PRIVACY POLICY

In compliance with the General Data Protection Regulation 2016/679 (GDPR) and the Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (PPDGDR) of December 5, 2018, we inform you:

DATA CONTROLLER

Identity: COMPLVTVM Montessori School with CIF F56925886, hereinafter referred to as “the Controller”

Address: C/ Río Bidasoa, nº 1; 28803; ALCALÁ DE HENARES – MADRID

Phone: 609222071

E-mail: soporte@complutumschool.com

PURPOSE OF DATA PROCESSING

We inform you that the data you provide will be processed for the following purposes:

  • Through the available contact methods on the website..
  • To manage online appointments that the user wishes to make via the appropriate form.
  • To facilitate, expedite, and fulfill the commitments established between the Controller and the user, and to maintain the relationship established.

Additionally, in compliance with the GDPR, a record of processing activities is maintained, which specifies the processing activities carried out and other circumstances set forth in the GDPR.

Personal information will not be used for purposes other than those related to contracted services or purchased products. No automated decisions will be made based on this profile.

LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing is as follows:

  • The consent granted by the User through acceptance of this Policy and the corresponding checkbox.
  • The User has provided their personal data within the framework of a contractual or pre-contractual relationship to address their request and/or inquiry, and therefore, processing is necessary to maintain this relationship.
  • The legal obligations applicable to the Controller require the processing of personal data according to the services provided or related to tax matters.

The User may revoke their consent for the processing of their personal data at any time. In no case will the withdrawal of consent affect the provision of the service and/or execution of contracts with the Controller.

PERSONAL DATA PROCESSED AND SOURCE

The personal data we process is identifying data provided by the User through emails or the use of features offered on the website.

Using the contact sections, completing forms, and/or using features offered on the site is voluntary. However, filling in certain fields in the form or providing data through other functionalities is necessary to properly manage and address your request. Refusal to provide the required information will prevent the Controller from addressing and managing it correctly.

The User guarantees that the data provided is truthful, accurate, and complete. Data will be canceled, erased, or blocked when found to be inaccurate, incomplete, or no longer necessary or relevant for its purpose according to current legislation. If the personal data provided concerns a third party, the User guarantees that the third party has been informed of the Privacy Policy and has given consent to share their data for the purposes mentioned. The User also guarantees that the provided data is accurate and up-to-date, and assumes responsibility for any direct or indirect damages arising from the failure to comply with this obligation. The User commits to ensuring the accuracy and correctness of the data and keeping it updated.

LINK POLICY

The website may include links to third-party sites, such as social networks where the Controller is present. These third-party websites have not been reviewed or controlled by the website or its owner.. The Controller will not be held responsible for the content of these websites or for any measures adopted regarding privacy or the processing of personal data. It is recommended that users carefully read the terms of use and privacy policy of these sites. If you wish to create a link to this page, you must notify the Controller and obtain express consent. The Controller reserves the right to oppose the activation of links to its website.

RETENTION PERIOD FOR PERSONAL DATA

The personal data provided by the User will be retained as long as the service is active, the business relationship is maintained, the User does not request its deletion, or for the legally established period. Data may also be kept when necessary to comply with a legal obligation or for the formulation, exercise, and defense of claims.

If the User withdraws consent or exercises the rights of opposition or deletion, their data will be blocked and made available to the Administration of Justice for the legally established periods, in order to address any potential liabilities arising from the processing of personal data. In no case will this condition affect the provision of the service and/or execution of contracts with the Controller.

CONFIDENTIALITY AND SECURITY OF PERSONAL DATA

The Controller is committed to adopting the necessary technical and organizational measures, according to the security level appropriate to the risk of the data collected, ensuring the security of personal data and preventing the accidental or unlawful destruction, loss, alteration, or unauthorized communication or access to such data.

Personal data will be treated as confidential by the Controller, who commits to ensuring, through a legal or contractual obligation, that confidentiality is respected by its employees, associates, and anyone else to whom the information is made accessible.

DISCLOSURE AND RECIPIENTS OF PERSONAL DATA

Your personal data will be disclosed when legally required for the fulfillment of obligations directly imposed on the Controller or when necessary to fulfill the purposes of processing outlined above or to provide services strictly necessary for the development of the activity.

USER RIGHTS

What are your rights when you provide your data?

he User has the right to confirm whether or not we are processing their personal data. The User has the right to access their personal data, as well as request the correction of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, the User may request the limitation of data processing, in which case the data will only be kept for the exercise or defense of claims. In specific circumstances, and for reasons related to their particular situation, the User may object to the processing of their data, in which case the data controller will stop processing the data unless there are compelling legitimate reasons, or for the exercise or defense of potential claims. In cases where it is legally applicable, the User will have the right to data portability , meaning they have the right to receive the personal data concerning them and store it on their own device.

The User may exercise their rights of access, rectification, opposition, deletion, limitation of processing, portability, and opposition to automated individual decisions by sending a written request, accompanied by a photocopy of their ID, to prove their identity, with the reference “GDPR Rights” addressed to C/ Río Bidasoa, nº 1; 28803; ALCALÁ DE HENARES – MADRID, email: soporte@complutumschool.com

Additionally, the User is informed that they can file any claim related to personal data protection with the Spanish Data Protection Agency (www.agpd.es), the Control Authority in Spain. www.agpd.es, Autoridad de Control de España.