PRIVACY & GDPR DATA PROTECTION POLICY

1. Introduction and Data Controller

Welcome to our Privacy Notice. This website serves as the primary master portal and central operational hub for the Academia del Español Language Network.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is the administrative entity of the Academia del Español Language Network [DTA18, UKGDPR]. We are committed to protecting the privacy, security, and integrity of the personal data processed across our network ecosystem.

2. The Personal Data We Collect

We strictly limit data collection to the information you voluntarily provide or that which is required for site security and optimization. This includes:

• Identity and Contact Data: Your name and email address when you complete our central network contact form or request administrative details.
• Technical and Analytics Data: IP addresses, browser specifications, operating system metrics, and telemetry on how you navigate our hub, collected seamlessly via non-intrusive cookies.
• Communication Data: A record of your correspondence when you contact our administrative, editorial, or support desks.

3. How We Route and Use Your Information

We collect and process your personal data under the following legitimate, legal UK GDPR foundations [UKGDPR]:

• Consent: You explicitly authorize us to communicate with you by filling out forms or emailing us [UKGDPR]. You may withdraw this consent at any time [UKGDPR].
• Legitimate Interests: It is fundamentally necessary for our legitimate interests to efficiently route your incoming queries, optimize the user experience of our master network layout, and prevent malicious spam or security threats.

To streamline communications across our language ecosystem, inquiries submitted to this master hub are systematically routed via the following dedicated, department-specific email mailboxes:

4. Data Sharing and Third-Party Systems

We do not sell, rent, trade, or distribute your personal data to external marketing companies. To maintain a functional digital presence, your data may be processed through GDPR-compliant service providers [UKGDPR], including hosting infrastructures, standard email routing providers, and tracking analytical tools (such as Google Analytics).

5. International Data Transfers

While our primary operations are rooted within the United Kingdom, some digital infrastructure providers may process data in territories outside the UK (e.g., the United States). In these events, we verify that appropriate safeguarding mechanisms, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), are fully in place to protect your data integrity.

6. Data Retention Boundaries

We only store your personal information for as long as necessary to resolve your specific network query or maintain site analytics records. Administrative logs and message records are periodically purged from active mail server databases if no continuous engagement or curriculum relationship is established.

7. Your Statutory Rights Under UK GDPR

Under UK data protection laws, you retain comprehensive, enforceable rights regarding your digital footprint [UKGDPR]. You have the right to request:

• Access to the personal data we hold about you [UKGDPR].
• Correction of inaccurate or outdated information [UKGDPR].
• Erasure of your personal files (The Right to be Forgotten) [UKGDPR].
• Restriction or Objection to how we handle specific data processes [UKGDPR].

To execute any of these legal rights, contact our privacy desk directly at: administration@academiadelespanol.com [UKGDPR].

If you feel your request has not been handled in compliance with data privacy frameworks, you have the statutory right to escalate a formal complaint to the Information Commissioner's Office (ICO), the official UK regulatory authority for data protection (www.ico.org.uk).