USER INFORMATION 

INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L., informs you that, in accordance with the provisions of the General Regulation (EU) 2016/679, data protection (GDPR) and in the L.O. 3/2018, of data protection and guarantee of digital rights (LOPDGDD), we will process your data as reflected in this Privacy Policy. 

In this Privacy Policy we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it and your options regarding the processing of your personal data. 

This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you complete any of our forms you must first accept the terms of this Policy and we will keep a record of that acceptance. 

1. DATA CONTROLLER CONTACT DATA 

The Data Controller for processing the data collected on this website is: 

Compy namel: INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. 

Trade name: Colegio Inglés Zaragoza (CIZ) 

Tax number: B88531991 

Address: Avenida de Movera, 147, 50194 Zaragoza 

Phone: 976 57 30 30 

e-mail: dataprotection@dukeseducation.es 

2. PURPOSE, LEGITIMACY AND CONSERVATION 

We collect and process your personal data through the forms on our website: 

Contact / Admissions / Visit us 

Purpose: To manage and respond to your requests for information about the school and the admissions process and, where applicable, to arrange a personalised visit to our facilities. We may respond by email, telephone or, if the user requests it or uses that channer, via WhatsApp. 

Lawfulness: The processing is based on the user´s consent when submitting the form and, where applicable, the implementation of precontractual measures at the data subject´s request. 

Conservation: Your data will be kept for as long as necessary to deal with your request and, thereafter, for a maximun period od 2 years if any admissions request made does not result in enrolment. If enrolment is completed, your data will be retained for the duration of the educational relationship and for the legally applicable periods. 

Sendind informational communications 

Purpose: To send you informational communications related to our activities and services, as well as those of Dukes Education. 

Lawfulness: The processing is based on the user´s consent when ticking the acceptance box. Conservation: The data will be kept until the user withdraws the consent granted for this purpose or requests to unsubscribe. 

Open Day Registration 

Purpose: To process your registration for our Open Days and information sessions to learn about our facilities

and methodologies. 

Lawfulness: The processing is based on the user´s consent when submitting the registration form. Conservation: The data will be kept as long as necessary to fulffil the purposes for which it was collected, with a maximum period of 2 years if, after the visit, no admissions/enrolment application is madre. It will then be securely deleted using appropriate security measures. 

Registration for extracurricular activities 

Purpose: To manage the student´s registration and participation in extracurricular activities. Lawfulness: The processing is based on the performance of the contract with the school. 

Conservation: The data will be kept as long as necessary to deliver the activity and in accrodance with applicable statutory limitation peridos. 

3. TYPES OF DATA COLLECTED 

The types of data requested are: 

Identification and contact data. 

We also automatically collect data about your visit to our website, as described in the cookie policy. 

INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. does not collect data considered particularly sensitive such as: race or ethnic origin, political opinions or religious or philosophical beliefs, trade union membership, health, sexual activity or sexual orientation, biometrics or genetic data. In any event, we recommend that you do not include any information in your message/comment/additional question that is particularly sensitive or unnecessary. 

It is the responsibility of each user to provide data that is true, accurate, complete and up to date and they alone shall be liable for any damage or harm, direct or indirect, that may be caused as a result of failure to comply with this obligation. 

The user guarantees that the data provided are true, exact, complete and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a consequence of non-compliance with this obligation. In the event that the user provides data of third parties, he/she declares that he/she has their consent and undertakes to pass on to them the information contained in this clause, exempting INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. from any liability in this regard. However, INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. may carry out checks to verify this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations. 

4. RECIPIENTS OF THE DATA 

All personal data provided by the user may be communicated to: 

Public Administrations, in the cases provided for by law, based on compliance with a legal obligation. Courts and Tribunals, in the cases provided for by law, based on compliance with a legal obligation. Banks and financial institutions, where applicable, for the collection of the services offered. Dukes Education 

In addition, INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. will have the collaboration of third parties, service providers, who may have access to your personal data, who will process, on behalf of INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L., user data, for the provision of the contracted services. 

To this end, INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. follows rigorous procedures for selecting suppliers in order to comply with its data protection obligations, including the signing of the corresponding data processing contract in accordance with art. 28 of the RGPD.

Specifically, INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. will rely on the provision of services by third party suppliers who carry out their activity, by way of example and without limitation, in the following sectors of activity: legal advice and technological and computer services. 

