Privacy Policy

Río Mares S.L., with registered address in Spain, acts as the data controller for the personal data of users collected through the academIA Platform, under the terms set out in Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights. Any question regarding the processing of personal data may be addressed through the contact channels provided in this policy.

As part of providing its services, the Platform collects and processes the following categories of data: identifying and contact data (name, email address, telephone number when voluntarily provided); service usage data (exercises completed, answer accuracy, session duration, interaction history with the artificial intelligence tutor); technical browsing data (IP address, device type, browser); and billing and payment data, which are processed securely by specialised providers such as Stripe or PayPal, with the Platform not directly storing full payment card data.

Personal data collected is processed for the following purposes: managing the registration and contractual relationship with the user; personalising training paths and exercises proposed by the artificial intelligence system; processing payments corresponding to subscribed plans; sending informational or commercial communications related to the service, provided the user has given consent where legally required; and analysing, on an aggregated and, as far as possible, anonymised basis, Platform usage in order to improve its features and content.

Personal data will be kept for as long as the user's account remains active and, following its cancellation, for the additional periods necessary to comply with legal, accounting or tax obligations or to handle possible claims, with a general additional retention period of three years from the date of cancellation, after which the data will be securely deleted or anonymised, unless a rule requires their retention for a longer period.

The Platform implements technical and organisational measures reasonable and proportionate to the risk, such as encryption of communications, access control, segregation of responsibilities and periodic review of its systems, in order to protect personal data against unauthorised access, loss, alteration or improper disclosure. Nevertheless, the user acknowledges that no system for transmitting or storing information over the internet can be considered absolutely secure, and the Platform therefore cannot guarantee absolute security against incidents beyond its reasonable control.

Platform services are aimed at users of legal age or, where applicable, at minors with the due authorisation of their parents or legal guardians, in the cases and with the limitations applicable under current regulations on the protection of minors in the digital environment. The Platform may request verification of such authorisation where there are reasonable grounds to believe the user is a minor, and may suspend access until this circumstance is duly confirmed.

Users may exercise, at any time, their rights of access, rectification, erasure, restriction of processing, objection and portability of their personal data, as well as withdraw previously given consent, by contacting info@riomares.com and indicating the right they wish to exercise together with the documentation necessary to verify their identity. Users also have the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their data does not comply with applicable regulations.

The Platform uses technical cookies, necessary for its proper functioning and which do not require consent, as well as analytical and personalisation cookies which will only be installed following the user's express acceptance through the corresponding cookie settings panel. Users may change or withdraw their consent at any time by accessing that panel or their browser settings, although disabling certain cookies could affect the availability of some Platform features.

In order to properly provide its services, the Platform may share certain personal data with technology providers located outside the European Economic Area, such as cloud infrastructure providers, artificial intelligence services or payment gateways, always ensuring the existence of the appropriate safeguards required under Article 46 of the GDPR, such as standard contractual clauses approved by the European Commission or other legally recognised international transfer mechanisms.

This Privacy Policy may be modified at any time to adapt it to legislative or case-law developments or to changes in industry practices, as well as to reflect new Platform features. Any substantial modification will be communicated to users with reasonable notice, either by email notification or through a visible notice on the Platform itself, and users are in any case advised to periodically review this policy.

For any query related to the processing of personal data or to exercise the rights recognised under data protection regulations, users may contact info@riomares.com, with the Platform undertaking to handle such requests within the legally established time limits.