Privacy Policy

Last updated: November 20, 2024

Data Controller Information

Iberian Institute

34 Plaza Gardens

Liverpool L1 8BH

United Kingdom

Phone: +44 151 749 2683

Email: info@domain.com

Our Commitment to Your Privacy

At Iberian Institute, we understand that your privacy matters deeply. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you interact with our website or enquire about our Spanish language programmes.

We are committed to maintaining the highest standards of data protection and transparency. This policy applies to all personal data we process in connection with our services, whether you're browsing our website, submitting an enquiry, or participating in our Spanish language programmes.

Information We Collect

Information You Provide Directly

When you contact us or enquire about our Spanish language programmes, you may choose to provide:

  • Contact details: Your name, email address, and telephone number when you complete our contact forms
  • Programme enquiry information: Details about your Spanish learning goals, current language level, and preferred learning format
  • Communication records: Correspondence between you and our team regarding programme details or enrolment

Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies:

  • Device and browser information: Your IP address, browser type, operating system, and device identifiers
  • Website usage data: Pages visited, time spent on pages, links clicked, and navigation patterns
  • Referral information: How you arrived at our website, including search terms and referring websites
  • Cookie data: Information stored through cookies as detailed in our Cookie Policy

How We Use Your Information

Programme Enquiry Response

We use your contact information to respond to your enquiries about our Spanish language programmes, provide requested information about course structures and schedules, and arrange initial consultations to discuss your learning goals.

Website Improvement and Analytics

Automatically collected data helps us understand how visitors interact with our website. This information allows us to improve navigation, enhance content relevance, and optimise the user experience for prospective Spanish learners.

Marketing Communications

With your consent, we may send information about our Spanish language programmes, cultural events, and educational opportunities. You can withdraw this consent at any time through the unsubscribe link in our communications.

Legal Compliance

We process personal data as necessary to comply with legal obligations, establish or defend legal claims, and maintain records as required by applicable regulations governing educational services.

Legal Basis for Processing

We process your personal data based on your consent (when you submit enquiries), legitimate interests (to improve our services and communicate relevant information), contractual necessity (when you enrol in programmes), and legal obligations (to maintain appropriate records).

Sharing Your Information

We respect your privacy and do not sell your personal information to third parties. We may share your data only in the following limited circumstances:

  • Service providers: We work with trusted third-party service providers who assist with website hosting, email communications, and analytics. These providers are contractually obligated to protect your data and use it only for the specific services they provide to us.
  • Legal requirements: We may disclose information when required by law, in response to legal processes, or to protect our rights, property, or safety, or that of our students and the public.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

How We Protect Your Data

Security Measures

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Secure Socket Layer (SSL) encryption for data transmitted through our website
  • Restricted access to personal data, limited to authorised staff members who require access for their roles
  • Regular security assessments and updates to our systems and procedures
  • Secure storage systems with appropriate access controls and monitoring

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Enquiry information is typically retained for three years, after which it is securely deleted unless you have become an enrolled student or we have a legal obligation to retain it longer.

Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable data protection regulations.

Your Rights and Choices

Under UK data protection legislation, including the UK GDPR, you have several rights regarding your personal information:

Right of Access

You can request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you can request that we correct or complete it.

Right to Erasure

In certain circumstances, you can request that we delete your personal data. This right is not absolute and may not apply if we have legal obligations to retain the information.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another data controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds.

Right to Restrict Processing

In certain circumstances, you can request that we limit how we use your personal data while we address your concerns.

Exercising Your Rights

To exercise any of these rights, please contact us at info@domain.com or write to us at the postal address provided at the top of this page. We will respond to your request within one month and may request verification of your identity to protect your personal information.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features
  • Disable cookies through your browser settings (see our Cookie Policy for more details)
  • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.

Children's Privacy

While we offer Spanish language programmes suitable for learners of all ages, our website is not specifically directed at children under 16. We do not knowingly collect personal information from children under 16 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately. We will take steps to remove such information from our systems.

International Data Transfers

Your personal information is primarily stored and processed within the United Kingdom. In some cases, our service providers may be located outside the UK or European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission or UK authorities
  • Transfer to countries with adequacy decisions recognising appropriate data protection standards
  • Other legally approved transfer mechanisms ensuring equivalent protection

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we will update the "Last updated" date at the top of this page and may provide additional notice through our website or email communications.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal information. Your continued use of our website after changes indicates your acceptance of the updated policy.

Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can address your concerns. However, you also have the right to lodge a complaint with the relevant supervisory authority:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113

Questions About This Policy

If you have any questions about this Privacy Policy, how we handle your personal information, or wish to exercise your data protection rights, please don't hesitate to contact us:

Email: info@domain.com

Phone: +44 151 749 2683

Post: Iberian Institute, 34 Plaza Gardens, Liverpool L1 8BH, United Kingdom