Ages 2 to 18
Enrol with ease
Discover who we are & our facilities
Life beyond the classroom
What's happening
Last places available!
The Privacy Policy is part of the General Conditions that govern the following websites:
https://stgeorgeinternational.es/
VERSION MAY 2024
In accordance with current regulations applicable to Personal Data Protection (EU Regulation 679/2016, General Data Protection Regulation, and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights), the following information is provided:
Who is responsible for data processing?
BRITISH & INTERNATIONAL SCHOOL XXIII, S.L.U
Calle del Monte Esquinza, 24, 5º Izquierda (CP 28010) Madrid
CIF/NIF: B-87998563
Data Protection Officer email: dpo.external@ispschools.com
You can contact us in any way.
We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of the modifications.
If you are one of the following groups, please see the drop-down information:
What data do we collect through the Website?
We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously. If you provide us with information in the contact form, we will process your identifying information and any information you share with us in the form.
For what purposes will we process your personal data?
Manage the requested service, respond to your request, or process your request.
What is the legitimacy for processing your data?
The user’s consent or the existence of a contractual relationship between the parties.
For how long will we retain your personal data?
As long as you remain linked to us or until you exercise any right that implies the deletion of your data.
What data do we process?
We will process your identifying data and the data you share with us within the framework of the social media platform in question.
To manage the requested service, respond to your request, or process your request. To create, foster, and maintain a community of followers within the framework of the social media platform.
The user’s consent or the existence of a contractual relationship between the parties. In this case, processing is based on the acceptance of a contractual relationship within the framework of the corresponding social media platform and in accordance with its privacy policies. Therefore, it is recommended that the user consult them. The data controller may only view or delete data in a restricted manner, as they have a specific profile. Data will be processed for as long as the user allows through the various interactions permitted by each social network. Any rectification of data or restriction of information or publications must be made by the user through their profile settings on the social network itself.
How long will we retain personal data?
As long as you remain linked to us or until you exercise any right that entails deletion of your data.
The data controller will collect data from candidates through its employment portal, accessible from its website. It will process the identification, contact, academic, and professional data that the candidate includes when submitting their application.
For what purposes?
What is the legal basis for processing?
The legal basis for the processing described is the existence of a pre-contractual relationship between the parties.
How long will we retain your data?
One year after receiving a resume, the Controller will securely destroy it.
We may process your identification, contact, academic, and information regarding permits, grades, etc., all based on your user profile (student, parent, guardian, teacher, etc.).
The data included in the educational platforms will be processed by the Controller for the purpose of managing the relationship the Center has with each User, based on their profile.
What is the basis for legal action?
The existence of a contractual relationship between the parties.
How long will we retain the data?
For the duration of the contractual relationship and, once it has ended, for the statutory limitation periods established for bringing legal proceedings.
The data we you share your identification and contact information with us in your report and, if you decide not to file an anonymous report, your identification and contact information.
The personal data collected through the information channel is processed for the sole purpose of processing the communications or information received, sending the reporting party relevant communications regarding the status or results of the processing, unless they have objected to this; and, if applicable, carrying out all actions aimed at verifying the plausibility of the reported facts to determine their archiving, the adoption of appropriate measures, or their transfer to the competent authority in each case.
What is the basis for legality?
Compliance with a legal obligation.
All personal data that may have been communicated and that refers to conduct not covered by the law will be immediately deleted. If the information received contains personal data included in special categories of data, it will be immediately deleted, without further registration and processing. All or part of the information provided will be deleted if it is proven to be untrue, from the moment this circumstance is known. Unless such untruthfulness constitutes a criminal offense, in which case the information will be retained for the time necessary to process the legal proceedings.
The data subject to processing will be kept in the information system only for the time necessary to decide whether to initiate an investigation into the reported events. This period may not exceed three months from receipt of the information, unless the deadline has been extended by three months due to its particular complexity. Communications that have not been processed are retained anonymously. If the relevant investigation is initiated, the data will be processed for the duration of the investigation. A record of information is kept available to the competent judicial authorities in accordance with the requirements and limits established in Law 2/2023. Under no circumstances will data be retained for more than ten years.
We will process your identifying data and, if a potential threat is detected, the data captured by the application.
To safeguard the moral integrity of students and to enforce the principles of BRITISH & INTERNATIONAL SCHOOL XXI, S.L.
For employees, the existence of a contractual relationship between the parties, understood within the framework of the employer’s managerial power established in the Workers’ Statute, and for students, the public interest in guaranteeing the best interests of the child.
While the investigation into the potential threat is being processed.
Processing of third-party data.
As a general rule, the Controller will only process data provided by the data subject. If data is received from third parties, such persons must be informed in advance and their consent must be requested, otherwise BRITISH&INTERNATIONAL SCHOOL XXI, S.L. will be exempt from any liability for failure to comply with this requirement.
Commercial communications by electronic means
If the user has previously given their express consent to do so, or when protected by the legitimate interest of the Controller, communications of interest will be sent to the email address provided.
Security measures
BRITISH&INTERNATIONAL SCHOOL XXI, S.L. BRITISH & INTERNATIONAL SCHOOL XXI, S.L. places great importance on the security of all personally identifiable information and has adopted an optimal level of security, implementing the appropriate technical and organizational measures based on the state of the art to prevent the loss, misuse, alteration, unauthorized access, or theft of personal data. For example, our security and privacy policies are periodically reviewed and improved as necessary, and only authorized personnel have access to user information. At BRITISH & INTERNATIONAL SCHOOL XXI, S.L., we make efforts and allocate resources to improving our pages and their features every day so that users can browse safely.
Communication to third parties
Users’ personal data may be transferred to:
In the event that any of the transfers involve an international transfer of data, these will be carried out ensuring that third-party companies comply with European privacy and data protection policies and regulations.
User Rights
Data protection regulations recognize a series of rights for users, which must be honored by the Controller:
To facilitate the process and comply with the principle of data accuracy, if any data changes, the Controller appreciates notification of such changes.
To exercise the aforementioned rights, the user may request a form from the data controller or use those prepared by the Spanish Data Protection Agency or third parties. The forms may be submitted in person, sent by letter, or by email to the Data Protection Officer: dpo.external@ispschools.com
Depending on the right exercised, the Data Controller will take a maximum of one month to respond from receipt of the request, and two months if the matter is very complex, in which case the user will be notified.
Furthermore, we inform you that you can always contact the Spanish Data Protection Agency (www.aepd.es) to request legal protection or file a complaint regarding the processing of personal data.
Cookies
The website uses cookies. If you wish to obtain more information, you can do so by accessing our Cookie Policy.
Changes to the Privacy Policy
The data controller may modify or adapt the Privacy and Personal Data Processing Policy, so we recommend that you review it periodically to stay up-to-date.
Don’t miss the chance to be part of our community this October. Reserve your spot today and secure your place at St George Barcelona.
