Privacy policy

The Privacy Policy of COLEGIO GAZTELUETA is governed by compliance with current legislation on the protection of personal data and the Law on Information Society Services and Electronic Commerce. The aim of this Policy is to protect information on the Internet, in the same way as it is protected in other media. ASOCIACIÓN DOCENTE, CULTURAL Y FORMATIVA DEL COLEGIO GAZTELUETA is the owner of the following website www.gaztelueta.comand sets out in this section the Privacy Policy regarding the personal information that the user may provide when visiting our website.

1. Use and processing of personal data.

In compliance with the provisions of the regulations on Personal Data Protection, ASOCIACIÓN DOCENTE, CULTURAL Y FORMATIVA DEL COLEGIO GAZTELUETA (COLEGIO GAZTELUETA) informs you that the personal data provided by filling in the following forms "Do you want to get to know the school?", "Do you want to keep up to date with everything?"  y "Contact, will be incorporated into a file owned by COLEGIO GAZTELUETA, being able to exercise, as indicated in section 3, their rights of access, rectification, deletion, opposition, limitation of processing and other rights set out in articles 15 to 22 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation - GDPR).

If the user decides to use any of the web forms, the necessary data requested will be processed in order to deal with their request. In this sense, the corresponding registration in these forms implies the user's express authorisation for the sending of information to their email address and/or mobile phone. On the possibility of exercising data protection rights (see section 3).

In compliance with Law 34/2002, of 11th July, on Information Society Services and Electronic Commerce, (hereinafter LSSIyCE) COLEGIO GAZTELUETA will not send advertising communications by e-mail that have not been authorised by the users.

In those cases where it is necessary to fill in a form and click on the validate or send button, its completion will necessarily imply that you have been informed and, where appropriate, have given the corresponding consent to the content of this privacy policy. Thus, whenever COLEGIO GAZTELUETA requests personal data, it will include a link to this Privacy Policy in order to make you aware of your rights and obligations. The user must fill in the application forms with true, accurate, complete and updated data, being informed at the same time of those data that must be filled in and the consequences of not doing so. Likewise, by accepting, the user acknowledges that the information and personal data collected are accurate and truthful.

For more information on the processing of your data in accordance with the General Data Protection Regulation - GDPR click here.

2. Security measures

At COLEGIO GAZTELUETA we are aware of how important your personal data is to you. For this reason, we are committed to transparency in all matters relating to the privacy and security of the information we process. We strive to adopt all the security measures necessary to guarantee the protection of the personal data we process, and we are highly committed to their continuous improvement, adapting to current legislation and the technology available at all times.

Therefore, COLEGIO GAZTELUETA informs you that it has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and to avoid its alteration, loss and unauthorised processing and/or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment.

COLEGIO GAZTELUETA has established additional measures in order to reinforce the confidentiality and integrity of the organisation's information, such as the establishment of limitations on the use of electronic mail when sending confidential data or documents. However, users should be aware that security measures on the Internet are not impregnable. In the same vein, it is important to note that COLEGIO GAZTELUETA staff in contact with information from the various online forms are obliged to keep all data processed in the course of their work secret, and to use it only in the manner required for the performance of their duties.

COLEGIO GAZTELUETA continuously monitors, controls and evaluates processes to ensure respect for data privacy.

3. Exercise of rights of access, rectification, cancellation and objection

Those individuals who have provided their data may contact COLEGIO GAZTELUETA, in its capacity as owner and party responsible for the file, in order to exercise their rights of access, rectification, suppression, opposition, limitation of processing and other rights recognised in arts. 15 to 22 of the Spanish Data Protection Act, free of charge. REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).

Given the confidential nature of the information, you will not be able to exercise your rights by telephone, as this means does not allow you to prove your identity as the owner of the registered data. The interested party may exercise their rights by writing to COLEGIO GAZTELUETA, Barrio de Artaza 87, (48940) Leioa - Bizkaia or by sending a letter to the following e-mail address [email protected]  proving your identity by means of a photocopy of your ID card, and with the following reference in your letter or e-mail: "LOPD-GAZTELUETA".

