Privacy and Cookies Policy

Privacy Policy

Who are we?

We are CASTLEFLAME and we process your personal data as Data Controllers. This means that we are jointly responsible for how we use and protect your data. Here are all our details:

Name: CASTLEFLAME
E-Mail: [email protected]

At CASTLEFLAME, we recognize the importance of protecting your personal information and are committed to treating it responsibly and in accordance with data protection laws.

What is personal data and how do we use your data?

Personal data is information that identifies you or makes you identifiable. Through the website, in the boxes provided for this purpose, we collect the personal data that you as a user communicate to us: Name, surname, email, phone, postal address, city, etc.

Your visit to the website does not imply that you have to provide any information about your personal data. However, if you do provide it, the data will be processed lawfully, subject at all times to the principles and rights contained in GDPR 2016/679 of April 27, 2016, and Spanish Law LOPD-GDD 3/2018 of December 5.

We will use your data (obtained online or in person), among other purposes, to manage your user registration, manage the purchase of products or services, address your inquiries, as well as, if you wish, to send you our personalized communications.

Depending on the products, services, or functionalities you want to enjoy at any given time, we will need to process different types of data.

Remember that when we ask you to fill in your personal data to give you access to any functionality or service of the Platform, we will mark some fields as mandatory, since these are data we need to provide you with the service or give you access to the functionality in question. Please keep in mind that if you decide not to provide us with this data, you may not be able to complete your user registration or may not be able to enjoy these services or functionalities.

In other cases, we may obtain information passively when using tracking tools, such as browser cookies or other similar technologies from our Platform or from the communications we send you.

Depending on how you interact with our Platform, we will process your personal data for the following purposes:

• To address the request or petition made through the contact form located on the website. We collect and process the user's personal data to process and manage their request, an inquiry, or any petition made through said form. We will keep this data for the time necessary to fulfill your request and subsequently for archival purposes. The legal basis for processing the data will be the consent that you yourself grant us by selecting the acceptance box of our privacy policy before sending the request. Remember that you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Send bulletins and newsletters about CASTLEFLAME products with your consent. We collect and process your personal data to send you information about our products and services. We will keep this data as long as you do not revoke your consent to their processing and for the time established by law with a minimum duration of 3 years; subsequently, they will be kept for archival purposes. The legal basis for processing the data will be the consent that you yourself grant us by selecting the acceptance box of our privacy policy before sending the request. Remember that you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Improve your experience when browsing the website. We will keep this data as long as you do not revoke your consent to their processing by deleting the cookies and for the time established by law with a minimum duration of 3 years. The legitimate basis for improving your browsing experience on the website is the consent you grant by accepting cookies. Remember that you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• To manage your registration as a Platform user. If you decide to register as a user on our Platform (because you access any of our courses, for example), we need to process your data to identify you as a Platform user and give you access to its different functionalities, products, and services that are available to you as a registered user. You can cancel your registered user account by contacting us. The processing of your data is necessary for the execution of the terms that regulate the use of the Platform. In other words, for you to register as a user on the Platform, we need to process your personal data, as otherwise, we could not manage your registration. We consider that we have a legitimate interest to link to your account your purchases and the data we collect about your activity through the different Platform channels.
• For the development, fulfillment, and execution of the service provision contract that you have contracted with Us on the Platform. This purpose includes processing your data primarily to:
  • Contact you regarding updates or informative communications related to the contracted functionalities, products, or services, including sending quality surveys about the products or services provided
  • Manage payment for the products you purchase
  • Activate necessary mechanisms to prevent and detect improper use of the Platform, for example, during the purchase and return process, as well as potential fraud against you and/or against Us. If we consider that the operation may be fraudulent or detect abnormal behaviors with signs of fraudulent use of our functionalities, products, and services, this processing may have consequences such as blocking the transaction or canceling your user account
  • Manage possible changes or returns once you have made a purchase and manage requests for information about product availability, reservations of products through the Platform, according to these options being available at any time. For billing purposes and to make available to you the tickets and invoices of the purchases you have made on the Platform. The legitimate basis is the fulfillment of the current contract between us. Remember that you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• For marketing purposes. This purpose includes processing your data primarily to:
  • Personalize the services we offer you and be able to make recommendations based on your interaction with us
  • To the extent that you subscribe to our Newsletter, we will process your personal data to manage your subscription, including sending personalized information about our products or services through various means (such as email or SMS). Likewise, we may send you this information through push notifications if you have activated them on your device
  • Show you advertising on the Internet that you may see when visiting websites and apps, for example, on social networks. The advertising you see may be displayed randomly, but on other occasions, it may be advertising that could be related to your preferences and browsing

The legal basis for processing the data will be the consent that you yourself grant us by selecting the acceptance box of our privacy policy before sending the request. Remember that you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Who do we share your data with?

We will share your data with service providers who help or support us. Apart from this, your data will not be communicated or transferred to third parties unless there is a legal obligation.

Additionally, you can rest assured that no international transfers are made. In case they might be made at some point, you will be notified in order to obtain your consent.

It is important that in order for us to keep personal data updated, you always inform us when there has been any modification to them. Additionally, you need to guarantee that the personal data provided is truthful by ensuring that all information provided corresponds to your real situation, is up to date and accurate.

What are your rights when you provide us with your data?

You have the right to access, rectify, or delete your personal data. In some cases, you also have other rights, for example, to object to us using your data or to port them.

We commit to respecting the confidentiality of your personal data and to guaranteeing the exercise of your rights. As Controllers, we understand that you can exercise them at no cost by writing us an email to a single email address [email protected], simply indicating the reason for your request and the right you want to exercise, and we will give you instructions to carry it out. If we consider it necessary to identify you, we may request a copy of an identity document.

What happens if you provide us with third-party data or if a third party has provided us with your data?

If you provide us with Personal Data of third parties or if it becomes necessary for them to provide it to us due to a third party collecting an order in your name, you guarantee that you have informed them about the purposes and the way in which we need to process their personal data.

If a third party has provided us with your data or you have provided them yourself as a result of a functionality or service requested by one of our users, we will use them to manage the functionality or service being developed in each case, within the purposes included in this Privacy and Cookies Policy, whose link we usually include in our communications.