Last updated: 17/08/2026
1. Who Is Responsible for Your Data
- Data Controller: Kairo Diploma
- Tax ID: B12345678
- Address: Valencia, 46002
- Contact email for privacy matters: [privacy@kairodiploma.com]
2. What Data We Collect
Depending on how you use this site, we may collect:
- Automatically collected data: IP address, browser type, device information, pages visited, and time spent on the site, collected via cookies and similar technologies (see our full [Cookie Policy])
- Data you provide directly: if you subscribe to our newsletter, contact us through a form, or leave a comment, we collect the information you submit (typically name and email address)
- Advertising data: third-party advertising partners (including Google AdSense) may collect data via cookies to serve personalized ads, subject to your consent preferences (see Section 6)
3. Legal Basis for Processing
Under the RGPD, we process your data based on:
- Consent (Art. 6.1.a RGPD) — for non-essential cookies, personalized advertising, and newsletter subscriptions
- Legitimate interest (Art. 6.1.f RGPD) — for essential site functionality and basic, non-personalized analytics
- Legal obligation (Art. 6.1.c RGPD) — where applicable, for tax and accounting record-keeping related to any commercial activity on the site
4. Purpose of Data Processing
We use your data to:
- Operate and improve the functionality of the website
- Send newsletter content, if you’ve subscribed (you can unsubscribe at any time)
- Respond to inquiries submitted through our contact form
- Serve relevant advertising, where you’ve consented to this
- Comply with applicable legal obligations
5. Data Sharing with Third Parties
We share data with the following categories of third parties, strictly for the purposes described above:
- Advertising partners (e.g., Google AdSense) — to serve and measure advertising, subject to your cookie consent
- Analytics providers — to understand site usage and improve content
- Email service providers — if you subscribe to our newsletter
- Affiliate partners — where you click through to a partner service (see our [Advertising & Affiliate Disclosure])
We do not sell your personal data. Some of these providers may process data outside the European Economic Area (EEA); where this occurs, we rely on adequacy decisions or Standard Contractual Clauses as required by the RGPD.
6. Cookies
This site uses cookies. Full details on what cookies we use, their purpose, and how to manage your preferences are available in our separate [Cookie Policy]. You can withdraw or modify your cookie consent at any time via the cookie preference settings on this site.
7. Children’s Privacy
This section requires professional legal review given the demographic of this site.
Kairo Diploma is intended for an audience that includes minors (typically 16-19 years old, IB Diploma students). We do not knowingly collect personal data from children under the age of 14 (the age of independent consent for information society services under Spanish law) without appropriate parental or guardian consent. If you believe we have inadvertently collected data from a child under this age without appropriate consent, please contact us at [privacy@kairodiploma.com] so we can remove it.
Where users aged 14-17 provide personal data (e.g., through a newsletter signup), we rely on their capacity to consent under Spanish law, but limit data collection to what is strictly necessary for the stated purpose, and avoid using behavioral advertising targeting based on precise personal characteristics where feasible.
8. Your Rights Under the RGPD
As a data subject, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing in certain circumstances
- Data portability
- Object to processing, including for direct marketing purposes
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, contact us at [privacy@kairodiploma.com]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es if you believe your rights have been violated.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law (e.g., tax-related records, where applicable, are retained per Spanish accounting law requirements).
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be indicated by updating the “Last updated” date at the top of this page.

