PRIVACY AND DATA PROTECTION POLICY

ESCUELA DE LENGUA ESPAÑOLA S.L. informs you, as the owner and controller of the processing of personal data that you may provide us for the correct development of the work of a training center, as well as through the different forms and communications that you may send us through the means of contact that we provide through our website, and that in any case you provide us freely and voluntarily, being collected by ESCUELA DE LENGUA ESPAÑOLA S.L. in compliance with European and national regulations on the protection of personal data, inserts, in order to comply with the principle of transparency and information, the different areas and/or processing activities. The purpose of this Privacy Policy is to inform you about the personal data protection policy established, for this purpose, by the entity, understanding that the personal data processed will be minimized as much as possible for each of the purposes carried out, treating them with the least or indispensable information associated with personal identification for the correct provision of the service or request of the interested party.

ESCUELA DE LENGUA ESPAÑOLA S.L. may process the personal data of the interested party to comply with the mandate given by the same, under the representation of whoever or whoever holds the parental authority or guardianship of the interested party if they are a minor, in the process of registration in the courses and training offered by the entity. The latter must also provide their data and will be processed together with those of the interested party.

This processing will be the usual and necessary for the good management of the training center and the education of the student. Among others, the following are contemplated:
• Those of the legal obligation of the training center, in order to provide the educational and training services that are our own, such as managing applications for places, registration, academic and administrative management, evaluation of the student and the communication of said evaluations, management of teaching activities and other services associated with them.
• The management of the entity’s documentation, such as the computer system, on paper or the accounting management of the training center.
• Carrying out an educational function.
• To publicize the entity’s activities.
• To send communications informing them of our educational activities.
• Any other information that may be necessary in order to fulfill the mandate given by the student and his/her representative(s) to the training center.
• To make you participate in the personnel selection processes carried out in the entity.

Type of personal data processed:
►PERSONAL DATA: identification data, address, photograph, contact information.
►ACADEMIC DATA: attendance, grades, internships, etc.
►HEALTH DATA: required for the safety of students.
►CONTACT DATA: which may include location data.
►IMAGE DATA: photograph and audiovisual material for publication on social networks and the ESCUELA DE LENGUA ESPAÑOLA S.L. website.

Likewise, the information provided may be used to carry out information campaigns, as well as notifications of new courses, events and promotional events always related to the activity carried out by the entity.
In accordance with education regulations, the entity is responsible for the custody and archiving of the Academic Records of the students, so said data will be kept indefinitely. In addition to the strictly academic information and data, the academically relevant Reports will form part of the Record.

The data for sending commercial or informative communications about our services will be kept indefinitely, until, where appropriate, you express your wish to delete them.

ESCUELA DE LENGUA ESPAÑOLA S.L. will retain the CVs for as long as it deems appropriate, as vacancies may arise that may fit your profile. The legal basis for processing the data for the purposes defined above is:
• GDPR, article 6.1.b): the execution of the contract (enrolment).
• GDPR, article 6.1.c): processing necessary for compliance with a legal obligation applicable to the data controller (e.g.: administrative, academic or administration-required data).
• GDPR, article 6.1.f): legitimate interest of ESCUELA DE LENGUA ESPAÑOLA S.L., of the student or their representatives, in accordance with the purposes contemplated in the enrolment and the development thereof. In this case, the greatest diligence will always be observed to respect the Rights and Freedoms of the minor and their representative(s).
• GDPR, article 6.1.a): basis for taking photographs and their subsequent publication on social networks or the entity’s website, as well as sending the prospective offer of services. The basis is found in the consent that is requested from you, which you may revoke at any time, but the data processing for this purpose carried out previously will not lose its legality due to the fact that the consent has been revoked.

