Privacy
Privacy policy
Last updated: 23 August 2026
Short version: we collect what you type into the two forms on this site, we use it to answer you, and we publish nothing about you without your explicit consent. There are no advertising cookies here.
Data controller
- Controller
- Gestión Global de Recursos de Software España S.L. — B-84060995
- Address
- C. José M. Mulet Ortiz, 16 · 12600 Castellón de la Plana, Castellón, Spain
- Contact
- info@sebastianbrau.com
What we collect, and why
- Application form
- Name, work email, company and plant, role, and your three answers
- Team enquiry form
- Name, work email, company, number of people, process described
- Cohort notification
- Email address only
Purpose: to assess your application or enquiry and to reply to it. The legal basis is the performance of pre-contractual steps taken at your request (Art. 6.1.b GDPR); for the cohort notification, it is your consent (Art. 6.1.a), which you may withdraw at any time.
We do not use your answers to build a marketing profile, we do not enrol you in an email sequence you did not ask for, and we do not sell or share your data with third parties for commercial purposes.
Who processes it for us
Form submissions are handled by our commercial management platform, which acts as a data processor under a contract that meets Art. 28 GDPR. Web hosting is provided by our hosting supplier, likewise as a processor. Where a cohort payment applies, it is processed by a payment provider that receives your payment details directly; we never see or store card data.
The public certificate registry
If you complete the programme and consent to it, a public page is published with your name, role and company at the time of issue, the credential, the cohort, the issue date and the status. This publication is opt-in and reversible. If you decline, or later ask us to withdraw it, your credential remains valid and verifiable by its identifier, without your name being shown.
Confidentiality of your plant data
The data, processes and results you bring into a project are confidential. They are not used as teaching material, case studies or marketing without your employer's written permission, and the engineer assigned to you works under a confidentiality agreement covering them.
How long we keep it
- Applications not admitted
- 12 months, then deleted
- Applications admitted
- For the duration of the contractual relationship, plus the statutory retention periods
- Certificate records
- Indefinitely, because a registry that forgets is not a registry
- Notification emails
- Until you withdraw consent
Cookies
This site sets no advertising or tracking cookies, and shows no consent banner because it has nothing to ask consent for. If website analytics are added in the future, this section will be updated before they are switched on.
Your rights
You may request access, rectification, erasure, restriction, objection and portability by writing to info@sebastianbrau.com. We answer within one month. You may also lodge a complaint with the Spanish data protection authority, AEPD.