Draft pending legal review. Items in [brackets] must be completed with the company's details before launch.
Privacy Policy
Last updated: 11 October 2026
This policy explains what personal data Aterriza collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).
Who is responsible
[Company legal name], [tax ID / NIF], [registered address], Spain. Contact for privacy matters: [privacy email].
What we collect
Account data: your name, email address and, if you use email sign-in, a securely hashed password (we never store or see your password itself). If you sign in with Google we receive your name, email and profile picture from Google.
Profile data you give us during setup: why you're in Spain, native language, the country you come from, arrival date, length of stay and daily goal. All of it except your name is optional or editable.
Learning data: lessons completed, answers, XP, streaks, mistakes and conversations with the AI tutor, so we can show your progress and personalise practice.
Technical data: session records (date, IP address and browser) to keep your account secure.
Where you came from when you signed up: the name of our page whose button you pressed (for example “guide: menú del día”). Nothing about other websites you visit.
If you ask for our free PDF: your email address, the page you asked from, whether you also accepted occasional tips and offers, and how many times you downloaded it.
Website statistics: we count visits to our public pages without cookies and without identifiers — only the page, the website that linked to it and whether it was a phone or a computer. We don't store your IP address for this, so these statistics can't be linked to you. If your browser sends Global Privacy Control or Do Not Track, we don't count your visit at all.
Why we use it (legal basis)
To provide the course you signed up for — creating your account, saving progress and personalising lessons (performance of a contract, GDPR art. 6.1.b).
To keep the service secure and prevent abuse (legitimate interest, art. 6.1.f).
To send you the free PDF you asked for (your consent, art. 6.1.a). Tips and offers by email only if you tick that separate, optional box (consent, art. 6.1.a, and LSSI art. 21). You can withdraw consent at any time with the link in every email.
To understand which of our pages help people — the anonymous visit statistics and where sign-ups came from (legitimate interest, art. 6.1.f).
We do not sell your data and we do not use it for advertising.
Who we share it with
Service providers that host and run the platform on our behalf under data processing agreements: [hosting provider], [database provider], [email provider] and, once the AI tutor is connected, [AI provider]. Where providers are outside the EEA we rely on adequacy decisions or the EU Standard Contractual Clauses.
How long we keep it
While your account is active. When you delete your account, your account, profile, progress and tutor conversations are deleted immediately; backups are overwritten within [30] days.
Free PDF contacts: until you delete your email with the link in any of our emails, or ask us to. Visit statistics contain no personal data and are deleted after 25 months.
Your rights
You can access, correct, export and delete your data at any time from Account → Your data, or by emailing [privacy email]. You can also object to or restrict processing.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).
Children
The service is intended for adults. If you are under 14, you need a parent or guardian's consent to use it.