1. Data Controller
ISM – International School Maresme, S.L.
CIF: B67523944
Carrer Carles Flotats 14, 08360 Canet de Mar, Barcelona, Spain
Email: info@internationalschoolmaresme.com
Phone: +34 663 865 622
2. Data Protection Officer (DPO)
For any data protection queries, please contact our DPO:
Email: dpo@internationalschoolmaresme.com
3. Legal Framework
This policy complies with:
- General Data Protection Regulation (EU) 2016/679 (GDPR)
- Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD)
- Ley 34/2002, de 11 de julio, de servicios de la sociedad de la información y de comercio electrónico (LSSI-CE)
4. Personal Data We Collect
4.1 Website Visitors
- IP address (anonymized)
- Browser type and version
- Pages visited
- Cookies (with your consent)
4.2 Contact Form Submissions
- Name
- Email address
- Phone number
- Message content
4.3 Admissions Applications
- Parent/Guardian: name, email, phone, relationship to child
- Student: name, date of birth, current school, year group interest
- Languages spoken
- Special educational needs information
- Any additional information you provide
4.4 Enrolled Families (Parent Portal)
- Account credentials
- Children's academic records
- Attendance information
- Photographs (with separate consent)
5. Legal Basis for Processing
We process personal data based on:
| Purpose | Legal Basis (GDPR Article 6) |
|---|---|
| Website functionality | Legitimate interest (Art. 6(1)(f)) |
| Contact inquiries | Consent (Art. 6(1)(a)) |
| Admissions processing | Pre-contractual measures (Art. 6(1)(b)) |
| Student enrollment | Contract performance (Art. 6(1)(b)) |
| Legal obligations | Legal obligation (Art. 6(1)(c)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
6. Processing Children's Data
As an educational institution working with minors, we take extra care with children's data:
- Under GDPR Article 8 and Spanish law (LOPDGDD), parental consent is required for processing data of children under 14 years old
- We obtain explicit parental/guardian consent for all student data processing
- Photographs and images of students require separate, specific consent
- Children's data is never shared with third parties for marketing purposes
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Contact inquiries | 2 years from last contact |
| Unsuccessful applications | 2 years from decision |
| Enrolled student records | Duration of enrollment + 7 years |
| Financial records | 10 years (legal requirement) |
| Marketing consents | Until withdrawn |
| Website analytics | 26 months |
8. Data Sharing
We may share data with:
- Spanish educational authorities (Generalitat de Catalunya) - legal requirement
- Pearson Edexcel - for examination purposes
- IT service providers (within EU or with adequate safeguards)
- Emergency services - if required
We DO NOT sell personal data to third parties.
9. International Transfers
If we transfer data outside the European Economic Area (EEA), we ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Binding Corporate Rules
10. Your Rights
Under GDPR, you have the right to:
- Access - Request a copy of your personal data
- Rectification - Request correction of inaccurate data
- Erasure - Request deletion of your data ("right to be forgotten")
- Restriction - Request limited processing
- Data Portability - Receive your data in a structured format
- Object - Object to processing based on legitimate interests
- Withdraw Consent - At any time, without affecting lawfulness of prior processing
To exercise these rights, contact: dpo@internationalschoolmaresme.com
11. Complaints
You have the right to lodge a complaint with:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid
www.aepd.es
12. Cookies
See our separate Cookies Policy for details on how we use cookies.
13. Security
We implement appropriate technical and organizational measures including:
- SSL/TLS encryption
- Access controls
- Regular security audits
- Staff training on data protection
14. Changes to This Policy
We may update this policy periodically. The "Last updated" date at the top indicates the latest revision.
15. Contact
For any questions about this policy or our data practices:
Email: dpo@internationalschoolmaresme.com
Phone: +34 663 865 622
Address: Carrer Carles Flotats 14, 08360 Canet de Mar, Barcelona, Spain