• Right of access (art. 15 RGPD)

You have the right to obtain confirmation from COLEGIO GAZTELUETA as to whether or not we are processing your personal data. In this case you have the right of access to this personal data and to the following information:

• Purpose of processing;
• Category of personal data processed;
• Recipients or categories of recipients to whom the data will be disclosed;
• Expected retention period or, if this is not possible, the criteria for its determination;
• The existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject or to object to the processing of such data;
• Existence of the right to lodge a complaint with the supervisory authority;
• Where personal data have not been obtained from the data subject, any available information on their origin shall be provided to the data subject;
• The existence of automated decisions, i.e. without any human intervention, including profiling, and, at least in such cases, meaningful information on the logic applied and the significance and expected consequences of such processing for the data subject.

You have the right to obtain from COLEGIO GAZTELUETA the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of an additional declaration.

• Right to erasure, "right to be forgotten" (art. 17 RGPD)

The right of deletion gives you the right to obtain from COLEGIO GAZTELUETA the deletion of personal data concerning you, when any of the following circumstances apply:

• No longer necessary for the purposes for which they were collected or processed;
• Where the data subject withdraws the consent on which the processing is based and the consent is not based on any other legal ground.
• Where the data subject objects to the processing and no other legitimate grounds for processing prevail.
• Where personal data have been processed unlawfully.
• Where personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the controller.
• Where the personal data have been obtained in connection with the provision of information society services to minors

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

In such cases COLEGIO GAZTELUETA will cease to process your personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the formulation, exercise or defence of claims.

• Right to data portability (art. 21 RGPD)

This right can only be exercised:

• Where the processing is carried out by automated means;
• Where the processing is based on consent or a contract;
• Where the data subject so requests in respect of data which he or she has provided to the controller and which relate to him or her, including data arising from the data subject's own activity.

Instead, it is not applicable:

• To data of third parties that a data subject has provided to a controller.
• Where the data subject has requested the portability of data relating to him/her but provided to the controller by a third party.

The restriction of processing means that, at the request of the data subject, the processing operations that would be appropriate in each case will not be applied to his or her personal data.

Limitation of processing may be requested when:

• The data subject has exercised the rights of rectification or objection and the controller is in the process of determining whether to comply with the request.
• The processing is unlawful, which would lead to the erasure of the data, but the data subject objects to this.
• The data are no longer necessary for processing, which would also result in their erasure, but the data subject requests the restriction because he or she needs them for the formulation, exercise or defence of claims.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you.

The above is excepted:

• Where authorised by Union or Member State law.
• Where necessary for the conclusion or performance of a contract between the data subject and a controller.
• Where it is based on the explicit consent of the data subject.

4. Use of cookies and collection of statistical data

COLEGIO GAZTELUETA uses its own and third-party cookies on this website.

What are cookies?

A cookie is a small text file that is stored in your browser when you visit almost any web page. It is useful for the website to be able to remember your visit when you return to that page.

What own cookies do we use?

Session cookies: websites have no memory. Without these cookies, a user going from one page to another within the same website would be treated as a completely new visitor each time they move from one page to another. Session cookies allow this website to keep track of the user's navigation from one page of this website to another, so that it will not ask you for information that you have already given it. These cookies allow the user to move through the different pages of this website quickly and easily, without having to re-authenticate or re-initiate the process in each area you visit.

You can find more information in our Cookie Policy.

What third party cookies do we use?

On this website we use third-party cookies, specifically those of Google Analyticsanalysis cookies, the purpose of which is to study visits to the website in order to obtain access statistics. Under no circumstances do these cookies include users' personal or private information.

For more information, please consult the following link:

5. Social Networking - Plugins

This website uses plug-ins from social networks for its presentation on the Internet. The plug-ins can be recognised by the logo of the social network (e.g. Twitter with the silhouette of a blue bird in flight or Facebook with a blue "f") or the caption.

If you access a website that contains such a plugin, your browser establishes a direct connection to the servers of the social network and the social network transmits the content of the plugins directly to the user's browser and integrates it into the website. COLEGIO GAZTELUETA therefore has no way of influencing the scope of the data that the social network collects with the help of these plugins.

