Data protection

Privacy policy

1. Data controller

The controller responsible for processing the personal data collected on this website is Jose Angel Pais Yanes, holder of ID 42167184L, residing on the island of La Palma (Canary Islands, Spain). You can contact us through the contact form or the email address provided in the contact section of this website.

2. Data we collect

We collect personal data that the user provides to us directly, such as name, email address, phone number or any other information you choose to share when contacting us or enrolling in the courses.

We also automatically collect browsing, technical and usage data, such as IP address, device type, browser used or pages visited, through cookies and analytics tools. You can find more information in our Cookie Policy.

3. Purposes of processing

Personal data is used for the following purposes:

  • Managing enquiries, requests and communications with users.
  • Providing access to purchased courses and content.
  • Sending commercial communications, newsletters or news, provided the user has given prior consent.
  • Improving the user experience, the functioning of the website and the quality of our services.
  • Complying with legal obligations and requirements from competent authorities.

4. Legal basis

Data processing is based on the performance of a contract or provision of a service, the user's explicit consent, the controller's legitimate interest, or compliance with legal obligations, as applicable in each case.

5. Data retention

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and to determine any liabilities that may arise from that purpose and the processing of the data. Once that period has elapsed, the data will be securely deleted.

6. Data sharing

We do not sell or transfer personal data to third parties. We may only share information with technology, hosting or communication service providers that help us operate the website and provide our services, always under contract and with guarantees of confidentiality and security.

7. User rights

As a user, you have the right to access, rectify, erase, restrict or object to the processing of your data, as well as the right to data portability. You may also withdraw your consent at any time.

To exercise these rights, you can send a written request together with a document proving your identity through the contact form or the email address provided on this website.

8. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or destruction. However, no system of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security.

9. Changes to this policy

This privacy policy may be updated to reflect changes in our practices or in applicable regulations. The current version will always be available on this page, and we recommend reviewing it periodically.

10. Contact

If you have any questions about this privacy policy or about the processing of your data, you can contact us through the contact section of this website.

Processing of Data in the Virtual Campus (campus.japyaroundworld.com)

This section supplements the general Privacy Policy of JAPY Around World and specifically governs the processing of personal data carried out through the Virtual Campus available at campus.japyaroundworld.com.

Virtual Campus · 1. Data Controller

Holder: Jose Angel Pais Yanes. DNI: 42167184L. Address: Isla de La Palma (Canary Islands, Spain).

  • Contact: through the form or the contact channels enabled at japyaroundworld.com
  • Website: japyaroundworld.com
  • Virtual Campus: campus.japyaroundworld.com

Virtual Campus · 2. What Data We Process

The Virtual Campus is an online training platform based on Moodle. When you create an account, enrol in a course or use the platform, we may process the following categories of personal data.

Registration and identification data: first name, surname, email address, username and password. Passwords are not stored in readable text, but through the protection mechanisms and cryptographic functions used by the platform. We may also process other data that you voluntarily choose to add to your profile, such as city, country or other information available in Moodle.

Training activity data: in order to manage and certify your participation in the courses, we may record:

  • Courses in which you are enrolled and enrolment date.
  • Access to and participation in the content.
  • Progress and completion of activities.
  • Grades obtained, attempts and quiz results.
  • Results of SCORM content or other training resources.
  • Participation and messages posted in forums.
  • Assignments, documents, images or other files you upload to the activities.
  • Certificates or accreditations obtained.

This data is necessary to properly manage the training and carry out the corresponding academic monitoring.

Technical data and access logs: Moodle and the Virtual Campus's technological infrastructure may automatically generate technical records such as the IP address, date and time of access, browser used, operating system or device, pages visited, actions performed within the platform, login attempts and other records related to the security and operation of the service. These are used to ensure the proper functioning of the platform, resolve technical incidents, maintain security and prevent unauthorised or abusive access.

