Last Updated: January 2026
Introduction
This Privacy Policy explains how 0x12 Dark Development (“we”, “us”, or “our”) collects, uses, and safeguards your personal data when you use our website or services. We are committed to protecting user privacy in compliance with the EU General Data Protection Regulation (GDPR) and Spain’s data protection laws (Organic Law 3/2018, LOPDGDD).
Please read this Privacy Policy carefully to understand how your personal data is handled.
Data Controller
The controller of your personal data is:
0x12 Dark Development
Location: c/ Medes, 4-6 Local 08023 Barcelona
Email: admin@0x12darkdev.net
As the data controller, we determine the purposes and means of processing your personal data. You may contact us using the email above for any privacy-related inquiries or requests.
Personal Data We Collect
3.1 Contact and Identity Data
When you register, contact us, or purchase a course or service, we may collect:
- Name
- Email address
- Billing address
- Phone number (if provided)
This data is required to create accounts, provide services, and process payments.
3.2 Payment Information
Payments are processed securely by third-party payment providers such as Stripe or PayPal.
We do not store full credit card numbers or bank account details on our servers.
We may retain limited transaction information for accounting and legal purposes, such as:
- Transaction ID
- Payment amount
- Date of payment
- Last four digits of the card (if provided by the processor)
All payment data is handled according to the payment providers’ own privacy policies.
3.3 Course Usage Data
If you enroll in courses or use our services, we may collect:
- Enrollment status
- Course progress and completion status
- Quiz or assessment results
- Communications made through the platform (if applicable)
This data is used solely to provide and improve our services.
3.4 Technical Data
When you access our website, we may automatically collect technical information, including:
- IP address
- Browser type and version
- Device and operating system information
- Pages visited and time spent on the site
This data is collected via cookies or server logs for security, analytics, and performance purposes. Where possible, data is anonymized or pseudonymized. IP addresses are only used for legitimate purposes such as security monitoring and aggregated analytics.
3.5 Email Newsletter
Newsletter subscriptions, if any, are managed externally through third-party platforms and are not directly linked to this website. Any newsletter data is governed by the privacy policy of the external service used. This website does not automatically collect newsletter subscriptions.
3.6 Data We Do Not Collect
We do not collect:
- Special categories of personal data (health, religion, political opinions, etc.)
- Personal data from children under 16 without verifiable parental consent
4. Purpose and Legal Basis for Processing
We process personal data only when permitted under Article 6 GDPR, for the following purposes:
4.1 Service Provision (Contractual Necessity)
To create user accounts, provide access to services or courses, deliver content, and offer support. This processing is necessary for the performance of a contract.
4.2 Payment Processing
To process payments and manage orders through payment processors. Legal basis: contractual necessity.
4.3 Communications
To send service-related communications (account notices, updates, security messages).
Marketing communications are only sent where explicit consent has been given and can be withdrawn at any time.
4.4 Analytics and Website Improvement
To analyze website usage and improve functionality and content. Legal basis: legitimate interest.
Where required by law, consent is obtained before placing non-essential cookies.
4.5 Security and Fraud Prevention
To protect the website, detect abuse, prevent unauthorized access, and ensure service integrity. Legal basis: legitimate interest and legal compliance.
4.6 Legal Compliance
To comply with legal obligations, including tax, accounting, and regulatory requirements under Spanish law.
5. Data Sharing and International Transfers
We do not sell personal data. Data may be shared only with the following recipients:
5.1 Payment Processors
Stripe and/or PayPal process payments on our behalf. These providers may act as independent controllers or processors and may process data outside Spain. Their European entities operate under GDPR-compliant safeguards.
5.2 Hosting Provider
Our website is hosted by Hostinger, which acts as a data processor and stores data under our instructions in compliance with GDPR.
5.3 Analytics Providers
We use Google Analytics to analyze website usage. IP anonymization is enabled where possible. Data transfers outside the EU are protected using Standard Contractual Clauses or equivalent safeguards.
5.4 Legal Disclosure
We may disclose data where required by law, court order, or regulatory authority.
Whenever personal data is transferred outside the European Economic Area, appropriate legal safeguards are applied.
6. Cookies and Tracking Technologies
Our website uses cookies to function properly and improve user experience.
Types of cookies used:
- Essential cookies: Required for basic site functionality.
- Analytics and preference cookies: Used only with user consent.
- Third-party cookies: Set by embedded services or payment providers.
A cookie consent banner allows users to manage their preferences. Users may withdraw consent at any time.
7. Data Retention
We retain personal data only as long as necessary:
- Account data: While the account remains active.
- Course data: Retained for service provision; anonymized for statistics where applicable.
- Payment and invoicing data: Retained for 4–6 years as required by Spanish tax and commercial law.
- Support communications: Typically retained for 1–2 years.
- Analytics data: Retained for a limited period in anonymized or aggregated form.
Data is securely deleted or anonymized once no longer required.
8. Your Rights
Under GDPR and Spanish law, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Not be subject to automated decision-making
To exercise your rights, contact us at admin@0x12darkdev.net. Requests will be handled within one month.
9. Data Security Measures
We implement appropriate technical and organizational measures, including:
- HTTPS (TLS) encryption
- Password hashing
- Restricted data access
- Regular system updates
- Firewalls and monitoring
- Secure backups
In the event of a personal data breach, affected users and authorities will be notified as required by law
10. Complaints and Supervisory Authority
If you have concerns about data processing, please contact us first.
You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Material changes will be communicated via the website or email. Continued use of our services constitutes acceptance of the updated policy.
Contact
For privacy-related inquiries:
0x12 Dark Development
Email: admin@0x12darkdev.net
Location: Gràcia, 08203 Barcelona, Spain