Privacy Policy
COLEGIO DE ESPAÑA Y AMBOS MUNDOS S.L. (hereinafter, the owner), is responsible for the processing of personal data and owner of the website https://www.colegioespana.com (from now, “website”).
The owner guarantees the protection of all personal data provided by the user on the website.
In accordance with the provisions of the preceding paragraph, you are informed that:
In compliance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Digital Rights’ Management, as well as with the current legislation in force regarding data protection contained in Regulation (EU) 2016/679 of the European Parliament and of the council, we inform you that by filling in this form, you are giving the express consent, as well as all the personal data provided by the user on the website, to which these are incorporated and treated in a register of personal data processing activities for this purpose and maintained under the responsibility of the owner.
IDENTITY OF THE CONTROLLER OF YOUR PERSONAL DATA
Identity of the owner: COLEGIO DE ESPAÑA Y AMBOS MUNDOS S.L.
Tax ID number: B-37293180
Address: Calle Compañía nº65.CP: 37002, Salamanca
Email: info@colegioespana.com
PURPOSES AND DATA CONSERVATION PERIOD
By completing the forms and other communication methods available on the website, the user gives their express consent for the requested personal data to be incorporated into and processed within the record of personal data processing activities created for this purpose and maintained under the responsibility of the data controller.
For the purposes established under current legislation, the personal data sent through the website forms will be processed under the categories of “Website Users and Subscribers” and/or “Clients and Suppliers”.
The legal basis for processing your data is: your consent. Prior consent from users is always required before processing personal data for the purposes indicated.
The personal data provided will be retained until the data subject requests its deletion.
No specially protected categories of personal data are processed.
This website includes an SSL certificate. This is a security protocol that ensures your data is transmitted securely and completely, meaning that the transmission of data between the server and the website user, in both directions, is fully encrypted.
The data collection forms, their purposes, and retention periods are as follows:
- Analysis, management and resolution of queries (contact form). The storage time will be for the duration of the treatment for the management of the consultations.
- Collection and automated processing of data, as a consequence of browsing the website (you can see the cookies policy below).
- Commercial relationship with the client, current students, as well as former and future students (contact forms and course enrolment). The storage time will be the necessary for the treatment. Contracts and invoice five and ten years, respectively.
- Sending by electronic means of advertising information, news and and updates related to the courses of COLEGIO DE ESPAÑA Y AMBOS MUNDOS S.L. (contact form). The storage time is for the duration of the treatment, unless the user exercises their cancellation rights before.
- Manage blog comments, using that form that makes these comments possible. The time of conservation will be during the treatment for the management and moderation of comments.
- Commercial relationship with clients.
Retention period: the period necessary for processing. Contracts and invoices will be retained for five and ten years respectively, in accordance with legal obligations. - Due to the use of Google Fonts on the website, certain data such as your IP address may be processed in order to provide the service correctly.
- Google Analytics tracking systems are used to analyse user preferences, demographic characteristics, traffic patterns, and other aggregated information in order to better understand our audience and their needs. Tracking user preferences also helps us display more relevant advertising.
-
Facebook Ads are used to attract subscribers and clients. When creating advertisements, audiences may be segmented by location, demographic information, interests, etc. Therefore, data obtained through this platform will be subject to this Privacy Policy from the moment the user provides their information to subscribe to our community newsletter.
In addition, remarketing activities are carried out to associate users who have previously visited the website with specific advertising messages, with the purpose of encouraging them to revisit the website.
This information is collected through Facebook cookies, which users may disable through the Network Advertising Initiative.
In addition, remarketing activities are carried out to associate users who have previously visited the website with specific advertising messages, with the purpose of encouraging them to revisit the website.
This information is collected through Facebook cookies, which users may disable through the Network Advertising Initiative.
The data requested through the website is mandatory, as it is necessary to provide an optimal service. If all required data is not provided, it cannot be guaranteed that the information and services offered will fully meet your needs.
The data controller does not share, sell, or rent your personal information to third parties. However, certain information may be shared with authorised third-party service providers when necessary to provide specific services.
LEGITIMACY FOR PROCESSING OF PERSONAL DATA
The personal data processing carried out by the owner, through its website, has as its legal basis the consent. Such consent is express, free, specific, informed and unequivocal.