By means of these plugins, the social network receives the information that the user has opened the corresponding page of our website. If the user is logged into the social network at the same time, the social network can assign the visit to the user's account. When interacting with the plugins, for example by pressing the "Like" button or writing a comment, the relevant information is transmitted directly from your web browser to the respective social network where it is stored. Even if you are not a member of the social network, there is the possibility that the social network will find out your IP address and save it.

COLEGIO GAZTELUETA does not know which buttons the user has used and when. You should consult the data protection guidelines of the respective social network, the purpose and volume of the data collected, the further processing and use of this data by the social network, as well as your rights and the possibilities for you to adjust this use in order to protect your privacy.

If you want to prevent social networks from collecting data via our Internet presence, you must log out of the social networks before accessing our website.

Facebook social plugins

Our website uses social plugins of the social network www.facebook.comoperated by Facebook Inc., 1601 S. California Ave. California Ave, Palo Alto, CA 94304, USA.

COLEGIO GAZTELUETA would like to point out that we do not know what data Facebook transmits and how it is used. The purpose and scope of data collection and its further processing and use by Facebook, as well as the related rights and possibilities for setting privacy protection can be found in Facebook's data protection information: www.facebook.com/policy.php.

Twitter social plugins

Our website uses social plugins of the social network www.twitter.comoperated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, California 94103, USA.

COLEGIO GAZTELUETA would like to point out that we do not know what data Twitter transmits and how it uses this data. The purpose and scope of data collection and the further processing and use of data by Twitter, as well as the associated rights and options for setting privacy protection can be found in the data protection information at www.twitter.com/privacy.

Google Plug-In

Our website uses the "G+" button of the social network Google Plus, operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

If you access our website, your server establishes a direct connection to Google's servers. The content of the "G+" button is transmitted directly by Google to your browser, which integrates it into the website. We therefore have no influence on the scope of the data that Google collects with this button. According to Google, no personal data is collected if you do not click on the button. This data, including your IP address, is only collected and processed for logged-in members.

The purpose and scope of data collection and its further processing and use by Google, as well as your rights and options to protect your privacy, can be found at

If you have a Google Plus account but do not want Google to collect your data via our pages and the link to the membership data already held by Google, you must log out of Google Plus before visiting our website.

YouTube plugins

Our website uses plugins from www.youtube.comoperated by YouTube LLC, a company with registered offices at 901 Cherry Avenue, San Bruno, CA 94066, United States.

COLEGIO GAZTELUETA would like to point out that we do not know what data is transmitted by YouTube and how it is used. The purpose and scope of data collection and the further processing and use of data by YouTube, as well as the associated rights and options for setting privacy protection can be found in the YouTube data protection information:

Instagram Plugins

Our website uses plugins from www.instagram.comoperated by Facebook Inc., 1601 S. California Ave. California Ave, Palo Alto, CA 94304, USA.

COLEGIO GAZTELUETA would like to point out that we do not know what data Facebook transmits and how it is used. The purpose and scope of data collection and its further processing and use by Facebook, as well as the related rights and possibilities for setting privacy protection can be found in Facebook's data protection information:

6. Child use policy

This website is not directed at children under the age of sixteen (16), nor do we knowingly collect information from such persons. If the user is under the age of sixteen (16), they are required to have the prior consent of their parents, guardians or legal representatives before proceeding to the inclusion of their personal data in any of the forms on this website. However, if parents, guardians or legal representatives of minors believe that their children or legal guardians have provided us with personal data without their consent, please contact us by writing to us at the address given in section 3 of this Privacy Policy.

COLEGIO GAZTELUETA disclaims any liability for failure to comply with this requirement.

7. Links

This Privacy Policy only applies to the COLEGIO GAZTELUETA website.

This website contains links to third party websites, whose privacy policies are unrelated to those of COLEGIO GAZTELUETA. By accessing such websites you can decide whether to accept their privacy and cookie policies. In general, if you browse the Internet you can accept or reject third party cookies from the configuration options of your browser.

8. Modification of this Privacy Policy

COLEGIO GAZTELUETA reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a change in the doctrine of the Spanish Data Protection Agency, legislation or jurisprudence. In such cases, COLEGIO GAZTELUETA will announce on this page the changes introduced reasonably in advance of their implementation.

The use of the registration forms after the effectiveness of the changes introduced will imply acceptance of these changes.