1º Who is the party in charge of managing your data?
The party responsible for handling your data is Gredos San Diego, S. Coop. Mad. (hereinafter, GSD), with legal ID#3-012- 702749; its registered address is
c/ José Gutiérrez Maroto, 26, 28051 (Madrid), and e.mail address: firstname.lastname@example.org.
2º How do we use your personal data?
The data compiled by GSD is used for a number of different purposes chiefly related to performing its educational/counseling role during students’ time at our Institution. For this reason, we require heath and psychological background, as well as other data necessary to be able to assist and communicate with families, to carry out necessary related administrative tasks, such as invoicing or filling out scholarships and financial aid paperwork.
We also gather the data necessary to contract complementary services and extracurricular activities (including cultural study excursions, international exchanges), appropriately provide said services, or to monitor access to our centers, as well as perform any administrative tasks related to dealing with clients and suppliers.
We occasionally collect data to organize events and activities, or to provide assistance in matters outside our scope.
In all cases, the personal data we request is necessary for us to be able to correctly provide service, fulfill contractual obligations, services, or activity established with the party. Apart from complying with student commitments, providing them, their families, and users a good experience, as well as to keep in contact with all of you, to be able to share any pertinent information when necessary.
Refusal to provide the requested personal data, or communication of inexact/incomplete data may lead to the inability to adequately provide the services or comply with legal terms. Therefore, users - in this case, parents or legal guardians - or interested parties assume the responsibility for providing the required data, and notify GSD of any changes therein.
Should they so desire, having provided their consent, we can keep them duly informed about any potentially interesting activities or services organized by GSD which are similar to those contracted.
We use images in information shared with participants/families on activities carried out, as well as for use on our different newsletters, school magazines, promotional DVDs, websites, blogs, social networking sites, Internet channels (YouTube and similar) for informational purposes in a non-lucrative and educational/cultural context. In any event, GSD requires express authorization from the interested parties for any other use other than those reflected above, and provides advance notice in this regard.
Images taken by the GSD access cameras are intended to safeguard the integrity of our installations, access to them, as well as the safety of individuals, in compliance with Security Law.
Where installations are leased or ceded, the related data is necessary to comply with contractual lease arrangement; where nightly accommodation is concerned, to comply with related legislation.
In no event is the data used to make automated decisions or create profiles.
How do we obtain your data?
GSD directly obtains data from the information provided by its owner - or parents, legal guardians, or representatives, where applicable - during registration, signup for activities, or requesting/contracting services.
How long do we keep your data?
Personal data provided is generally granted for school use, including health and counseling services, and is stored during the period the educational services are provided; therefore, the party in charge is responsible for communicating any changes taking place. All data obligatorily stored on school records will be blocked with all other data deleted a year subsequent to a student's definitive departure for any reason (except for transcript transfers). Data included on the abovementioned transcript are held by the entity for the purposes outlined in prevailing education legislation.
Data corresponding to admission/ pre-registration requests related to any services or activities which are not carried out may be deleted once the established time frame has elapsed, or related responsibilities have expired.
Personal data provided in order to provide complementary or extracurricular services, camps, cultural trips, or educational exchanges, as well as attendance to certain events/activity or leasing of installations is deleted a year after being ceded. Copies may solely be stored in the event of a possible lawsuit or commencement of new service by the party in question, with data duly blocked when liability may arise as a result of executing the service in question. Contact details will not be deleted in cases where express authorization has been provided on products and services, with all other related data erased for this purpose, as well as at the party’s request.
Data for candidates chosen to fill a job vacancy is not ceded to third parties, but is stored by GSD until the position has been filled, or after 4 years have transpired, unless the interested party has at any time previously exercised their cancellation rights.
Data provided for participation as teacher or activities/events organizer is considered valid until we receive express notification to the contrary.
3. Legitimación ¿Cuál es la legitimación para el tratamiento de sus datos?
GSD está legitimado legalmente para el tratamiento de los datos correspondientes a la función educativa en base a lo establecido en la Disposición Adicional vigesimotercera de la Ley Orgánica 2/2006, de Educación (LOE), incluyéndose dentro de éstos los datos de salud y de orientación que se requieran para el adecuado desarrollo académico de los alumnos. Estos últimos son tratados por profesionales en cada una de esas materias, y sobre los mismos se aplican las medidas de seguridad oportunas teniendo en cuenta el estado de la tecnología, los datos tratados y la finalidad perseguida con su tratamiento.
