Privacy Policy
Last updated: May 4, 2026
IMPORTANT: All information below is a free translation, prepared in good faith, of the original Spanish Privacy Policy of UCADEMY ACCESO UNIVERSIDAD S.L. (an entity based in Madrid, Spain). In the event of any discrepancy or legal dispute, the Spanish version shall prevail over the English translation.
This Privacy Policy describes how we process your personal data when you use our website, contact us or purchase our services. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Company name: UCADEMY ACCESO UNIVERSIDAD S.L.
- CIF: B25983933
- Address: Paseo de la Castellana 178-bis, 2nd floor, 28046 Madrid, Spain
- Email: info@atlasexam.com
- Data Protection Officer (if applicable): info@atlasexam.com
2. Data we process
We process the following categories of data:
- Identification and contact data: first name, surname, email address, telephone number, country.
- Academic and educational-interest data: previous studies, programme of interest, academic situation.
- Browsing data: IP address, device identifiers, pages visited, time spent, collected through cookies with your consent (see Cookie Policy).
- Commercial data: when you purchase a course, billing and payment information.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your requests for information or contact. | Consent (Art. 6.1(a) GDPR). |
| Managing enrolment and providing the contracted educational service. | Performance of a contract (Art. 6.1(b) GDPR). |
| Complying with legal obligations (tax, accounting, educational). | Legal obligation (Art. 6.1(c) GDPR). |
| Sending commercial communications about our services. | Consent or legitimate interest where a prior contractual relationship exists. |
| Analysing use of the Site and measuring campaigns. | Consent through the cookie banner. |
4. Retention periods
- Contact data without a purchase: up to 12 months from the last interaction or until you withdraw your consent.
- Student data: during the contractual relationship and, once it has ended, for the applicable statutory limitation periods (tax and commercial).
- Cookie data: see the specific duration in the Cookie Policy.
5. Recipients and data processors
We only share your data with third parties when necessary to provide the service or comply with a legal obligation:
- Infrastructure providers: hosting, email, virtual campus, productivity tools.
- Measurement and advertising providers: Google (Analytics, Ads), Meta, TikTok, always with your prior consent.
- Payment and billing platforms: when you purchase a service.
- Public authorities: when there is a legal obligation.
6. International transfers
Some providers (Google, Meta, TikTok) may process data in countries outside the European Economic Area. In those cases, the transfers are covered by standard contractual clauses approved by the European Commission or by adequacy frameworks such as the EU–US Data Privacy Framework, as applicable.
7. Your rights
You may exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure(«right to be forgotten»).
- Objection to processing.
- Restriction of processing.
- Data portability to another controller.
- Withdraw consent at any time, without retroactive effect.
- Not to be subject to automated decisions with significant legal effects.
To exercise these rights, write to us at info@atlasexam.com, indicating the right you wish to exercise and, if you consider it necessary, a copy of a document proving your identity.
If you believe that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.
8. Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure.
9. Changes to this policy
We may modify this policy to reflect legal, technical or business changes. We will inform you of substantial changes through the usual channels and, where appropriate, request new consent.