Privacy Policy
DATA CONTROLLER
Centro de Formación MESTRAL S.L., (also referred as “The School”)
Address: C/ Aubarca 14-18, 07800-Ibiza (Baleares)
Email Data Protection Officer (“DPO”): dpd@colegio-mestral.com
Centro de Formación Mestral S.L. is part of Inspired Education Holdings Limited, (“Inspired Education Group”) which is a company registered in the United Kingdom with company number 09268120 and registered office at Sixth Floor, 3 Burlington Gardens, London, W1S 3EP, United Kingdom. Inspired operates numerous affiliated schools worldwide through its regional offices in Europe, Africa, the Middle East, Asia-Pacific and Latin America.
1. INTRODUCTION
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Individuals with regard to the Processing of Personal Data (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Centro de Formación Mestral S.L. provides information on how we process the personal data you provide to us.
Our Data Protection Officer can be contacted by email at dpd@colegio-mestral.com if you have any questions about the processing of your personal data.
2. TYPES OF PERSONAL DATA WE PROCESS
We process personal data of our students and their families and/or legal representatives and also of our employees, candidates, suppliers, contractors, potential clients and third parties interested in learning more about Centro de Formación Mestral S.L. within the systems controlled by the School as Data Controller.
The personal data processed are mainly the following:
- Names, addresses, telephone numbers, email addresses and other contact details;
- Nationality and location;
- Language(s);
- Family details;
- Judicial or administrative resolutions affecting the student;
- Education and employment data;
- Images, audio and video recordings, including CCTV footage (video images);
- Financial information;
- Previously attended educational centres.
Other types of data that we may collect and process, in accordance with the purposes of the School, relate to the health status, criminal record and other confidential information relating to an individual, such as:
- Information about the health status or provision of medical care relating to a specific individual;
- Information about behaviour;
- Special educational needs;
- Criminal record linked to a specific individual;
- Biometric information;
- Ethnicity;
- Religion, ideology or beliefs;
- Sexual orientation.
3. HOW WE COLLECT AND PROCESS PERSONAL DATA
Centro de Formación Mestral S.L. receives information directly from the interested party or through third parties, such as professionals or authorities working on their behalf;
The School collects information in several ways, including:
- In person and by telephone;
- Through our website, the cookies we use and the forms we make available to you;
- From printed documentation by email and hand delivery: including job applications, emails, invoices, letters, consent forms, etc;
- Through online tools: such as applications, educational platforms and other software used by our staff;
- Through any closed-circuit television cameras located in our facilities or sites;
4. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
The School collects and processes the personal data indicated to provide the educational activity. The lawful basis is the fulfillment of legal and contractual obligations, in addition to the consent of the interested parties and a legitimate interest of both them and the School. The School collects and retains information when necessary:
- To address the queries and requests we receive;
- To ensure that the student meets the admission criteria of the Centro de Formación Mestral S.L.;
- To provide educational services, including support for student learning, monitoring and reporting on student progress;
- To provide students with welfare and pastoral care services;
- To provide students with medical and nursing care, catering service and school transportation, among other necessary services;
- To meet the educational, social, physical and emotional requirements of the student;
- To comply with the law regarding data sharing;
- To comply with legislative or administrative requirements;
- To allow parents/guardians to be contacted to be informed about the student's educational progress or school events, in case of emergency or force majeure, etc.
- In order to celebrate the achievements of the School, and to keep a record of the history of our students, Centro de Formación Mestral S.L. may take photographs and recorded images of students to share them, e.g. yearbooks, website and commercial communications of the School and Inspired Education Group, etc., always based on the informed consent of parents or students of legal age;
- To send commercial communications if previously requested and authorized by the interested party. Commercial communications will include newsletters via email or any other electronic or physical means, present or future, that enables such commercial communication. You may unsubscribe from receiving commercial communications by clicking on the "unsubscribe" section found in all emails of this type sent by the School or Inspired Education Group.
We will also provide the means so that the withdrawal of consent for the use of photographs or audiovisual recordings and the receipt of commercial communications can be easily communicated to the School and attended to immediately.
5. PROCESSING OF CANDIDATE DATA
If you wish to send us your CV through the “Careers” section, you must create an account to use the employment platform and send us your application. Your information will be shared with Inspired Education Group as the owner of the Global Careers Site platform under the terms set out at: https://careers.inspirededu.com/data-privacy-statement and incorporated into the Human Resources files owned by Centro de Formación Mestral S.L. Our Human Resources department will process your data for the purpose of including your application in our selection processes.
6. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
Where necessary to provide the services, or to comply with a legal requirement, we must share your personal data with third parties such as service providers and/or public authorities, such as the Ministry of Education or other official entities.