No international transfers are carried out. However, should personal data be transferred to a third country or an international organisation, you will have the right to be informed of how to access or obtain a copy of the appropriate safeguards relating to the transfer. 

5. USER RESPONSIBILITY 

The user guarantees that he/she is over fourteen (14) years of age and that the data he/she provides to INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. are true, accurate, complete and up to date. To this end, the user is responsible for the veracity of all the data he/she provides and shall keep the information provided suitably updated, so that it corresponds to his/her real situation. 

Likewise, he/she guarantees that he/she has informed the third parties from whom he/she provides his/her data, if he/she does so, of the aspects contained in this document. He also guarantees that he has obtained their authorisation to provide their data to INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. for the aforementioned purposes. 

In any case, the User shall be liable for any false or inaccurate information provided through the website, and for any damages, direct or indirect, that this may cause to INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. or to third parties. 

6. EXERCISE OF RIGHTS 

As the owner of the data, the user may send a letter to INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L., at the address indicated in the heading of this Privacy Policy, or by e-mail to the address: dataprotection@dukeseducation.es at any time and free of charge, to exercise the following rights: 

1. a) Right of Access: 

You will have the right to be informed by INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. as to whether or not it is processing your personal data and, if so, to be able to access such data and receive information on the purposes for which they are processed, the categories of data affected by the processing, the recipients to whom your personal data were communicated and the expected period for which the data will be kept, among other information. 

1. b) Right of Deletion and Opposition: 

You have the right to request the erasure of personal data provided that the legal requirements are met or to object to the processing at any time, on grounds relating to your particular situation, in case the processing is based on our legitimate interest. 

1. c) Right of rectification: 

You will have the right to request the rectification of inaccurate data concerning you when, among other reasons, they are no longer necessary for the purposes for which they were collected. 

1. d) Restriction of processing and withdrawal of consent: 

In certain circumstances (e.g. in case the applicant contests the accuracy of his or her data, while the accuracy of the data is being verified), you may request that the processing of your personal data be restricted and processed only for the exercise or defence of claims. 

You also have the right to withdraw your consent at any time. 

1. e) Portability of your data: 

You will have the right to receive the personal data you have provided to INTERNATIONAL ENGLISH SCHOOL OF

ZARAGOZA, S.L. in a structured, common and machine-readable format, and to be able to transmit them to another data controller without being prevented from doing so by the controller to whom you have provided them, in the cases legally provided for this purpose. 

1. f) Automated individual decisions: 

Likewise, in addition to the aforementioned rights, in the event that automated decisions are taken, including profiling, you will have the right to obtain human intervention by INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. and to express your point of view and challenge the decision. 

Where automated decisions are taken, including profiling, you have the right to obtain human intervention from INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L., to express your point of view, and to contest the decision. 

In addition to the rights set out above, where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawal may be made by submitting a request through the channels indicated in this section. 

Finally, we inform you that you may lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency (www.aepd.es), when the interested party considers that INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. has infringed the rights that are recognised by the applicable data protection regulations. 

The period to exercise your right, as a data subject, will be one month from receipt of the request, which may be extended for a further two months in cases of complexity or number of requests received. 

7. SECURITY MEASURES 

INTERNATIONAL ENGLISH SCHOOL OF ZARAGOZA, S.L. will treat the User’s data at all times in the strictest confidence and will maintain the mandatory duty of secrecy with respect to them, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organisational measures to guarantee the security of your data and prevent their alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed. 

8. ACCEPTANCE AND CONSENT 

The User declares that he/she has been informed of the conditions on personal data protection, accepting the content of this Privacy Policy. Where processing requires consent, it will be requested in a specific and separate manner. 

9. OBLIGATORY NATURE OF PROVIDING DATA 

The data requested on the forms are, in general, obligatory (unless otherwise specified in the required field) in order to comply with the purposes for which they are being collected. 

Therefore, if you do not provide them or do not provide them correctly, your requests cannot be dealt with, without prejudice to the fact that you may freely view certain contents of our website. 

10. UPDATING THE PRIVACY POLICY 

We strive to continuously improve our services, processes and the protection of data subjects’ rights. For this reason, we reserve the right to review this Privacy Policy whenever we consider appropriate, in which case the current version will be the one published on the website. 

Last updated: February 2026