Draft for review. The school must still validate its full legal name and registration, educational authorisation, data protection officer contact details and service provider arrangements. These texts should not be treated as final until this information is complete.
Data controller
COMPLVTVM Montessori School
Tax identification number (NIF): F56925886
C/ Río Bidasoa, no. 1, 28803 Alcalá de Henares, Madrid, Spain.
Telephone: +34 609 222 071
Email: soporte@complutumschool.com.
This policy covers enquiries and requests made through this website. Enrolment and other school services require separate information about their specific processing activities.
The data we receive
The forms collect the information you provide: first and last name, email address, telephone number and message. The admission request also includes the family name, contact person, age of the child and stage of interest.
Fields marked as required are necessary to handle your request; we cannot process it without them. Do not send medical reports, identity documents or other particularly sensitive information through these forms. If we need additional documents, we will tell you which channel to use.
Browsing communicates technical information, such as your IP address and browser, to the servers providing the service. See the external services section for information about connections to third parties.
Purposes and legal bases
- Responding to general enquiries: based on the consent you give when submitting the form (Article 6(1)(a) GDPR).
- Handling visits and admission requests: to take steps at your request before entering into a contract (Article 6(1)(b) GDPR).
- Meeting legal obligations and handling rights requests: where required by applicable law (Article 6(1)(c) GDPR).
- Protecting the website: based on the legitimate interest in maintaining service security, limited to the necessary technical data (Article 6(1)(f) GDPR).
Sending an enquiry does not subscribe you to advertising. These forms are not used for automated decisions with legal effects or for admission profiling.
How long we keep your data
Enquiry data is kept for as long as necessary to respond to and follow up your request. Admission data is kept while the application is processed; if enrolment takes place, the specific information for that relationship will apply.
Once the purpose has ended, data will be deleted or, where required, retained with access restricted for the statutory periods needed to meet obligations and address potential liabilities. The exact periods depend on the type of documentation and applicable law. You can ask the controller for information about your case.
Who can access your data
Authorised school staff and providers needed to host and maintain the website and manage email may access data to deliver their services. Data may be disclosed to authorities or public bodies where legally required.
The website theme sends form requests to the email address configured by the school. The identity of contracted providers, the location of hosting and email services, and their contractual safeguards are awaiting validation by the school in this review version.
External services and transfers
The website requests typefaces from Google Fonts: your browser connects to Google to download them. Google Maps stays disabled until you authorise it. Once enabled, Google receives connection information and may use its own storage technologies. Social media links only take you to those platforms if you choose to open them.
These providers may process data outside the European Economic Area. The basis and safeguards applicable to each transfer must be checked with the providers; authorising a map does not replace that verification. See Google's privacy policy and our cookie information.
Your rights
You can request access, rectification, erasure, objection, restriction and, where applicable, portability of your data by writing to soporte@complutumschool.com or the postal address above. Explain your request and provide a way for us to reply. Additional identity information will only be requested where necessary and proportionate.
You can withdraw consent at any time without affecting processing previously based on it. Requests will generally be answered within one month; where a lawful extension applies, you will be informed of the reasons.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
Families and children
Admission requests must be submitted by parents or legal guardians, providing only the necessary information. This website does not ask children to submit sensitive information or enter into service contracts.
The data protection officer's contact details are awaiting confirmation by the school. Until this information is complete, you can address privacy enquiries to the controller identified above.