Privacy Policy

UNILANG IDIOMAS informs users, students and legal representatives about the processing of their personal data in compliance with Regulation (EU) 2016/679, the General Data Protection Regulation, and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights.

This policy applies to data collected through the website https://www.unilang.es, contact forms, requests for information, reservations, enrolments, electronic communications and other services provided by the centre.

1. Identity of the controller

Owner: Carlos Gonzalez Valle
Tax ID: 13704978Z
Trade name: UNILANG IDIOMAS
Address: Calle Rualasal No. 5, 4th left, 39001 Santander, Cantabria, Spain
Email: idiomas@unilang.es
Website: https://www.unilang.es

2. Personal data processed

UNILANG IDIOMAS may process, depending on the case, the following categories of data:

Identification and contact data: first name, surname, telephone number, email address, postal address and identification document where necessary.
Academic or training data required to manage courses, placement tests, groups, enrolments and student follow-up.
Financial and billing data necessary for administrative and accounting management.
Browsing and cookie data, in accordance with the Cookies Policy.
Image, voice, photographs, audio or video only where there is express, specific and written consent, or another valid legal basis.

3. Purposes of processing

Personal data may be processed for the following purposes:

To respond to requests for information, queries or communications received through the website, email or telephone.
To manage reservations, enrolments, courses, groups, attendance, academic communications and delivery of the contracted educational service.
To carry out administrative, accounting, tax and billing management.
To manage placement tests, certifications or activities linked to the requested services.
To send informative communications related to the contracted service.
To send commercial or promotional communications only where the data subject has given express consent or another valid legal basis exists.
To use images, voice, photographs, audio or video only where there is express, specific and written consent.

4. Legal basis for processing

The legal bases legitimising the processing are:

Performance of a contract or pre-contractual measures: management of requests, reservations, enrolments and provision of educational services.
Consent of the data subject: sending commercial communications, use of image and voice, non-technical cookies and processing that requires it.
Compliance with legal obligations: tax, accounting, administrative and consumer law obligations.
Legitimate interest: website security, user assistance and service improvement, provided that the rights of the data subject do not prevail.

5. Image, voice and recordings

Image and voice are personal data. UNILANG IDIOMAS will not use photographs, audio recordings or videos taken during classes, events, school activities or centre activities for commercial, promotional, website, social media or advertising materials unless prior express, specific and written consent has been obtained from the student or their legal representative.

Consent will be obtained separately, it will not be understood as generally included in acceptance of the website or enrolment, and it may be withdrawn at any time.

6. Minors

Where the student is a minor, the data will be provided by their parents or legal guardians where necessary. In the case of minors under 14, consent for any processing that requires it must be given by the holder of parental authority or guardianship.

7. Recipients and disclosures

Data will not be disclosed to third parties except where there is a legal obligation, express authorisation from the data subject, or where necessary for the provision of the requested service.

Data may be accessed by providers rendering services to UNILANG IDIOMAS, such as web hosting, IT maintenance, accountancy services, communication tools, payment gateways or other data processors, always subject to the guarantees required by data protection regulations.

8. Retention period

Data will be kept for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by applicable law or as long as legal liabilities may arise.

Data processed on the basis of consent will be kept until the data subject withdraws that consent, without prejudice to any retention required by law.

9. Rights of data subjects

The data subject may exercise the following rights recognised in Regulation (EU) 2016/679 and Organic Law 3/2018:

To exercise these rights, the data subject may send a request to idiomas@unilang.es, stating the right they wish to exercise and attaching a copy of their identification document. The maximum response time is one month from receipt of the request, extendable to three months in cases of particular complexity.

They may also file a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain, through its electronic office: www.aepd.es.

Right of access to personal data.
Right to rectification of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”).
Right to object.
Right to restriction of processing.
Right to data portability.
Right not to be subject to automated individual decisions, including profiling.
Right to withdraw consent at any time, where processing is based on consent.
Right to a digital will (Art. 3 of Organic Law 3/2018): the data subject may leave instructions on the fate of their data after death.
Right to effective judicial protection and to lodge a complaint with the competent supervisory authority.

10. Security

UNILANG IDIOMAS applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or accidental or unlawful destruction.