Privacy policy

Who is responsible for your personal data?

Covent College International, S. L. U. (Tax ID B76003011, Calle Alfonso XIII, 7, 35003 Las Palmas de Gran Canaria, officemanager@coventcollege.com) is the CONTROLLER of the personal data of the USER and informs you that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

What data do we process and why?

• Contact form: name, email, phone (optional), subject and message, to answer your enquiry and send you the information you request about courses, places, timetables or prices.
• Level tests: name, email, age, phone, your answers and the result, to tell you your level, recommend the right course and contact you about it.
• Job applications: the CV and details you send by email, to include you in our recruitment processes and assess your profile for current or future vacancies.
• Form security: a pseudonymised record of your IP address (a hash with a secret salt), to limit repeated submissions and protect the forms from spam.

We will not send you commercial communications unless you expressly ask us to, and we do not make automated decisions or profiles.

On what legal basis?

• Contact: taking steps at your request before a possible enrolment (art. 6.1.b GDPR) and your consent when you send us the form (art. 6.1.a GDPR).
• Level tests: your consent, which you give by ticking the privacy box before starting (art. 6.1.a GDPR).
• Job applications: your consent, by sending us your CV (art. 6.1.a GDPR).
• Form security: our legitimate interest in protecting the website and our mailbox from abuse (art. 6.1.f GDPR).

Minors

Level tests are intended for students aged 12 and over. If the student is under 14, the data must be provided by their father, mother or legal guardian, who consents on their behalf (art. 7 LOPDGDD).

How long do we keep your data?

The website does not store the forms: they are sent by email to the academy's mailbox. We keep them only as long as needed to handle your request and, if you become a student, for the duration of that relationship and the periods required by law. CVs are kept for a maximum of one year; after that, please send it again if you wish to keep taking part in our recruitment processes. The pseudonymised IP record is discarded after one hour. Data is then deleted with appropriate security measures.

Who do we share your data with?

We do not share your data with third parties unless legally required. Our web hosting and email providers process it on our behalf, under the data processing contracts required by law, solely to provide those services.

If you contact us by WhatsApp, the conversation is also subject to WhatsApp's privacy policy. The Google Maps maps embedded on some pages are explained in the cookies section of the legal notice.

What are your rights?

• To withdraw your consent at any time.
• To access, rectify, port and erase your data, and to restrict or object to its processing.
• To lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations.

To exercise your rights, write to officemanager@coventcollege.com or to Covent College International, S. L. U., Calle Alfonso XIII, 7, 35003 Las Palmas de Gran Canaria.

Mandatory or optional data

The fields marked as required in each form are necessary to handle your request; the rest are optional. If you do not provide them, we may not be able to answer you or adapt the information to your needs. The USER guarantees that the personal data provided is true and is responsible for communicating any changes.

Security measures

In accordance with the data protection regulations in force, the CONTROLLER complies with the GDPR and the LOPDGDD, and in particular with the principles of article 5 GDPR: data is processed lawfully, fairly and transparently, and is adequate, relevant and limited to what is necessary for its purposes.

The CONTROLLER has implemented appropriate technical and organisational measures to protect the rights and freedoms of USERS. The website is only served over an encrypted connection (HTTPS).