Privacy Policy of Academie Lyceum

Contact Information of the Data Controller

Full Name: Ignacio Méndez Dumas
Contact Phone Number: +34 611 159 166
Contact Email: info@academielyceum.com

 

Laws Incorporated into This Privacy Policy

This privacy policy is adapted to the current Spanish and European regulations on personal data protection. In particular, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

 

Identity of the Data Controller

The data controller for the personal data collected on this website is Ignacio Méndez Dumas, with the contact information indicated above.

Registration of Personal Data

The personal data collected by Academie Lyceum through the forms on its pages will be included in an automated file under the responsibility of Ignacio Méndez Dumas, duly declared and registered with the General Register of the Spanish Data Protection Agency, with the aim of facilitating, expediting, and fulfilling the commitments established between the Website and the User, or maintaining the relationship established in the forms filled out by the latter, or to respond to a request or inquiry.

Principles Applicable to the Processing of Personal Data

The processing of the User’s personal data will be subject to the following principles established in Article 5 of the GDPR:

  • Principle of lawfulness, fairness, and transparency: The User’s consent will be required at all times with prior transparent information on the purposes for which personal data is collected.
  • Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
  • Principle of data minimization: Personal data will be adequate, relevant, and limited to what is necessary concerning the purposes for which they are processed.
  • Principle of accuracy: Personal data will be accurate and, where necessary, kept up to date.
  • Principle of storage limitation: Personal data will be kept in a form that permits identification of the User for no longer than is necessary for the purposes of the processing.
  • Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures appropriate security and confidentiality of personal data.
  • Principle of accountability: The data controller will be responsible for ensuring compliance with the above principles.

 

Categories of Personal Data

The categories of data processed by Academie Lyceum are solely identification data. Special categories of personal data, as defined in Article 9 of the GDPR, are not processed.

Legal Basis for Processing Personal Data

The legal basis for processing personal data is consent. Academie Lyceum is committed to obtaining the User’s explicit and verifiable consent for processing their personal data for one or more specific purposes.

Purposes of Processing Personal Data

Personal data is collected and managed by Academie Lyceum to facilitate, expedite, and fulfill the commitments established between the Website and the User, or to maintain the relationship established in the forms filled out by the latter, or to respond to a request or inquiry.

Retention Periods for Personal Data

The User’s personal data will be retained for the time necessary to fulfill the purposes of their processing and subsequently for the period in which legal liabilities may arise from the services provided.

Recipients of Personal Data

The User’s personal data will not be shared with third parties.

Personal Data of Minors

In compliance with Articles 8 of the GDPR and 7 of the LOPDGDD, only those over the age of 14 may lawfully provide their consent for processing their personal data by Academie Lyceum. In the case of a minor under 14 years of age, the consent of the parents or guardians will be required, and it will only be considered lawful to the extent that they have authorized it.

Secrecy and Security of Personal Data

Academie Lyceum is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security for the risk involved in the data collected, to ensure the security of personal data and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to transmitted, stored, or otherwise processed personal data.

Rights Arising from the Processing of Personal Data

The User has the following rights regarding Academie Lyceum, as recognized in the GDPR:

  • Right of access: The User has the right to obtain confirmation as to whether or not personal data concerning them is being processed by Academie Lyceum, and if so, the right to access the personal data and related information.
  • Right to rectification: The User has the right to obtain the rectification of inaccurate personal data concerning them or to have incomplete personal data completed.
  • Right to erasure: The User has the right to obtain the erasure of personal data concerning them without undue delay when one of the conditions set out in Article 17 of the GDPR applies.
  • Right to restriction of processing: The User has the right to obtain restriction of processing when one of the conditions set out in Article 18 of the GDPR applies.
  • Right to data portability: The User has the right to receive the personal data concerning them, which they have provided to Academie Lyceum, in a structured, commonly used, and machine-readable format and to transmit it to another data controller without hindrance, when the conditions set out in Article 20 of the GDPR are met.
  • Right to object: The User has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them based on Article 6(1)(e) or (f), including profiling based on those provisions. Academie Lyceum will stop processing the personal data unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the User, or for the establishment, exercise, or defense of legal claims.
  • Right not to be subject to a decision based solely on automated processing, including profiling: The User has the right not to be subject to a decision based solely on automated processing, including profiling, unless the conditions set out in Article 22 of the GDPR apply.

 

Exercising Rights

The User may exercise their rights by sending a written communication to the data controller with the reference “GDPR-LOPDGDD”, specifying:

  • Full name of the User and a copy of their ID. Where representation is admitted, the identification by the same means of the person representing the User will also be necessary, along with proof of representation. The photocopy of the ID may be replaced by any other legally valid means that proves identity.
  • Request in which the specific right being exercised is stated.
  • Address for notification purposes.
  • Date and signature of the applicant.
  • Any document that supports the request being made.

 

Complaints to the Supervisory Authority

Should the User consider that there is a problem or infringement of the current regulations in the way their personal data is being processed, they have the right to effective judicial protection and to file a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD) (https://www.aepd.es).

Acceptance and Changes to This Privacy Policy

It is necessary for the User to have read and to agree with the conditions on the protection of personal data contained in this Privacy Policy, as well as to accept the processing of their personal data so that the data controller can proceed with it in the manner, during the time, and for the purposes stated. Use of the Website implies the User’s acceptance of the Website’s Privacy Policy.

Academie Lyceum reserves the right to modify its Privacy Policy according to its criteria, or due to a legislative, jurisprudential, or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will be explicitly notified to the User.

This Privacy Policy was updated on 8/12/2024 to adapt to Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).