Privacy policy

Data controller

Identity: Luis Fernando Tapia Bustos (NIE Y9967420Q)

Address: 06009 Badajoz (Badajoz), Spain

Email: luis@luistapianist.com

Data we process

• Identity and contact data: name, email, phone and country, provided when booking or purchasing.
• Service-related data: level, goals, practice videos and session recordings.
• Payment data: payments are handled by Stripe or PayPal; no card data is ever stored on this site.
• Technical data: IP address and minimal browsing data required for the site to work.

Purposes and legal bases

• Providing the contracted service (lessons, follow-up, private portal): performance of a contract (Art. 6(1)(b) GDPR).
• Invoicing and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
• Session recordings and video reviews: consent (Art. 6(1)(a) GDPR).
• Service-related communications and, where applicable, updates: legitimate interest or consent, as appropriate.

Data processors

To provide the service we use providers that process data on our behalf with the required safeguards: Infomaniak (web hosting), TidyCal (calendar and bookings), Stripe and PayPal (payments) and Google (fonts). Payment providers may transfer data to the US under the EU–US Data Privacy Framework.

Retention

Data is kept while the relationship lasts and afterwards for the legal periods (invoices: 6 years). Recordings are kept while the student is active and deleted on request.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to luis@luistapianist.com, attaching a copy of your ID. If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).