses approved by the European Commission.

Your Rights

You can exercise your rights of access, rectification, erasure, opposition, data portability and restriction of processing at any time. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out before its withdrawal. Legal representatives of users under fourteen (14) years of age may exercise these rights on their behalf.

To exercise your rights, you can:

Self-service: Delete your account directly from Account Settings. Upon request, your account will be deactivated immediately and permanently deleted within seven (7) days.
By email: Send a request to support@eolymp.com indicating your name, surname and email address. We will process your request within thirty (30) days of receipt.

You may also file a complaint with the Spanish Data Protection Agency.

Cookies

Information about the cookies used on the Website is available in the Cookie Policy.

Changes to This Privacy Policy

This Privacy Policy will be updated whenever the processing it describes changes. The date of the last update is shown at the top of this page.