Para el resto de servicios y actividades que se prestan –complementarios, extraescolares, viajes culturales, intercambios, participación en actividades o eventos, alquiler de instalaciones y demás relaciones contractuales-, su legitimidad se encuentra en la ejecución de un contrato o servicio solicitado/contratado por el interesado y/o sus padres/tutores legales, y, en el caso de la videovigilancia, en el interés legítimo de la entidad para la protección y adopción de medidas de seguridad.
La legitimación para el tratamiento de las imágenes captadas durante el desarrollo de actividades extraescolares, campamentos o viajes escolares, actividades o eventos organizados por la entidad se encuentra en la autorización expresa dada por los interesados o sus tutores/representantes legales, dentro de la ejecución del contrato de prestación establecido con el interesado o del servicio, actividad o evento solicitado por los mismos.
4. Recipients: Who receives your data?
The data we collect is generally managed internally to ensure the appropriate execution of educational services or any outsourced ancillary services, etc., communicated internally to all those involved in the educational process and outsourced services, for the purposes herein encompassing interns, as well as other collaborating parties/entities potentially contracted for these purposes, as well as GSD’s Sports Club, Cultural Association, and Foundation. We expect that all the above comply with pertinent data security measures; we prohibit their cession except where deemed necessary for compliance.
Los datos de salud son comunicados y tratados específicamente por el gabinete médico gestionado por los profesionales de la entidad IMENA, S. L. contratada a esos efectos. Dichos datos son susceptibles de ser conocidos por el personal interno que fuera oportuno cuando sea estrictamente necesario su conocimiento teniendo en cuenta el interés vital de los alumnos.
También cederemos los datos a las autoridades administrativas educativas, a otros organismos públicos para la gestión de becas o ayudas, a entidades aseguradoras y sanitarias, a entidades bancarias para la gestión económica, a la hacienda pública, a las autoridades judiciales y cuerpos de seguridad cuando sea pertinente, y a empresas proveedoras externas (software informático de gestión, hosting, desarrollo web y dominios). No se producirán cesiones de las imágenes obtenidas durante la videovigilancia del acceso a los centros, salvo al personal y empresa de seguridad autorizados, o, en su caso, fuerzas de orden público.
Data provided for registration/participation in extracurricular activities and national/international school trips is solely communicated with individuals, professionals, or entities deemed necessary in order to perform the contracted service. This includes: banking and insurance entities, any service providers, travel/transportation agencies, airlines, schools, exchange programs, etc., as well as any cessions deemed necessary to conduct the necessary administrative and invoicing tasks. In the above cases, an authorization signed by the interested parties to cede their data to service suppliers located abroad will suffice, indicating the commitment to contractually demand the application of the corresponding ceded data protection and confidentiality policies; all data must be deleted once the service has been provided.
On occasion, we may request authorization to gather/share images taken during extracurricular activities, school trips, or camps.
For any other cession or usage, we required your prior authorization, sharing all pertinent information with you.
Security: To bolster and enact GSD’s Data Protection policies, we have adopted the appropriate technical security and organizational measures to ensure data is not altered, lost, misused, treated, or handled incorrectly, as well as to block its unauthorized access or theft.
5.Rights: What are your rights when you share your data with us?
Everyone is entitled to obtain information on how we at GSD use their personal data.
In certain circumstances, and for reasons related to each party’s individual circumstances, interested parties may refuse for their data to be used. GSD then ceases using said data, apart from any legitimate legal demands, or while exercising the right to file a claim.
To exercise your right to access, rectify, oppose, cancel, or any other action related to your data, please contact the Data Manager (see Section 1). You may fill out and send a request form, including the party’s first and last names, photocopy of their ID, passport (or the represented party, where applicable), explanation, address, date, and signature of the requesting party, as well as any other supporting documentation.
Informamos también que en el caso de que usted considere que no ha recibido una respuesta satisfactoria a la solicitud realizada, podrá dirigirse a la autoridad de control en materia de protección de datos, la Agencia Española de Protección de datos a través de su sede electrónica.