The data owner, or the owner or owners of their parental authority or guardianship, is informed of the obligation to communicate their personal data for the correct development of the contracted activities. It is reported that;
a) The data supplied will be used by ESCUELA DE LENGUA ESPAÑOLA S.L., by those persons who must access it in accordance with their function in the company and may be transferred for any of the complementary services or activities that are added to the training center and may be required by the interest of the owner of the data or his/her representative/s.
b) Transfers to ESCUELA DE LENGUA ESPAÑOLA S.L. Suppliers that are necessary for the proper functioning of the same are contemplated, such as the document destruction service, computer technicians who must carry out maintenance, repairs or installations in the entity, etc. In this case, the legal obligations of the Data Protection regulations will be fulfilled and the appropriate guarantees will be required from the Supplier.
c) No other transfers are foreseen, unless ESCUELA DE LENGUA ESPAÑOLA S.L. is obliged to do so by any regulation or legislation that must be complied with.
d) To those third parties that are not in the position of data processor, ESCUELA DE LENGUA ESPAÑOLA S.L. will inform them of the communication and the need, where appropriate, to obtain their consent for the processing related to the affected operation(s).

ESCUELA DE LENGUA ESPAÑOLA S.L. informs that the owner of the data, or the owner or owners of their parental authority or guardianship, in accordance with Regulation (EU) 2016/679 on Data Protection (RGPD) and L.O. 3/2018 on Data Protection and Guarantee of Digital Rights, may exercise their right of access, rectification, deletion (“right to be forgotten”), limitation, opposition and portability of said data before the Data Protection Officer (DPO), and must provide a copy of the National Identity Document or document that allows accreditation of parental authority or guardianship. The aforementioned rights consist of the right, under the requirements of articles 15 to 21 of the GDPR and LOPDGDD 3/2018, that the data owner has to:
●Know what data is held by ESCUELA DE LENGUA ESPAÑOLA S.L. and what use is given to it.
●Update your data.
●Limit the processing of your data.
●Exercise the “right to be forgotten” or deletion.
●Express your opposition to the processing in certain circumstances and for reasons related to your particular situation.
●Receive a copy of your data in an accessible format or request its cancellation.

At any time, the data owner or the owner or owners of their parental authority or guardianship may withdraw the consent given to the specific processing, using the procedure indicated in the first paragraph of this section, and this action may cause the unilateral termination of the contract signed due to the inability to comply with its obligations, if this has been specified in the section on “Legitimacy”.
In the event of any violation of your rights, especially when you have not obtained satisfaction for their exercise, the data owner is reminded that he/she has the right to file a claim with the Spanish Data Protection Agency (www.agpd.es).

Data transfers to countries outside the EU are not planned. In the event that such a transfer is necessary for the service we may provide, international data transfers will be covered by the European Data Protection Regulation or, where appropriate, by the EU-US Privacy Shield Agreement.

ESCUELA DE LENGUA ESPAÑOLA S.L. and the collaborators who work with us and who have some kind of involvement in the services provided, are committed to not divulging or making use of the information to which they have accessed based on the existing relationship. The information provided by the data owner or legal representative will, in any case, be considered confidential, and may not be used for purposes other than those related to the services requested from ESCUELA DE LENGUA ESPAÑOLA S.L.

ESCUELA DE LENGUA ESPAÑOLA S.L. undertakes not to divulge or reveal information about the owner or representative.
In order to preserve and guarantee confidentiality, ESCUELA DE LENGUA ESPAÑOLA S.L. undertakes to destroy all confidential information to which it has had access due to the service offered when it is no longer necessary for the purpose for which it was collected, unless there is a legal obligation to preserve it. If the owner wishes to keep the original or a copy of said information, he/she must print or save it by their own means or go to the ESCUELA DE LENGUA ESPAÑOLA S.L. headquarters to collect it before its destruction.

ESCUELA DE LENGUA ESPAÑOLA S.L. implements organizational and technical measures in order to guarantee the security of personal data and prevent its alteration, loss, treatment or unauthorized access, and is not responsible for any loss, misplacement or unauthorized manipulation of data beyond the control of the entity/ies associated with the processing of your personal data.