Privacy Policy

Last updated: Feb 24, 2026.

Below, we inform you about the privacy policy that will be applied in cases where the data subject, through browsing and/or use of the website www.eolymp.com (hereinafter, the "Website"), provides us with their personal data. We want to inform you about our updated Privacy Policy and the handling of the personal data you provide, including those collected by merely browsing our Website.

Identification of the Responsible Party

Owner: EOLYMP ACADEMY, S.L. (hereinafter, the "Responsible")
Registered office: Calle del Perú, 186bis - 08020, Barcelona, Spain
Registration details: Commercial Registry of Barcelona, Volume 48547, Folio 20, Section 8, Sheet 587753, Entry 1a
Tax ID: B-72828122
Email: support@eolymp.com

In accordance with the General Data Protection Regulation EU 679/2016 (hereinafter, "GDPR") and the Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (hereinafter, "LOPDGDD"), by accepting this Privacy Policy, the web data subject (hereinafter, the "Interested Party") GIVES THEIR INFORMED, EXPRESS, FREE, AND UNEQUIVOCAL CONSENT for the processing of personal data collected through the Website, whether through forms provided for this purpose or through information collected by cookies.

Furthermore, the Interested Party consents to these data being processed by the Responsible to provide its services applying the organizational and security measures required by the GDPR.

All personal data requested from the Interested Party on the Website are mandatory, as it is not possible to provide the service without the corresponding data processing by the Responsible. However, browsing the Website is free.

The Interested Party guarantees that the personal data provided to the Responsible are true and accurate, so the Responsible will not be liable for any issue arising from the inaccuracy or falsehood of the information provided by the Interested Parties, beyond the possibility that the Interested Party has to exercise their right of rectification.

In the event that the Interested Party provides us with data of third parties, as the responsible or processor, they will be responsible for complying with all applicable data protection regulations. Moreover, the Interested Party guarantees that they have obtained all the necessary consents, authorizations, and/or approvals legally required before including personal data of third parties on the Website.

Origin, Purpose, and Legal Basis

The personal data of the Interested Party, or of third parties provided by the Interested Party, will be treated confidentially and incorporated into the corresponding processing activity of the Responsible.

The processing activities carried out by the Responsible are as follows:

Activity: Contact, Inquiries, Claims Management, Service Provision

Origin

From the Interested Party through sending emails to the indicated address, the contact form, using any telephone number, or email address provided through the Website.

Legal Basis

General Data Protection Regulation, specifically:

Art. 6.1.b): processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Purposes of Processing

To attend to and respond to the inquiries and/or claims made by the Interested Party, as well as to provide the contracted services.

Group

Individuals and/or legal entities

Category of Data

Name, surname, email address, telephone, as well as any other data that the Interested Party indicates in the body of the message or in the forms on the Website.

Recipients

Data transfer to third parties is not planned, except under legal obligation or prior unequivocal and informed consent of the Interested Party.

International Transfer

International transfer of data is not planned.

Retention Periods

Data will be retained for the strictly necessary period to fulfill the purpose for which they were collected.

Activity: Registration on the Platform and Execution of the Contract

Origin

From the Interested Party through the Platform.

Legal Basis

General Data Protection Regulation, particularly:

Art. 6.1.a): the data subject has given consent to the processing of his or her personal data;
Art. 6.1.b): processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Art.6.1.f): processing is necessary for the purposes of the legitimate interests pursued by the controller.

Purposes of Processing

Execution of the provision of services contracted by the Interested Party;

Attend to requests and/or petitions of the Interested Party;

Commercial and marketing purposes.

Group

Individuals, including representatives of legal entities, who have contracted the services offered by the Responsible through the Platform.

Category of Data

Name, surname, nationality, email address, telephone number, billing data, age, shipping, billing, or other information provided by the Interested Party for the purpose of contracting the services offered by the Responsible through the Platform.

International Transfer

International data transfer is not planned.

Recipients

Data transfer to third parties is not planned, except under legal obligation or prior unequivocal and informed consent of the interested party.

Retention Periods

Data will be retained for the strictly necessary period to fulfill the purpose for which they were collected.

Data Subject Information

The Data Subject guarantees that they are over fourteen (14) years of age and that the data provided are true, accurate, complete, and up-to-date, being responsible for any damage or loss, direct or indirect, that could be caused as a result of the failure to meet this obligation, in addition to the possibility that the Data Subject has to exercise their right to rectification.

In the event that the data provided belong to a third party, the Data Subject guarantees that they have informed said third party of the aspects contained in this document and obtained their authorization to provide their data to the controller for the purposes mentioned above.

The Controller cannot guarantee the absolute invulnerability of the systems, therefore, assumes no responsibility for damages and losses that could result from alterations that third parties may cause in the computer systems, electronic documents, or files.

In accordance with the GDPR and Law 34/2002, on Information Society Services, all personal data obtained through cookies during the use of the Website will be processed in accordance with the Cookie Policy.

Exercise of Rights

In accordance with the provisions of the GDPR, we inform you that you can exercise your rights of access, rectification, deletion, opposition, data portability, and restriction of processing directly with the Controller.

To exercise these rights, the Data Subject may:

Self-service: Delete your account directly from Account Settings in the Platform. Upon request, your account will be deactivated immediately and permanently deleted within 7 days.
By email: Send a request to support@eolymp.com indicating your name, surname, and email address. We will process your request within 30 days of receipt.

The Data Subject may also exercise their rights by filing a complaint with the Spanish Data Protection Agency.

Acceptance of the Privacy Policy

The Data Subject acknowledges and agrees to have read and understood this Privacy Policy, the content of which constitutes the entire agreement between the Data Subject and the Controller regarding the use and processing of their personal information. The Data Subject expressly agrees to be bound by the terms of this Privacy Policy, in its entirety and scope, without excluding any of its provisions.

Express acceptance of this document will be essential when the User navigates and/or uses the Website.