Payment-related data: JAPY Around World does not directly store full bank card numbers or the credentials used to make payments through PayPal. When payment for a course is made through PayPal, the processing is carried out through that provider's infrastructure. Our systems may only retain the information necessary to identify and manage the transaction: transaction identifier, amount, currency, transaction date, payment status, and course or service purchased.

Communications: we may also process the content of the queries, requests or communications you send us by email, forms or any other support channel related to the Virtual Campus.

Virtual Campus · 3. What We Use Your Data For and on What Legal Basis

Personal data will be processed for the following purposes, on the legal bases indicated:

  • Creating and managing your user account and providing you with access to the Virtual Campus and the courses purchased — performance of a contract or pre-contractual measures, art. 6(1)(b) GDPR.
  • Managing course enrolments — performance of a contract, art. 6(1)(b) GDPR.
  • Recording your progress, participation, activities and grades — performance of a contract, art. 6(1)(b) GDPR.
  • Issuing certificates or completion accreditations where applicable — performance of a contract, art. 6(1)(b) GDPR.
  • Managing payment for courses — performance of a contract, art. 6(1)(b) GDPR.
  • Managing invoicing and complying with tax and accounting obligations — compliance with a legal obligation, art. 6(1)(c) GDPR.
  • Handling queries and providing technical or pedagogical support — performance of a contract, art. 6(1)(b) GDPR, and legitimate interest, art. 6(1)(f) GDPR.
  • Maintaining the security of the Virtual Campus and preventing automated access, fraud, abuse or unauthorised access — legitimate interest, art. 6(1)(f) GDPR.
  • Resolving technical incidents and ensuring the proper functioning of the service — legitimate interest, art. 6(1)(f) GDPR.
  • Complying with legal, tax, accounting and administrative obligations — compliance with a legal obligation, art. 6(1)(c) GDPR.
  • Sending commercial information about new courses, content, promotions or news — consent, art. 6(1)(a) GDPR.

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.

Automated decisions: we do not carry out automated decision-making or profiling that produces legal effects on the user or significantly affects them in a similar way. The automatic systems for tracking progress, grading quizzes, calculating grades or marking activities as complete used by Moodle serve exclusively educational, administrative and training-accreditation purposes.

Virtual Campus · 4. How Long We Retain the Data

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected and, subsequently, for the periods necessary to address any potential legal liabilities. As a general rule:

  • Account and profile data: for as long as the account remains active or is necessary to provide the contracted services. When you request deletion of the account, the data will be deleted or anonymised as appropriate, without prejudice to data that must be kept blocked in order to comply with legal obligations.
  • Training activity and grade data: up to 3 years from completion of the course, in order to certify completion and achievement of the training, manage incidents and allow for the re-issuance of certificates.
  • Technical and security logs: a maximum of 365 days, unless it is necessary to retain them for longer to investigate a security incident, fraud, improper access or to comply with a legal obligation.
  • Invoicing and transaction data: for the periods legally established under applicable tax, fiscal and commercial regulations.
  • Data for commercial communications: until you withdraw your consent or request to stop receiving them.

The deletion of certain data from active systems may not entail its immediate disappearance from backup copies, which will be retained during the established technical retention cycles and will remain protected against ordinary access.

Virtual Campus · 5. Who We Share Your Data With

JAPY Around World does not sell or transfer users' personal data to third parties for commercial purposes. In order to provide the service, certain technology providers may access or process personal data on behalf of JAPY Around World where necessary:

  • IONOS — infrastructure, server hosting and technological services for the Virtual Campus (European Union).
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. — processing of payments for courses and services (Luxembourg / European Union).
  • Google Ireland Limited — protection services against automated access when Google reCAPTCHA is used (European Union, with possible international transfers).
  • Google Ireland Limited / YouTube — hosting and playback of audiovisual content when YouTube videos are embedded in courses (European Union, with possible international transfers).

These providers may only process the data necessary to provide the corresponding services and will be subject to the contractual terms and guarantees established by data protection regulations.

