top of page
ThinkCyber Innovations SL Logo

Privacy Policy

Last updated:  2026/07/16

1. Data controller

2. What data we collect

  • Contact form: the data you enter (typically name, email address, company, and your message). Providing it is voluntary; without it we cannot answer your inquiry.

  • Customer account: to purchase online you create an account with your email address and a password, or by signing in with Google or Facebook (in which case we receive your name and email address from that provider). Account creation is protected by Google reCAPTCHA.

  • Purchase and billing data: first name, last name, phone number, the items purchased and the data required for invoicing. Payment is processed by our payment service provider (Stripe); we never see or store your full card details.

  • Technical data: our website platform (Wix) processes technical information strictly necessary to deliver the site (see the Cookie Policy). We use Wix's built-in, privacy-focused visitor statistics; we do not use Google Analytics or advertising trackers.

 

We do not knowingly collect data from minors under 14.

3. Why we process it and on what legal basis

  • Answering your inquiry and managing the resulting professional relationship — legal basis: pre-contractual/contractual steps taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in responding to inquiries addressed to us (Art. 6(1)(f) GDPR).

  • Managing your customer account and delivering the training programs, bundles or certification vouchers you purchase — performance of a contract (Art. 6(1)(b) GDPR).

  • Invoicing and tax obligations (Art. 6(1)(c) GDPR).

  • Security and fraud prevention on account creation and checkout (Art. 6(1)(f) GDPR).

 

We do not send newsletters, we do not sell your data, and we do not use your data for automated decision-making or profiling.

4. Who receives your data

Form submissions, account data and orders are stored on our website platform, operated by Wix.com Ltd. (Israel), acting as data processor under its Data Processing Agreement, and are received and handled by our team. Israel is covered by a European Commission adequacy decision; where Wix uses sub-processors outside the EEA, transfers are covered by the safeguards in Wix's DPA (including Standard Contractual Clauses). In addition: Stripe (Stripe Payments Europe, Ltd.) processes your payment as an independent payment institution; Google (reCAPTCHA) processes technical data to protect account creation; if you sign in with Google or Facebook, those providers act as independent controllers of your login; and to give you access to purchased training, enrollment data is processed on the Cyberium Arena platform (ThinkCyber LTD). We do not share your data with third parties for their own purposes.

5. How long we keep it

Inquiry data is kept for as long as needed to handle your request and any resulting business relationship. Account and purchase data are kept for the duration of your account and, after that, for the periods required by tax and commercial law (invoicing records). Thereafter data is kept only as long as the defense of legal claims requires.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability, and objection by writing to legal@thinkcyber-innovations.com, enclosing proof of identity. You may also lodge a complaint with the Spanish supervisory authority (Agencia Española de Protección de Datos, www.aepd.es).

7. Security

We apply appropriate technical and organizational measures, and our platform provider (Wix) maintains certified security programs, to protect your data against unauthorized access, alteration, or loss.

bottom of page