Privacy policy

HackTheKnowledge sets out below the privacy policy applied to personal data. Using the website does not require the user to supply any information about their identity, and browsing cannot be associated with a specific user by the company.

We recommend reading this privacy policy before providing us with your personal data.

Who is the controller of your data?

• Identity: Francisco Ramos Cascales (hereinafter, HackTheKnowledge)
• Postal address: Zürcherstrasse, 8952, Schlieren, Suiza
• Email: privacy@hacktheknowledge.com

Applicable legal framework

Where personal data is supplied, it will be collected and used in accordance with the limitations and rights set out in the following regulations:

• Swiss Federal Act on Data Protection (nFADP/revDSG).
• General Data Protection Regulation (GDPR/EU 2016/679), applicable to users resident in the European Economic Area (EEA).
• Local data protection laws applicable in users' countries of residence (including, among others, Brazil's LGPD, Mexico's LFPDPPP, Colombia's Law 1581 and Argentina's Law 25.326), guaranteeing in all cases the protection standards and ARCO rights (Access, Rectification, Cancellation and Objection).

What kind of data do we process?

Depending on the services and features you wish to use at any given time, we will need to process different data. In general, that data will be, as applicable, the following:

• Identification data needed to complete your profile during registration as a user: first name, surname, national ID or passport, language, country from which you interact with us, etc.
• Contact data: telephone number, postal address, email, etc.
• Financial and transactional information: your payment or card details, information about your purchases, refunds, etc.
• Connection, geolocation and browsing data (for example, if you interact with us from a mobile device).
• Commercial information if you are subscribed to our newsletter.
• Data about your tastes and preferences.
• Data from your student account: information about the courses purchased, progress, grades, and documentation you attach when solving practical exercises.

For what purpose do we process your personal data?

Depending on how you interact with our platform, we will process your personal data for the following purposes:

To register you on the platform. If you decide to register on our platform, we will need to process your data to identify you as a user and give you access to the features and services available to registered users. You may cancel your registered user account by contacting us at support@hacktheknowledge.com.

To develop, perform and execute the services contract, or to apply pre-contractual measures. This purpose mainly includes processing your data to:

• Contact you by email about the operation of the service, sending a summary of your purchase and its price, as well as communications regarding updates, progress, corrections and follow-up of the courses purchased.
• Send informational communications related to the services purchased, such as launches of new content, including quality surveys about the services provided in order to analyse how to improve them.
• Manage payment for the services you purchase, regardless of the payment method used.
• Activate the mechanisms needed to prevent potential fraud against you and against ourselves during the purchase process. If we consider that the transaction may be fraudulent, this processing may result in the transaction being blocked.
• Invoice and make available to you the invoices and any other proof of payment for the purchases you have made on our Platform.

To handle the requests you make through the various channels available on our Platform. We only process the personal data strictly necessary to manage or resolve your request. Requests may be submitted either through the various forms on our website or through our chatbot.

In the latter case, we inform you that, when using the HackTheKnowledge chatbot, you are interacting with an Artificial Intelligence which will use the information entered to handle your queries. The chatbot may also build a profile based on your interests and preferences in order to provide you with personalised support. You may obtain further information or object to this processing by emailing privacy@hacktheknowledge.com.

Participation in prize draws, special promotions and promotional campaigns. When you take part in prize draws, special promotions, promotional campaigns, advertising activities or specific forms enabled through the website, we will process your personal data to manage your entry or participation, verify that you meet the requirements set out in the applicable rules or particular conditions, contact you in relation to the activity, prevent fraudulent or improper entries and, where applicable, manage delivery of any prize, incentive or promotional benefit due to you.

To the extent that you have given your consent to receive promotional messages and/or offers relating to the service, HackTheKnowledge may measure and personalise such advertising according to the preferences of platform users. If you do not wish to receive such information, you may unsubscribe by writing to support@hacktheknowledge.com.

Usability and quality analysis to improve our services (cookies). If you access our Platform, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand how users interact with our Platform so that we can improve it. We also occasionally run quality initiatives and surveys to gauge the satisfaction of our customers and users and to identify areas where we can improve.

To manage social media. If you follow us or contact us through the social networks where we are present, we will process the data you provide through them for the sole purpose of responding to your messages or comments and managing our contact list.

What is the legal basis for processing your data?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it, so different legal bases apply to the following purposes:

• To register you on the platform: the consent you give during the user registration process.
• To develop, perform and execute the services contract: performance of a contract to which the data subject is party, or the application of pre-contractual measures at their request.
• Handling information requests: informed consent to respond to queries submitted through the website, which implies acceptance of these conditions by the data subject.
• Promotions and commercial offers: on the one hand, the consent you give when voluntarily entering or taking part in the relevant activity and, on the other, the legitimate interests pursued by HackTheKnowledge as controller.
• Social media: informed consent to respond to queries submitted through the social network, as well as the moment you follow us and wish to be part of our contact list.
• Usability and quality analysis (cookies): the consent given on our website for the storage of the cookies you consider appropriate.

Where managing the promotion involves verifying that requirements are met, delivering prizes or promotional benefits, handling incidents or complaints, or complying with tax, accounting or administrative obligations, the processing may also be based on the application of pre-contractual measures and on compliance with the legal obligations applicable to HackTheKnowledge.

