Privacy Policy

Last updated: November 2026

  1. Data Controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the data controller responsible for processing their personal data is:

  • Data Controller: B2Brouter Global, S.L.
  • Registered office: Diagonal 433, 1-1, Barcelona 08036 (Spain)
  • Contact email address for data protection: rgpd@b2brouter.net
  1. Personal Data Processed

To access the training platform, B2Brouter will request only the following personal data:

  • First name.
  • Last name.
  • Email address.

Additionally, while using the platform, data may be generated regarding course participation, training progress, completed activities, and course completion.

No special categories of personal data will be requested.

  1. Purposes of Processing

The personal data provided by users will be processed for the following purposes:

  1. a) Management of the platform and training courses

To manage user registration, facilitate access to training content, and enable participation in available courses.

  1. b) Follow-up and communications related to training

To send email communications related to the courses in which the user is enrolled, including:

  • Enrollment confirmations.
  • Information about course content and progress.
  • Notifications regarding progress and pending activities.
  • Reminders to continue or complete the training.
  • Communications regarding course completion.
  1. c) Information about new courses and training content

Send, when the user has given their consent, information about new courses, training programs, educational content, and other training initiatives related to electronic invoicing and B2Brouter services.

  1. d) Commercial and promotional communications

To send, when the user has provided consent, commercial communications regarding B2Brouter’s products and services, including news, special offers, discounts, and promotions available on its platform.

Receiving commercial communications is voluntary and does not constitute a requirement for accessing the training courses.

  1. Legal Basis for Processing

The legal bases that legitimize the processing of personal data are:

  • Performance of the contractual relationship or provision of the service (Article 6.1.b of the GDPR): to manage registration, access, participation, monitoring, and communications necessary for the delivery of the courses.
  • Consent of the data subject (Article 6.1.a of the GDPR): to send communications regarding new courses and training content of a promotional nature, as well as offers, discounts, and commercial communications.

The user may withdraw their consent to receive commercial communications at any time, without this affecting the lawfulness of any processing carried out previously or their access to the training.

  1. Data Retention Period

Personal data will be retained for as long as necessary to manage the user’s account and their participation in training courses.

When the user requests the deletion of their account, their data will be deleted, except for data that must be retained for the periods required by law.

Data used to send marketing communications will be processed until the user withdraws their consent or requests to stop receiving such communications.

When retention is required by law or to address potential liabilities, the data will be kept properly blocked for the applicable periods.

  1. Recipients of the Data

Personal data will not be sold to third parties.

Technology providers who provide services necessary for the operation, hosting, maintenance, and management of the training platform, as well as for sending electronic communications, may access this data, acting as data processors and subject to the corresponding confidentiality and data protection obligations.

In the event of international data transfers outside the European Economic Area, B2Brouter will ensure the implementation of the mechanisms and safeguards required by the GDPR.

  1. User Rights

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time, where applicable.

Likewise, they may withdraw their consent to receive commercial communications without having to justify their decision.

To exercise these rights, users may contact B2Brouter via email at rgpd@b2brouter.net.

Users also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if they believe that the processing of their personal data violates applicable regulations.

  1. Data Security

B2Brouter will implement appropriate technical and organizational measures to ensure a level of security commensurate with the risk and to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

  1. Electronic Communications

Communications directly related to the management, participation, and monitoring of courses may be sent to the email address provided during registration.

Commercial or promotional communications will be sent only when there is a valid legal basis and the requirements applicable to electronic commercial communications are met.

All commercial communications will include a simple and free mechanism to unsubscribe or opt out of receiving future promotional communications.

  1. Changes to the Privacy Policy

B2Brouter may update this Privacy Policy to adapt it to regulatory, technical, or organizational changes.

The current version will be available on the training platform. When changes require it, users will be notified and their consent will be requested again, if necessary.