ADDITIONAL INFORMATION ON DATA PROTECTION
“Controller” (of the data processing)
Who is responsible for processing your personal data?
Tax ID (NIF): B-86024072
Postal Address: C/ Escalona 59, 28024 Madrid
Phone: 91 711 50 93
Email: info@colegio-santagema.es
“Purpose” (of the data processing)
Why do we process your personal data?
At Colegio Santa Gema Galgani, we process only the data provided by interested individuals, and solely for the purpose of maintaining the established contractual relationship and delivering the educational and training services inherent to our institution. These include managing school admission requests and enrolments; academic and administrative management; management of classroom, complementary, and extracurricular activities; management of related services (transport, dining, psycho-pedagogical guidance, etc.); handling requests for information; providing updates on the expansion and improvement of our services; adapting these services to the preferences and needs of parents, guardians, or legal representatives of our students and users; designing new services related to those mentioned above; sending updates about our services; sending, via traditional and/or electronic means, technical, operational, and commercial information about services currently offered by the school, services in which the school acts as an intermediary, or services that may be offered in the future; and sending satisfaction survey forms, which recipients are not obligated to complete and which will remain anonymous
Personal data will not be used for any purposes incompatible with those listed above, which are inherent to the mission of Colegio Santa Gema Galgani.
How long will we keep your personal data?
The personal data collected by Colegio Sta. Gema Galgani is strictly necessary for fulfilling the specific, explicit, and legitimate purposes declared and known to the data subjects, for which it was obtained in the context of the established contractual relationship.
The personal data provided will be kept as long as the contractual relationship remains in effect. After that, unless the right to erasure has been exercised, the data will be retained in accordance with the legal retention periods applicable in each specific case, depending on the type of data and the purpose of the processing.
Colegio Sta. Gema Galgani will retain data and supporting documentation relating to the legal relationship for the periods required by the relevant sectoral regulations, as well as for the statutory limitation periods of civil, criminal, administrative, or other legal actions that may arise from the relationship.
Once those periods have elapsed, the personal data will be deleted, unless the data subject—or their parents, guardians, or legal representatives—has explicitly authorised its retention and inclusion in the “Alumni” database, for the purpose of receiving information about the school’s various activities and services.
In accordance with education regulations, Colegio Sta. Gema Galgani is responsible for the custody and archiving of student academic records, and therefore, such data will be kept indefinitely. In addition to strictly academic information and data, psychopedagogical and academically relevant medical reports will also form part of the student’s academic record.
Legal basis (for processing)
What is the legal basis for processing your data?
The legal basis for data processing is:
• The express consent of the data subject or their legal representative
• The performance of the educational and training services contract that binds the parents, guardians, or legal representatives of our students to Colegio Sta. Gema Galgani
• Additional Provision 23 of Organic Law 2/2006, of May 3, on Education, and other regional regulations
• Legitimate interest, in accordance with Article 6.1(f) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data
Recipients (of disclosures or transfers)
To whom will your data be communicated?
Colegio Sta. Gema Galgani will not disclose data to third parties, except in cases legally or contractually provided for, such as the Ministry of Education, the Regional Department of Education, the Tax Administration and other relevant public authorities, Social Security entities, other educational centres in case of academic record transfers, police, and judicial authorities.
If you have given prior authorisation, Colegio Sta. Gema Galgani may:
• Share your identifying data with the class parent representatives so they can carry out their assigned responsibilities.
• When necessary, due to your child’s participation in an activity (such as a trip, event, competition, etc.), share their data with the company organising the activity.
• Provide student data to the Alumni Association once they have left the school or completed their studies.
• Share your data with the Parent Association for the purpose of enrolling you as a member.
• Provide data to the medical centre, insurance broker, and insurance company in the event of a school accident requiring medical treatment.
• Share data with individuals and companies collaborating in the provision of extracurricular activities, such as the Recreational and Cultural Association, Centro Musical Serra, Madrid Karate Federation, La Granja de los Cuentos Campo, or Club de Ski Noroeste, among others.
• Provide your data to the travel agency with which the school organises end-of-year or educational trips, so they can deliver their services.
Colegio Sta. Gema Galgani will obtain express, prior, and informed consent from data subjects for any other data disclosures not covered by legal or contractual obligations.
Are data transferred to other countries?
Colegio Santa Gema Galgani does not transfer data to third countries outside the European Economic Area (EEA).
Within the EEA, Colegio Santa Gema Galgani transfers data to Portugal, specifically to the Escola Superior de Saúde da Cruz Vermelha Portuguesa, in connection with the internships carried out there by students enrolled in Health Vocational Training Programmes. Since Portugal is part of the EEA, this data communication is not considered an "international data transfer."
If in the future Colegio Santa Gema Galgani needs to make such transfers for the organisation of language immersion programmes or exchange trips with schools in English-speaking countries, it will request the express and informed consent of the students' parents, guardians, or legal representatives in advance.
Rights (of the data subjects)
What are your rights when you provide us with your data? Anyone has the right to obtain confirmation as to whether Colegio Santa Gema Galgani is processing personal data that concerns them.
Data subjects have the right to access their personal data, as well as to request correction of inaccurate data or, where appropriate, to request deletion of the data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request a restriction of processing, in which case their data will only be kept for the exercise or defence of legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. Colegio Santa Gema Galgani will stop processing the data, except for compelling legitimate reasons or the exercise or defence of possible legal claims.
How can you exercise your rights? To exercise your rights, you may contact Colegio Sta. Gema Galgani in writing, either by post or email using the contact details provided in the section titled “Controller of the Data,” or by any other means that allows proof of submission and receipt of your request.
To process your request, it is necessary to verify your identity by including a photocopy of your National Identity Document or any other legally valid form of identification.
