Privacy Notice
This notice explains how your personal data is processed when you visit greaterwaves.com, register for the free course, buy a product, apply for mentoring or contact us. The EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD) apply.
Controller
José Martínez Hernández (GreaterWaves). Owner details in the legal notice. For any privacy matter: jose.martinez@greaterwaves.com.
What data we process and why
| When | Data | Why | Legal basis | How long |
|---|---|---|---|---|
| You register for the free course or the newsletter | Name, email, language | Give you access to the course and send you the lessons, the newsletter and offers for our products | Your consent | Until you unsubscribe (link in every email) |
| You buy a product | Name, email, country, billing details. Payment is handled by Payhip: we never see your card details | Give you access, issue the invoice, support you as a student and tell you about updates | Contract and tax obligations | While you have access and then 6 years for tax and accounting obligations |
| You are a customer and haven’t unsubscribed | Tell you about products similar to the ones you bought | Legitimate interest (Art. 21.2 LSSI) | Until you unsubscribe | |
| You apply for mentoring | Name, email, phone (optional) and what you tell us in the form and the conversation | Assess whether mentoring is a fit, message you on WhatsApp and schedule the call | Pre-contractual steps at your request | 12 months if you don’t sign up; if you do, as for purchases |
| You are a mentoring or single-session student | What you share about your systems and your trading | Prepare and run the sessions | Contract | For the duration of the service and 12 months after |
| You email us | Your email and what you tell us | Reply to you | Your consent or the contract, as applicable | As long as needed to help you and up to 12 months after |
| You visit the website | IP address and technical browser data in server logs | Website security and operation | Legitimate interest | Per Cloudflare’s retention periods |
| You accept measurement and advertising cookies | Cookie identifiers, pages viewed, interactions | Measure visits and ad performance | Your consent | See the cookies policy |
We don’t make automated decisions that produce legal effects on you. Our products are not intended for anyone under 18.
Who we share data with
We don’t sell your data. These providers process it on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Website hosting and DNS | US and global network |
| MailerLite | Forms and emails | EU (Lithuania) |
| Payhip | Store, payments, student area and course delivery | United Kingdom |
| Holded | Invoicing | Spain |
| Google (Tag Manager, Analytics, Ads, reCAPTCHA in the forms, YouTube) | Measurement, ads, spam protection and videos | US and EU |
| Meta (Facebook and Instagram pixel, WhatsApp) | Ad measurement and mentoring conversations | US and EU |
| Bunny.net | Free course video playback | EU (Slovenia) |
| Cal.com | Booking calls and sessions | US |
| Zapier and Telegram | Internal alert when a mentoring application arrives | US and other countries |
| Webempresa | Spain |
If you join the Discord community, your account and what you post there are processed by Discord under its own policy. Payhip and the payment gateways it uses (for example, Stripe or PayPal) process payment data under their own policies.
Transfers outside the European Economic Area
Some providers are in the US or other countries outside the EEA. Transfers rely on a European Commission adequacy decision (United Kingdom; US companies certified under the EU-U.S. Data Privacy Framework) or, where there is none, on the standard contractual clauses approved by the Commission. You can ask us for details of each provider’s safeguard.
Your rights
You can request access to your data, its rectification or erasure, restriction of or objection to processing, and portability, and you can withdraw your consent at any time without affecting earlier processing. Email jose.martinez@greaterwaves.com stating which right you want to exercise. To stop receiving emails, just use the link at the bottom of any of them.
If you believe we haven’t handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with the authority of your country.
Security
We apply technical and organizational measures appropriate to the risk: encrypted connections, restricted access to our tools, and providers that offer sufficient guarantees.
Changes
If we change this notice, we’ll publish the new version with its date. If the change is significant, we’ll let you know by email.