PRIVACY POLICY
PRIVACY POLICY
In compliance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and the Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD) of December 5, 2018, we inform you:
DATA CONTROLLER
- Identity: Elcano School S.L con CIF B54982574 en adelante “el Titular”
- Postal address: Calle Bazán 20, entreplanta local 25; 03001 - Alicante
- Phone: 966443987
- Email: info@escuela-elcano.com
PURPOSE OF DATA PROCESSING
We inform you that the data you provide us will be processed for the following purposes described below:
- Process school registration forms, provide the requested service, and issue the corresponding invoices.
- Handle and respond to contact requests, information inquiries, and/or questions received through the contact methods available on the website.
- Manage the Curriculum Vitae data received from interested users as candidates for participation in recruitment processes for filling job positions.
- As well as facilitate, expedite, and fulfill the commitments established between the Owner and the user, and maintain the relationship that may be established.
In accordance with the provisions of the GDPR, a record of processing activities is kept that specifies, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.
Personal information will not be used for purposes other than those related to contracted services or purchased products. No automated decisions will be made based on such profiling.
LEGAL BASIS FOR DATA PROCESSING
The legal basis for the processing carried out is based on:
- The consent granted by ticking the corresponding box(es).
- The execution of a contract in which the User is a party, and therefore has provided their personal data within the framework of a contractual or pre-contractual relationship for the handling of their request and/or query, with processing being necessary for maintaining such relationship.
- The legal obligations applicable to the Owner that require the processing of personal data in accordance with the services provided or those related to tax matters, complying with the applicable regulations (commercial, tax, financial, anti-money laundering).
PROCESSED PERSONAL DATA AND ORIGIN
Depending on the User's use of the website, the personal data we process may include: identification data, personal characteristics, contact details, academic data, professional data, as well as data obtained from web browsing.
The data collected are provided by the user themselves when contacting the Owner, filling out the corresponding form(s), or using other functionalities offered on the website.
The use of contact sections, forms, and/or functionalities offered on the website is voluntary. However, filling out certain form fields or providing information through other functionalities is necessary to properly handle and manage your request; therefore, the User’s refusal to provide the required information will prevent the Owner from properly addressing and managing it.
The User guarantees that the data provided are true, accurate, and complete. Data will be canceled, deleted, or blocked when inaccurate, incomplete, or no longer necessary or relevant for their purpose according to current legislation. If the personal data provided belong to a third party, the User guarantees that they have informed the third party of the Privacy Policy and obtained their authorization to provide their data for the aforementioned purposes. Likewise, they guarantee that the data provided are accurate and up-to-date, being responsible for any damage or harm, direct or indirect, that may arise as a result of failing to comply with this obligation. The User commits to and is responsible for the truthfulness and accuracy of the data they provide, undertaking to keep them duly updated.
COMMERCIAL COMMUNICATIONS VIA ELECTRONIC MEANS
The Owner does not send commercial communications via electronic means without identifying them as such in accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce. In the event of sending such communications, they will only be sent with the express consent previously granted by you.
The User may object to the processing of their data for promotional purposes by sending an email to the address indicated in point 1, thereby revoking their consent at any time by simply notifying their wish to do so. Information sent for the purpose of maintaining the existing contractual relationship between the User and the Owner, as well as performing information tasks and other service-related activities contracted with the company, will not be considered commercial communication.
DATA PROTECTION FOR MINORS
It is hereby informed that, according to current data protection regulations, only individuals over 14 years of age may legally give consent for the processing of their personal data. In the case of minors under 14, parental or guardian consent is a mandatory requirement for processing their personal data.
LINK POLICY AND SOCIAL NETWORKS
The website may include links to third-party sites such as social networks where the Owner has a presence. These third-party websites have not been reviewed and are not subject to controls by the website or its owner. The Owner will not be held responsible for content freely published by the user. The user must bear in mind that their publications will be visible to other users, so they are primarily responsible for their privacy.
DATA RETENTION PERIODS
The personal data provided by the User will be retained while they remain registered for the service, while the business relationship continues, while the User does not request their deletion, or during the legally established period. They may also be retained when necessary to comply with a legal obligation or for the formulation, exercise, or defense of claims.
If the User withdraws their consent or exercises their rights to object or delete, their data will be kept blocked and available to the Administration of Justice for the legally established periods to address possible responsibilities arising from the processing of personal data. In no case will this condition the provision of the service and/or execution of contracts with the Owner.
The withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.
CONFIDENTIALITY AND SECURITY OF PERSONAL DATA
The Owner undertakes to adopt the necessary technical and organizational measures, according to the appropriate security level of the collected data, to ensure the security of personal data and to prevent their accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
Personal data will be treated as confidential by the Owner, who undertakes to inform and guarantee by means of a legal or contractual obligation that such confidentiality is respected by their employees, partners, and any person to whom they grant access to the information.
DATA TRANSFERS AND RECIPIENTS
Your personal data may be disclosed to third parties in cases expressly required by applicable legislation, as well as when the disclosure is necessary to comply with legal obligations applicable to the Owner.
Likewise, your data may be communicated to service providers acting as data processors, with whom the Owner has signed the corresponding contracts in accordance with Article 28 of the GDPR, ensuring the security and confidentiality of the information at all times.
USERS’ RIGHTS
What are your rights when you provide us with your data?
The User has the right to obtain confirmation as to whether or not we are processing personal data concerning them. The User has the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, the User may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, the User may object to the processing of their data, in which case the data controller will stop processing the data, except for legitimate compelling reasons or for the exercise or defense of possible claims. In cases where legally applicable, the User will have the right to data portability, which means they have the right to receive the personal data concerning them that we are processing and store them on their own device.
The User may exercise, before the Owner, if applicable, the rights of access, rectification, opposition, deletion, restriction of processing, portability, and objection to being subject to automated individual decisions by means of a written communication accompanied by a copy of their ID card to verify their identity, with the reference “GDPR Rights” addressed to the email address info@escuela-elcano.com
Likewise, we inform you that you may submit any type of claim regarding personal data protection to the Spanish Data Protection Agency www.agpd.es, the Supervisory Authority of Spain.