How long will we keep your data?

• Registration on the platform: we will process your personal data until you decide to unsubscribe from our services.
• Development, performance and execution of the services contract: for the time needed to manage the purchase of the services you have acquired and thereafter for the periods legally established for compliance with our tax obligations. In some cases we will only process certain data until you decide otherwise, as is the case with payment data (bank card) where you have asked us to store it for future purchases.
• Information requests: for the time needed to handle your request and for 1 year thereafter.
• Promotions and commercial offers: until you ask to unsubscribe from those communications.
• Social media: for the time needed to handle your request and for as long as you follow our profile.
• Usability and quality analysis (cookies): as set out in the cookie policy.

Where you take part in prize draws, contests, special promotions and promotional campaigns, your data will be kept for the time needed to fully manage the relevant activity, verify compliance with its requirements, select and notify the winner or beneficiary, deliver the prize or promotional advantage and handle any incidents, queries or complaints relating to it.

Once the promotional activity has ended, the data may be kept duly blocked for the periods legally established for compliance with legal, tax or accounting obligations, or for the formulation, exercise or defence of claims. In the case of winners or beneficiaries of prizes or incentives, their data may be kept for the periods required by tax, accounting or administrative regulations where applicable.

Regardless of the fact that we process your data for the time strictly necessary to fulfil the relevant purpose, we will subsequently keep it duly stored and protected for as long as liabilities arising from the processing could arise, in compliance with the regulations in force at any given time. Once any possible actions have lapsed, we will delete the personal data.

Will we share your data with third parties?

In order to fulfil the purposes indicated in this Privacy Policy, we need to give access to your personal data to third parties that support us in the services we offer you, as detailed below:

• Financial institutions, for payment processing.
• Technology service providers that support us.

We also inform you that we are present on the social network LinkedIn, to keep our followers informed about the company's news and services. You may access this social network voluntarily, through the link available on the website itself or by going there directly from your browser or installed app.

Please note that this website is not responsible for the use this social network may make of the data. However, where such data is generated on the social network and arises from an interaction with our official account, we will be joint controllers together with the social network. In order to consent to the disclosure from this website and to the processing carried out on your data, you should read the social network's privacy policy carefully.

In this way, before clicking the social network link on our website, you can inform yourself and be redirected with prior knowledge of the processing of your data, and voluntarily.

International transfers

For the proper development of the contractual relationship and excellence in the provision of the service, HackTheKnowledge will share certain personal data of users with other service providers.

When choosing service providers, HackTheKnowledge will ensure that they comply with the minimum security standards established by applicable law. HackTheKnowledge will have a contractual relationship with them under which the providers undertake to comply with the security measures necessary to protect users' data. The service providers necessary for the correct provision of the service, and their corresponding privacy policies, are:

• Stripe: used for online payment processing. Privacy policy.
• Discord: used to host and manage the cybersecurity forum for the courses offered, allowing direct interaction between students and instructors. Privacy policy.
• Resend: used to send transactional email and the newsletter where the user has consented to it. Privacy policy.
• Cloudflare: used to optimise the performance and loading speed of the web platform, and to provide a security shield and technical protection against cyberattacks and malicious access. Privacy policy.

In addition, users' data is stored on Neon Inc. servers located in the European Economic Area. HackTheKnowledge states that those servers comply with applicable data protection legislation and with the commitments set out in this Privacy Policy.

Any other international transfer of personal data (for example, in the case of cookies, social networks, etc.) will be based on your express consent, where there is no adequacy decision, appropriate safeguards or another legal basis legitimising it.

What are your rights when you give us your data?

We undertake to respect the confidentiality of your personal data and to guarantee the exercise of your rights. You may exercise them free of charge by sending an email to privacy@hacktheknowledge.com, simply telling us the reason for your request and the right you wish to exercise.

Where we consider it necessary in order to identify you, we may ask you for a copy of a document proving your identity. In particular, regardless of the purpose or the legal basis on which we process your data, you have the right to:

• Ask us for access to the data we hold about you.
• Ask us to rectify the data we already hold. Note that, by actively providing us with your personal data by any means, you warrant that it is true and accurate and undertake to notify us of any change to it.
• Ask us to erase your data to the extent that it is no longer necessary for the purpose for which we need to process it as previously notified, or where we no longer have a legal basis to do so.
• Ask us to restrict the processing of your data, which means that in certain cases you may ask us to temporarily suspend the processing or to keep it beyond the necessary period where you may need it.
• Withdraw your consent at any time, if you have given it for the processing of your data for any purpose.
• Object to the processing of your data where it is based on our legitimate interest.

If you consider that the processing of your data infringes applicable regulations, you have the right to lodge a complaint with the competent supervisory authority:

• In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), at edoeb.admin.ch.
• Users resident in other countries may contact the Data Protection Authority of their country of residence.

Changes to the privacy policy

We may amend the information contained in this Privacy Policy when we consider it appropriate, in order to adapt it to legislative or case-law developments or to changes in how the website operates.

If we do so, we will notify you through the Platform by various means, or even inform you at your email address where the change in question is significant for your privacy, so that you can review the changes, assess them and, where appropriate, object or unsubscribe from a service or feature.

Information about cookies

The use of cookies and similar technologies is described in detail in our Cookie policy.