Privacy Policy

We are an organization in which transparency is essential to build a relationship of trust with the people who are part of our project and with our suppliers and customers. The protection of the personal data of those who trust us is of vital importance; therefore, through this Privacy Policy, we inform you about how we collect, process, and use such data.

This Privacy Policy sets out the basis on which the organization processes personal data that our users voluntarily provide through the website.

This Policy will always apply whenever data is provided to the organization, which will be responsible for your data (Data Controller), through any contact or subscription forms in which personal data is collected (name, email, etc.).

What we commit to

• Respecting our users’ privacy and processing personal data with their consent.
• Processing only the personal data strictly necessary to provide the requested service, and processing it securely and confidentially, taking the necessary measures to prevent unauthorized access and misuse.
• Not using personal data for purposes for which we have not previously obtained consent.
• Not disclosing personal data to third parties or sharing it.
• Keeping personal data only for as long as strictly necessary for the specific purpose for which it was provided.

Who is responsible for your personal data

What is personal data and personal data processing

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Processing of personal data means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

What processing we carry out and for what purposes

• User information request
  Managing information requests submitted by the user through the contact form and/or the email address, postal address, and/or phone number provided through the website.
• Newsletter subscription
  Managing subscription to the newsletter.
• Work with us by submitting a CV
  Managing CVs received through the form available on the website, as well as any presentation videos attached to the application.
• User account registration and access
  Managing registration and access to the user portal through a user account and password.
• Blog comments management
  Managing the submission and receipt of comments posted by the user on the blog.

What personal data we collect

Through our website we may collect personal data for different purposes:

• User information request
  We will collect your name, email address, phone number, and any personal data you provide in connection with your enquiry.
• Newsletter subscription
  We will collect your email address.
• Work with us by submitting a CV
  We will collect your first and last name, email address, phone number, work and academic experience, and any other additional information you include in your CV. We will also collect your image through the presentation video you provide.
• User account registration and access
  Email address and password, as well as any other data provided to create the account/profile.
• Blog comments management
  Any data provided when publishing the relevant comment.

Depending on the purpose for which the data is provided, only the data strictly necessary will be required.

It is important that the user is aware of the data provided and the purpose for providing it, because by providing it, the user accepts that we collect, store, and use such data for the required purpose. The user may withdraw consent at any time through the appropriate channels. The data subject’s consent is the legal basis for processing personal data.

Legal basis for processing personal data

In accordance with applicable data protection regulations, we need a lawful basis to process your personal data. The lawful basis is your consent.

Your rights regarding the personal data provided

As a user, you may exercise the following rights:

• Right of access: The right to obtain confirmation as to whether or not we are processing your personal data and, where that is the case, access to the personal data.
• Right to rectification: The right to obtain rectification of inaccurate personal data. In the request, you must indicate the data you want to be corrected.
• Right to object: The right to object at any time, on grounds relating to your particular situation, to processing based on the organization’s legitimate interests. In that case, we will stop processing the personal data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
• Right to erasure: The right to obtain the erasure of your personal data.
• Right to data portability: The right to receive your personal data and have it transmitted to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
• Right to restriction of processing: The right to request restriction of processing where you contest the accuracy of the data (while we verify it), or where you have objected to processing (while we verify whether our legitimate grounds override yours).

You may exercise these rights at any time by sending a written request and proof of identity to the Data Controller at the address indicated above, or by email to: info@petitaescola.cat.

You also have the right to lodge a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency) if you consider that the processing of personal data infringes applicable legislation.

Data security and storage

We will keep the data only for as long as strictly necessary to provide the requested service and while the data subject does not request deletion, adopting appropriate technical and organizational measures against unauthorized or unlawful processing and against accidental loss, destruction, or damage, making every effort to protect and keep the data secure.

What personal data we share with third parties

No data disclosures are envisaged except where there is a legal obligation or a communication necessary to provide the requested service properly. No international data transfers are envisaged.