EIRÍS SCHOOL, S.A. is committed to respecting the privacy of users and the protection and security of their personal data. That is why, in accordance with current legislation on data protection (Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016, “RGPD” and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, “LOPDGDD”), it informs in this data protection policy on how it collects and treats the personal data of users and interested parties on the website https://eiris.edu.es/ (hereinafter, the “Website”).
1. IDENTIFICATION OF THE PERSON RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA.
Users are hereby informed of the formal identification of the person responsible for the processing of their data, as well as the contact details of the data protection officer:
- EIRÍS SCHOOL, S.A., (hereinafter, the “EIRÍS SCHOOL”).
- TAX ID NUMBER: A-15074644
- Registered Address: Castaño de Eirís St., 1, 15009, La Coruña
- Phone: (+34) 981 284 400
- Address of the Data Protection Delegate (DPD): dpo@edusek.net
2. INFORMATION ON THE PURPOSES OF THE PROCESSING
EIRÍS SCHOOL processes the personal data collected through the Website for the purposes described below, using an appropriate legitimate basis for each of them, respecting the rights and freedoms of the interested parties:
2.1 Management of contact and information requests.
- Purpose: To manage contact and information requests that interested parties send to EIRÍS SCHOOL through the form provided for this purpose on the website as well as through the telephone number, email address and WhatsApp chat.
- Legitimising basis: Execution of the pre-contractual relationship.
- Type of data processed: Identification data, contact data and personal circumstances.
2.2 Management of requests for information or requests relating to admission to the educational centre.
- Purposes: Receipt and management of requests for information related to admission to the educational centre sent by users through the contact form provided for this purpose.
- Legitimising basis: Execution of the pre-contractual relationship.
- Type of data processed: Identification data, contact data, data relating to personal circumstances.
2.3 Management of applications for registration for extracurricular activities.
- Purposes: Receipt and management of applications for registration for extracurricular activities offered by the centre through the contact form provided for this purpose.
- Legitimising basis: Execution of the pre-contractual relationship.
- Type of data processed: Data identifying the pupil as well as the identification and contact details of the holders of parental authority or guardianship.
3. RECIPIENTS OF THE DATA
3.1 Communication of data to third parties
The personal data obtained through the Website will not be communicated to third parties, unless legally obliged to do so.
3.2 Data processors
Some of the data processing identified in the policy may be carried out by suitable service providers contracted by the data controller. Such service providers will only process the data for the stated purposes and in accordance with the relevant commissioning contract in accordance with the provisions of art. 28 GDPR.
4. INTERNATIONAL DATA TRANSFERS
The data processing identified in this policy will be carried out within the territory of the European Economic Area (EEA) and therefore no international data transfers are envisaged.
Likewise, the eligible service providers indicated in the previous section are located within the EEA, and therefore do not carry out international data transfers either.
5. DATA RETENTION PERIOD
Patients’ personal data will be kept in accordance with the principle of “limitation of the storage period” established in the RGPD, being limited in time to the fulfilment of the purposes pursued. In this sense, personal data obtained through contact forms and requests for information will be kept for the purpose for which they were collected and, where appropriate, until the deletion of the data is requested.
6. EXERCISE OF DATA PROTECTION RIGHTS
This section informs the user on how to exercise their data protection rights:
- The user may, at any time and free of charge, exercise their rights of access, rectification or deletion, opposition, limitation and portability of their data by sending their request to the e-mail address dpo@edusek.net indicating
In any case, users are informed that, should they consider that COLEGIO EIRÍS has violated, or may have violated the rights that are recognised by the applicable data protection regulations, they may contact the data protection officer by sending a letter to the email address indicated above or file a complaint with the Spanish Data Protection Agency. More information at www.aepd.es.
7. UPDATES
EIRÍS SCHOOL reserves the right to modify the contents of this Website at any time and may add new functionalities, as well as modify the current policy. In this case, the corresponding update will be published on the Website so that the user is aware of any changes or updates.
Last updated: MAY 2024