Privacy Policy

1. Privacy Policy

ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA informs users of the website about its policy regarding the processing and protection of users’ personal data that may be collected through browsing or requesting information through this website, as well as personal data held by ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA collected by any other means or for any other reason.

In this regard, ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA guarantees compliance with current legislation on personal data protection, as reflected in the General Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights and expresses its commitment to the confidentiality and security of the data.

Data Controller:
ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA
Address: Calle Mallorca, 318, 2º 2ª.
City: 08037 Barcelona
Tel.: 93 412 76 14

Contact address for exercising rights: epic@epicescoles.com

2. Data collection, purpose and processing of data

ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA has the duty to inform users of its website about the collection of personal data that may be carried out, either by sending an e-mail or by filling in the forms included on the website. In this sense, ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA shall be considered as the party responsible for the processing of the data collected by the means aforementioned.

At the same time, ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA informs users that the purpose of the processing of the data collected includes:

• Attention and management of the requests made in the registration forms.
• Inclusion in the contact list.
• Provision of the services requested.
• Performance of the management of the commercial and administrative relationship and tax obligations.
• Sending of information related to the service received.

Your data will be duly conserved and protected against loss or alteration of the information or unauthorised access while the relationship that unites us is maintained and for the time necessary for the prescription of responsibilities after it has ceased, unless you indicate otherwise and provided that the current regulations allow the deletion of the data.

3. Legitimacy to the processing of your data and consent

The processing of the data of the users of the website included in any form will be legitimised by art. 6.1.a) of the General Data Protection Regulation (EU) 2016/679, for having given their express consent, 6.1.c), for compliance with a legal obligation of the Data Controller and by art. 6.1.f) GDPR, for legitimate interest.
Consent to the processing of their data is granted by the user when sending any of the forms included on the website, as indicated in each of them.

4. Assignment to third parties

ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA informs users that their personal data will not be transferred or communicated to third party organisations, with the exception that the transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a data processor which will have been duly contracted with all the guarantees established in art. 28 of the General Data Protection Regulation (EU) 2016/679.

We also guarantee that ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA does not conduct international transfers of data to unsuitable third countries.

5. User’s rights

The General Data Protection Regulation (EU) 2016/679 grants interested parties the possibility of exercising a series of rights related to the processing of their personal data.

To the extent that user data is processed or stored by ESCUELAS PRIVADAS INDEPENDIENTES DE CATALUÑA, users may exercise their rights of access, rectification, suppression, limitation and opposition to processing in accordance with the provisions of current legislation on the protection of personal data:

Right of access: to obtain from the data controller confirmation of whether the data are being processed, the purpose of the processing, a copy of the data processed, whether there are data communications, the recipients and the period foreseen for their storage.
Right of rectification: the right to obtain without undue delay the rectification of inaccurate data.
Right of suppression: The right to obtain without undue delay the suppression of your data provided that the regulations allow it and that they are not necessary for the purposes for which they were collected.
Right to limitation of data processing: The right to obtain the limitation of the data processing for as long as there is an impediment to the processing or data suppression.
Right to object: To object to the data processing if it is based on art. 6.1.e) GDPR, for a task carried out in the public interest or carried out in the exercise of public powers vested in the Data Controller.

To exercise these rights, the user must write to the address or e-mail address indicated in section: 1. Data Controller, providing a photocopy of the documentation proving their identity (ID card or passport). This communication must include the following information: Name and surname(s) of the user, address and accreditation details and the request for the right he/she wishes to exercise.

The exercise of rights must be carried out by the user himself, his heir or by a person authorised as legal representative of the authorised person. In this case, documentation must be provided that proves this representation of the data subject, acceptance of the inheritance or powers of attorney.

We also inform you that you may file a complaint before the GDPR Data Protection Authority if you consider that your rights have been infringed.