Personal data may also be disclosed to Public Administrations, the Tax Agency, Law Enforcement Forces, Courts and Tribunals or other competent authorities, solely where there is a legal obligation or a valid request from the competent authority.

Virtual Campus · 6. International Data Transfers

Certain technological services used in the Virtual Campus may involve the processing of information outside the European Economic Area. In particular, the services provided by Google Ireland Limited, such as Google reCAPTCHA or YouTube, may involve access to or processing of certain data from the United States or other countries.

Where international data transfers occur, the mechanisms and safeguards provided for under the General Data Protection Regulation will be used, including, where applicable:

  • Adequacy decisions issued by the European Commission.
  • The EU-U.S. Data Privacy Framework, for entities validly adhering to it.
  • Standard Contractual Clauses approved by the European Commission.
  • Other safeguards permitted under articles 44 et seq. of the GDPR.

The main infrastructure used to host the Virtual Campus is located within the European Union.

Virtual Campus · 7. Your Rights

In relation to your personal data, you may exercise the rights recognised under data protection regulations:

  • Access: to find out what personal data we process about you.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure: to request the deletion of your data where the legally established circumstances apply.
  • Objection: to object to certain processing based on our legitimate interest.
  • Restriction: to request that we temporarily restrict the processing of your data.
  • Portability: to receive certain data in a structured, commonly used and machine-readable format where legally applicable.
  • Withdrawal of consent: to withdraw previously given consent at any time.

You may exercise these rights through the contact channels enabled at japyaroundworld.com, clearly indicating which right you wish to exercise. Where necessary to guarantee the security of the request, we may ask you for additional information to verify your identity.

Certain operations may also be available directly from your Virtual Campus profile, depending on Moodle's configuration, including the modification of personal information or tools related to privacy and data export.

Complaints: if you believe that the processing of your data infringes data protection regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.

Virtual Campus · 8. Minimum Age

The Virtual Campus is generally intended for persons aged 14 or over. By registering, you declare that you have the age required to provide your personal data and use the platform in accordance with applicable regulations.

Where a person under the age of 14 needs to use the Virtual Campus, the processing of their data must, where legally required, be authorised by the holder of parental authority, guardianship or legal representation.

If we detect that an account has been created belonging to a person under the legally permitted age without the corresponding authorisation, we may block or delete that account and take the necessary measures to erase the associated personal data.

Virtual Campus · 9. Information Security

JAPY Around World applies technical and organisational measures designed to maintain a level of security appropriate to the risk and to protect personal data against destruction, loss, alteration, disclosure or unauthorised access. The measures used in the Virtual Campus may include:

  • Encrypted connections via HTTPS.
  • Access through personal credentials.
  • Secure protection and storage of passwords.
  • Access control systems and logging of access and activity.
  • Protection against automated access attempts.
  • Periodic updating and maintenance of the platform.
  • Backup copies and restriction of administrative access.
  • Security measures over the server and technological infrastructure.

Nevertheless, no system connected to the Internet can guarantee absolute security. In the event of a security breach that may pose a risk to the rights and freedoms of individuals, the management and notification procedures established under current regulations will be applied.

Virtual Campus · 10. Relationship with the General Privacy Policy

This section specifically governs the processing of personal data carried out on the Virtual Campus available at campus.japyaroundworld.com.

For any processing related to the main website, forms, browsing, cookies or other services of JAPY Around World, the general Privacy Policy available at japyaroundworld.com shall likewise apply.

Should any discrepancy exist between the two policies in relation to processing carried out specifically within the Virtual Campus, the more specific information contained in this section shall prevail for such processing.

Virtual Campus · 11. Amendments

JAPY Around World may update this information whenever the Virtual Campus's functionalities, the providers used, the purposes of processing or applicable regulations change. The current version will be available on the Virtual Campus or linked from japyaroundworld.com.