Last updated: [DATE] · Controller: [YOUR NAME / COMPANY], [ADDRESS], [EMAIL]
We ask you questions about your studies and circumstances, match your answers against a database of published funding programmes, and show you an estimate of what you may be eligible for. If you buy a report, we send you a document explaining each opportunity and how to apply. We do not award funding and we do not apply on your behalf.
| Data | Why | Legal basis |
|---|---|---|
| Your answers (university, region, town, destination, duration, grant status, previous mobility) | To calculate your estimate and produce your report | Contract / pre-contractual steps (Art. 6(1)(b)) |
| Email address | To send your result and your report | Contract (Art. 6(1)(b)) |
| Special circumstances you optionally tick: recognised disability, refugee or international protection status, familia numerosa, single-parent family, minimum income support | Only to check eligibility for grants that require them | Your explicit consent (Art. 9(2)(a)) — we store these only if you tick the consent box, and you can skip this question entirely and still get an estimate |
| Funnel events (pages viewed, steps completed, estimate size) and campaign parameters | To understand where our service works and where it fails | Legitimate interests (Art. 6(1)(f)) |
| Payment data | Handled entirely by Lemon Squeezy, our reseller — we never see your card details | Contract |
Your income figures, bank details, ID or NIE numbers, or health information. We use your beca status as an indicator of grant eligibility instead of asking about your family's finances.
Only the processors that run the service: [HOSTING PROVIDER] (hosting), [DATABASE PROVIDER] (storage), [EMAIL PROVIDER] (sending your report), and Lemon Squeezy (payment and invoicing, acting as merchant of record). We do not sell your data and we do not share it with universities, funding bodies or advertisers.
Questionnaire answers and estimates: [24] months, so we can regenerate your report if you ask. Special-category answers: deleted once your report is sent, or within [30] days if you do not buy. Purchase records: as long as tax law requires. Funnel events: [14] months, without your email attached.
You can ask for a copy of your data, correct it, delete it, restrict or object to processing, or withdraw consent for the special-circumstances answers at any time — email [EMAIL] and we will respond within one month. You can also complain to the Spanish data protection authority, the AEPD (aepd.es).
We use a session identifier stored in your browser to count funnel steps. If we run advertising pixels (Meta, TikTok), they are loaded only after you accept them in the cookie banner. [IF YOU ADD PIXELS, YOU MUST ADD A CONSENT BANNER — pixels that fire before consent are the single most common enforcement target in Spain.]