In the collection and processing of personal data appropriate security measures have been adopted to prevent loss, unauthorized access or manipulation of data, in accordance with the provisions of aforementioned legislation.
The owner undertakes to protect the confidential information to which he has access.
RECIPIENTS
The owner undertakes that these personal data will not be shared or transferred to third parties without the express consent of users. The provision of certain services, however, may require data transfers to third countries or entities for the management of infrastructures or provision of services, such as, for example, the management of electronic newsletters. In these cases, you are guaranteed hosting in countries of the European Union (and therefore compliance with the European General Data Protection Regulation) or that are covered by the EU-US PrivacyShield Agreement, approved by the European Data Protection Committee (see more information here).
In the event of data transfers to countries outside the European Union, the data controller shall, where applicable, carry out such transfers only to geographical areas that have been recognised by the European Commission as providing an adequate level of data protection.
This may include the following safeguards:
- Standard Contractual Clauses (SCCs) for the transfer of personal data between data controllers to a third country.
- Explicit consent from the data subject, following prior information regarding potential risks arising from the absence of an adequacy decision and appropriate safeguards, in accordance with Article 49 of the GDPR.
- For companies located in the United States, adherence to the EU–US Data Privacy Framework (DPF).
The email marketing platform used by the data controller is Brevo, based in Paris (France). Therefore, data processing takes place within the European Union and is compliant with GDPR requirements. Further information is available in Brevo Privacy Policy
The website hosting provider is Arsys, operated by ARSYS INTERNET, S.L.U., located in Logroño, La Rioja (Spain), and therefore compliant with GDPR requirements. You may consult its data protection policy, as well as its data processing agreement, at: Arsys Data Protection Policy
In no case the transfer of such data will imply a use that exceeds the consent expressed for the purposes and conditions present in this privacy policy.
a) If you provide us with personal data of other people without indicating this fact to the owner, you do so with their express content and having been previously informed of the extremes contained in this clause. Similarly, please inform us of any variation that may occur in the data provided.
The owner is not responsible for the transfer of data from third parties who have not given their consent or have knowledge of the contents of this clause, being the responsibility of the person who transfers such data to the owner of the website.
b) If you do not provide the required data, the services of the website may not be available in their entirety. The fact of not providing the email, condition to subscribe to the newsletter, or its incorrect transcription on the form, would prevent the communications that constitute its purpose (since the user cannot receive them). If you do not provide the information required on the contact form (name, email, subject and message), the services requested could not be carried out satisfactorily. The refusal to accept the cookies policy could lead to the loss of functionality of the website.
c) The User certifies that he or she is over 14 years of age and therefore possesses the legal capacity necessary for the provision of consent in account to the processing their personal data and all of this, in accordance with the provisions of this Privacy Policy.
d) The User has, at all times, the possibility of exercising the ARCO-POL Rights on their personal data by sending communication addressed to the owner of the website to the email address info@colegioespana.com.
e) The interested party has the right to receive the personal data that concerns him, that he has provided to a person in charge of the treatment, in a structured format, of common use and machine-readable and has the right to transmit said data to another person in charge of the treatment without impediments of the person in charge of the treatment to which you have provided the data.
f) In certain circumstances, data subjects may request limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
g) If consent has been given for a specific purpose, you have the right to withdraw consent at any time without affecting the lawfulness of the processing based on consent prior to withdrawal.
h) The interested parties may present a complaint to the competent Data Protection Supervisory Authority when they have not obtained satisfaction in the exercise of their rights.
i) The express consent given when filing in the enrolment form also includes the following:
- The owner reserves the right to subcontract employees for the provision of services of various kinds for the convenient development and organization of the activity of the website.
- Similarly, it reserves the right to contract third parties for the treatment and management of legislative issues in general and data protection in particular. In all these cases, the owner will oblige the contracted company and/or private professional and those responsible for managing the processing of personal data transferred to sign a document of confidentiality of personal data to ensure the privacy of this information.
- The user consents to the transfer of his/her personal data when so required by the competent administrative authorities or by court order.
j) The user authorizes the treatment of the personal data given to the holder in the terms established in the present clause.
k) COLEGIO DE ESPAÑA Y AMBOS MUNDOS S.L. reserves the right to modify this Privacy Policy in order to adapt it to legislative or case law developments, as well as industry practices. In such cases, any changes introduced will be announced on this page with reasonable notice before their implementation.
