Privacy Policy

1. IDENTIFICATION OF THE DATA CONTROLLERS

In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that personal data provided through this website or its forms will be jointly processed by:

  • LES ALZINES, owner of the domain www.institucio.org, and with data controller
    INSTITUCIÓ FAMILIAR D’EDUCACIÓ, S.A., NIF A08177933, address at Av. Montserrat Roig, 3 (08195) Sant Cugat del Vallès, tel. 93 393 14 00, email: institucio@institucio.org, DPO: dpd@institucio.org.
  • BELL-LLOC, owner of the domain www.bell-lloc.org, and with data controller BELL-LLOC, S.A., NIF A17015215, address at Can Pau Birol, 2-6 (17005) Girona, tel. 972 232 111, email: privacitat@bell-lloc.org, DPO: informacio@bell-lloc.org.


Both entities act as joint data controllers within the framework of the common educational project that will culminate in the creation of a new private center.

2. PURPOSES OF PROCESSING

Data collected through the website, forms, or communication channels will be processed for the following purposes:

  • To address requests for information and inquiries related to the new educational project.
  • To manage pre-registration processes or contact with interested families.
  • To maintain informative communications about activities, events, and initiatives of the joint educational project.
  • Where applicable, to manage participation in extracurricular activities, workshops, visits, or open days.
  • To guarantee the security and integrity of data through appropriate technical systems.
  • To carry out the provision of contracted products or services.
  • The specific purpose for which you have provided and/or authorized us to disseminate the data.
  • Accounting and administrative management procedures necessary to execute the product or service.


3. LEGAL BASIS

Data processing is based on:

  • The consent of the data subject (by submitting forms or subscribing to communications).
  • Compliance with legal obligations applicable to educational centers.
  • The legitimate interest of the centers to promote and manage their educational project.


4. LAWFULNESS OF PROCESSING

  • Consent: when initiating a contractual or commercial relationship; by submitting or allowing the dissemination of data for a specific purpose.
  • Performance of a contract: when managing the contracted product or service.
  • Compliance with a legal obligation: where applicable.
  • Performance of a task carried out in the public interest: for data processing in the exercise of the educational function, based on the Organic Law of Education of 2006 (LOE) and Organic Law 3/2020 (LOMLOE).
  • Minors under 14 years old: consent of those holding parental authority and/or legal guardians.


5. RECIPIENTS

Data is not transferred to third parties, except with express consent and/or due to legal obligation or for strictly necessary services (e.g., educational platforms, IT services, or communication companies) with whom the corresponding data processing agreements have been signed.
No international data transfers are made. If services hosted outside the European Economic Area (e.g., Typeform, Google Workspace, etc.) are used, it is guaranteed that they offer adequate levels of protection through standard contractual clauses approved by the European Commission.

6. RIGHTS

Regarding the rights indicated below, you may exercise them by sending a communication accompanied by a document proving your identity and providing the necessary details to process the request to info@lesalzinesbell-lloc.org or to either of the two responsible entities through their channels indicated above in section 1.

  • Right of access: the right to request at any time confirmation as to whether your personal data is being processed, to be provided with information about said data and its processing, and to obtain a copy thereof.
  • Right to rectification: the right to request the rectification of inaccurate, outdated, or incomplete personal data concerning you.
  • Right to erasure or deletion – also known as the right to be forgotten: the right to request the erasure of your personal data when, among other reasons and provided a proportionality assessment is carried out, the data is no longer necessary for the purposes for which it was collected and the right to information does not prevail. However, this right is not absolute, so data may continue to be duly blocked in the cases provided for by applicable regulations. The de-indexing of links relating to personal data is part of the right to be forgotten.
  • Right to object: the right to object to the processing of your personal data, including profiling. Your right cannot be granted only when your data is processed for compelling legitimate grounds for the processing or for the establishment, exercise, or defense of legal claims.
  • Right to restriction of processing: the right to request that we restrict the processing of your personal data, which means that they may continue to be stored, but not further processed if any of the following conditions are met:
    • You contest the accuracy of the data, for a period enabling the controller to verify the accuracy of such data.
    • The processing is unlawful and you oppose the erasure of the data and, instead, request the restriction of their use.
    • The data is no longer needed for the purposes of the processing, but is required by you for the establishment, exercise, or defense of legal claims.
    • You have objected to the processing or requested its cancellation, pending verification whether the legitimate grounds of the controller override yours.
  • Right to data portability: the right to have your data transmitted to another data controller in a structured, commonly used, and machine-readable format. This right applies when the processing of your personal data is based on consent or on the performance of a contract and this processing is carried out by automated means.
  • Right to lodge a complaint with the Spanish Data Protection Agency (AEPD): in the event that we do not address your rights, you may lodge a complaint with the AEPD, whose details you can consult on its website https://www.aepd.es/agencia/contacto.html or at its address C/ Jorge Juan núm. 6, 28001-Madrid, or with the Catalan Data Protection Authority (APDCAT).


Regarding the rights, it should be noted:

  • That a copy of your personal data will be free of charge, although the request for additional copies may be subject to a reasonable fee based on administrative costs.
  • That you may be required to provide further information necessary to manage your request.


7. EXISTENCE OF PROFILING THROUGH AUTOMATED DECISIONS

Not foreseen.

8. RETENTION PERIOD

In accordance with data protection regulations, personal data will be retained for the time necessary to fulfill the purposes for which it was collected, provided you do not exercise your right to cancellation/erasure, and, subsequently, will be duly blocked as long as they are necessary to address possible liabilities arising from the processing, until the expiry of the legal limitation periods established in current regulations.

Once the new educational entity is constituted, it will assume responsibility for the processing of all data collected up to that point.

9. DATA OF MINORS

In no case will personal data of minors be collected without the prior consent of their parents or legal guardians.
The forms on this website are intended only for individuals over 14 years of age.
When data corresponds to students or minors participating in center activities, legal guardians will be informed of the purposes and conditions of processing, and necessary measures will be adopted to protect their confidentiality.

10. EXTRACURRICULAR ACTIVITIES AND AUTHORIZATIONS

In the case of extracurricular activities, outings, workshops, or complementary projects, data may be used for:

  • To manage the registration and logistics of activities.
  • To communicate practical information to families.
  • To disseminate, with specific consent, images or audiovisual materials of school activities.

Each activity may require express authorization from the minor’s legal representatives, detailing the specific purpose and, where applicable, the processing of images.

11. SECURITY MEASURES

The responsible entities have implemented technical and organizational measures to guarantee the confidentiality, integrity, and availability of data, preventing their alteration, loss, processing, or unauthorized access.

12. CONSTITUTION OF THE NEW EDUCATIONAL ENTITY

Once the creation of the new private center is formalized, this entity will assume the status of sole data controller, maintaining the same purposes, guarantees, and rights recognized in this policy.
Its updated identity, NIF, and contact details will be duly communicated.

13. AMENDMENTS

This policy may be updated to reflect legislative or organizational changes. Updates will be published on this website and will come into effect at the time of their publication.

Last updated: November 2025

Provisional common contact: info@lesalzinesbell-lloc.org