Personal data may also be communicated to other of our Schools within Inspired Education Group, where necessary (for example, a language exchange with another School), who may use it for the same purposes already mentioned.
We may also communicate personal data to other third parties, in circumstances other than those above, if there is consent from the parents or legal guardians or, where applicable, from the student over 14 years of age.
7. INTERNATIONAL DATA TRANSFER
In the event that, for legitimate reasons such as student exchange programs, or in the execution of the educational contract (which could include the use of IT tools and platforms offered from outside the EEA), personal data may be transferred to countries outside the European Union, Economic Area (EEA), including countries that may offer a lower level of data protection than in the EEA. In such cases, we will implement the necessary measures to ensure the adequate protection of your personal data in accordance with the applicable data protection regulations. Likewise, in the event of such transfers, parents/legal guardians or students over 14 years of age will be clearly and correctly informed.
8. DATA RETENTION
Personal information will only be retained for the period of time necessary to fulfil the purposes set out above and to comply with legal and/or administrative requirements, in addition to the purposes provided for in the legislation for archiving in the public interest, scientific or historical research or for statistical purposes. After the stipulated period has elapsed, it will be destroyed under appropriate security measures or made anonymous.
9. YOUR RIGHTS
Under the GDPR and LOPDGDD, you have rights regarding the processing of your personal data. However, these rights are subject to certain exemptions and limitations.
You have the right to:
- Be informed, at the time of personal data collection, about the processing of the data.
- Access the information we process and how we process it, as well as obtain a copy of the personal data considering legal limitations and exceptions;
- Request the deletion of the personal data we hold about you without undue delay considering legal limitations and exceptions;
- Obtain rectification of your personal data by providing a supplementary statement;
- Obtain restriction of the processing of your personal data where it is inaccurate, unlawful, unnecessary or unverified, considering legal limitations and exceptions;
- Obtain data portability of your personal information in a structured, commonly used and machine-readable format. This allows the right to transmit that data to another Controller without hindrance from the initial Controller to whom the personal data has been provided;
- Oppose the processing for direct marketing purposes;
- Withdraw consent, at any time and freely, to the processing of your personal data. The withdrawal of consent will not affect the legality of the processing based on the consent given before its withdrawal.
Therefore, interested parties may exercise their rights by sending a written request, together with a copy of their identification document, indicating “DATA PROTECTION” in the subject line to the Data Protection Officer's email address: dpd@colegio-mestral.com.
The School will deal with requests with priority and will resolve them within the time limits provided for in the legislation.
10. CONSENT
The School will always facilitate the possibility of withdrawing your consent for any specific purpose granted outside the necessary purposes in educational services, without prejudice to the legality of processing in accordance with the consent granted before withdrawal.
11. claim before the authority
If you are not satisfied with our response, would like to discuss anything related to this privacy notice, or believe that we are processing your personal data in disregard of applicable data protection regulations, you may submit any complaint to our Data Protection Officer at: dpd@colegio-mestral.com or to the Spanish data protection authority, Agencia Española de Protección de Datos (AEPD) using the contact details set out at https://www.aepd.es/es/la-agencia/donde-encontrarnos.
12. Minors
Centro de Formación Mestral S.L will not collect or process data from minors (under 14 years of age) under any circumstances. Data will only be collected and processed through the intervention of parents or legal guardians.
13. STORAGE AND PROTECTION OF INFORMATION
The School will apply the appropriate technical and organizational measures to guarantee the security, confidentiality, integrity and privacy of personal data, avoiding unauthorized access or illicit processing of data, as well as accidental loss, destruction or damage to files.
14. COMMON USE WITH OTHER USEFUL SOCIAL NETWORKS AND PLATFORMS
This website contains links to the parent portal and other useful links in addition to social networks. Our School is not responsible for the privacy practices or the content of such sites. You should be aware that the processing of your personal information is carried out by those websites and is governed by their respective privacy policies.
If you do not want these sites to collect and process your information, please review their respective privacy policies and/or log out of them before using our Services.
15. COOKIES USED ON OUR WEBSITE
We use cookies to provide you with a better experience when using our website, as well as to store information about our visitors. This information is linked to your session ID and is a way of monitoring a single user's access.
The web server is allowed to remember some data relating to the user, such as their preferences for visiting the pages of this server, name and password, products that are most interesting to them, etc.
The Cookies that we use on our website and that require informed consent from the user are functional cookies and targeting cookies. Consent is not required for essential or necessary cookies, which are those of a technical nature necessary for the operation of the website or the provision of services expressly requested by the user.
You can find out more about the cookies we use by visiting the cookie policy of our website.
16. PRIVACY POLICY UPDATES
Centro de Formación Mestral S.L will update this privacy policy periodically, so we recommend that you review this information from time to time.
This version was last updated in September 2024.