Data controller. Centro de Estudios en Genómica y Nutrición SL (CESGEN), CIF B25759184, Parc Científic i Tecnològic Agroalimentari de Lleida (Agrobiotech Lleida), Turó de Gardeny, building 23A, 25003 Lleida, Spain. Contact for data protection matters: contacto@cesgen.com or our contact form.
What data we collect and why
Contact form. Name, email address, topic and message, used to answer your enquiry. Legal basis: your consent and the steps you request before any contract (Article 6(1)(a) and (b) GDPR). Kept for as long as needed to deal with your enquiry and for up to 12 months afterwards.
Student account and enrolment. Name, email address, password (stored encrypted), billing details (name, company, address, country, postcode and, if you choose to give it, your tax ID or VAT number) and your course progress, quiz results and certificates. Used to provide the courses you enrol in, issue invoices and certificates, and give support. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and legal obligations for invoicing and accounting (Article 6(1)(c) GDPR). Kept while your account is active and, for billing records, for the periods required by Spanish tax and commercial law (generally six years).
Free downloadable resources. Name and email address when you request a guide. Used to send you the guide and, only if you tick the box, to inform you about courses. Legal basis: consent (Article 6(1)(a) GDPR). You can withdraw consent at any time.
Technical data. IP address and browser data processed automatically to keep the website secure and working. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Visit statistics. We count page views with Koko Analytics, a tool that runs on our own server. It uses no cookies, does not store your IP address and does not identify you or follow you across pages or websites; it only records totals, such as how many times each page was viewed and which website referred the visit. No data is sent to third parties. Legal basis: legitimate interest in understanding which content is useful (Article 6(1)(f) GDPR).
Fraud prevention at checkout. When you pay for a course, the checkout page uses Google reCAPTCHA to check that the payment is made by a person and not by an automated fraud attempt. reCAPTCHA collects technical data such as your IP address, browser and device information and how you interact with the page, and sends it to Google for analysis. It runs only on the basket and checkout pages, not on the rest of the website, and it is skipped for students who are already signed in. Legal basis: our legitimate interest, and that of our payment provider, in preventing payment fraud (Article 6(1)(f) GDPR). The service is provided by Google Ireland Limited, and Google processes this data under its own privacy policy. Data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework.
Who processes data on our behalf
We use service providers that process data only on our instructions and under data processing agreements: Webempresa (website hosting, on servers in the European Union); Web3Forms (delivery of contact form messages); PayPal (payment processing; PayPal acts as an independent controller for its own payment data); Bunny.net (video delivery); and Google (reCAPTCHA fraud protection at checkout, as described above). Some of these providers may transfer data outside the European Economic Area; where they do, transfers rely on adequacy decisions or standard contractual clauses.
We do not sell your data and do not use it for automated decisions that have legal effects on you.
Your rights
You can request access to, rectification or erasure of your data, restriction of or objection to its processing, and data portability, and you can withdraw consent at any time, by writing to contacto@cesgen.com or using our contact form. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Health and genetic data
Our courses teach about genetic and health data, but this website does not ask you to upload your own genetic or health data. Please do not send such data through the contact form.