1. Data Controller
The controller of the personal data collected through sacatelcarnet.es is CONSBA, SCCL. (tax ID F43642412), a Catalan limited cooperative society, with registered office at Passeig de la Clotada 36, 43560 La Sénia (Tarragona), Spain. Contact: hello@dockialabs.com. See the legal notice for full details.
2. Data We Collect
We collect registration data (email, name), usage data (test progress, scores), and technical data (IP, browser, device).
3. Purpose
We use your data to provide the service, personalise your learning experience, send relevant notifications, and improve the platform.
4. Legal Basis
Processing is based on your consent (registration and analytics cookies), service contract execution, and our legitimate interest in improving the platform. You can withdraw your consent at any time.
5. Retention
We retain your data as long as your account is active. You can request deletion at any time.
6. Your Rights
You have the right to access, rectify, delete, port, and object to your data. Contact hello@dockialabs.com to exercise them. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Cookies
We use essential cookies for site functionality, analytics cookies (Google and PostHog) to understand usage. Analytics cookies are only activated if you accept them in the consent banner. Google AdSense advertising cookies are described in section 8 and are managed through Google’s consent message. Full details in the cookies policy.
8. Affiliate links
This site is funded by the optional exam pass and by Amazon affiliate links: if you click one, you go to amazon.es, which handles your data under its own policy, and we only receive a commission on qualifying purchases, with no data that identifies you.
You can change your analytics cookie choice at any time via the “Cookie settings” link in the footer.
8 bis. Google AdSense advertising
This site uses Google AdSense to show ads on its public pages (not in the signed-in area, checkout or sign-in pages). Google and its advertising partners, as third parties, may use cookies and device identifiers to serve ads, measure their performance and, if you allow it, personalise them based on your visits to this and other sites. They may process data such as your IP address, cookie or device identifiers and information about your browser and the page visited. You can read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
For users in the European Economic Area and the United Kingdom, consent to cookies and personalised ads is collected through Google’s consent message (Funding Choices), which you can reopen and change at any time. If you do not consent, Google may show non-personalised ads. You can turn off ad personalisation at adssettings.google.com. The legal basis for advertising cookies is your consent. Ads are not a recommendation by us and advertisers do not influence our editorial content.
9. International Transfers
Your data may be processed by providers in the EU and US (Supabase, Vercel, Stripe, Google, PostHog) with appropriate safeguards (standard contractual clauses or the EU-US Data Privacy Framework).
10. Exam pass purchases
If you buy the exam pass, Stripe processes the payment as our payment provider; we never see or store your card details (see the Stripe privacy policy). We keep a purchase record linked to your account: the Stripe checkout session, customer and payment identifiers, the amount, the purchase date, the pass end date, the timestamp and copy version of your express consent to immediate access and loss of the withdrawal right, and any refund.
If you pay without being signed in, we also keep the email you paid with, only to link the purchase to your account when you sign in with the link we send to that email. We delete it as soon as the purchase is linked, if the purchase is refunded or, if you never link it, when the pass expires.
We use that record to give you access to the pass, handle refunds and meet our accounting and tax obligations. The legal basis is the performance of the contract and compliance with legal obligations. We keep it while you have an account and then for the period required by accounting and tax law (six years under article 30 of the Spanish Commercial Code).
11. Email study plan
If you request your plan, we store your email, language, licence, optional exam date, form source (including your score, total questions and up to three topics to review if you request it after a mock exam) and signup, confirmation and unsubscribe dates. We use these data to send your study plan, reminders and exam pass offers after you confirm your email. We use purchase status to stop sending offers to buyers. To save you retyping your email at checkout, we also keep it for 7 days in a first-party cookie that JavaScript cannot read. This cookie does not subscribe you to any emails. We keep a hashed-IP digest to limit requests for up to 48 hours.
The legal basis is your consent (GDPR article 6(1)(a) and LSSI article 21 for commercial communications). Resend delivers emails and processes data in the United States with EU standard contractual clauses. Supabase stores the data as a processor.
We retain the data until you unsubscribe; unconfirmed subscriptions are deleted after 30 days, and subscriptions that finish their sequence are deleted 180 days after the last email. Every email includes a link to withdraw consent and unsubscribe. You can exercise your rights to access, rectification, erasure, portability and objection by writing to hello@dockialabs.com, and complain to the AEPD.