The data that the C. SAN JOSÉ may collect by the use or browsing of the website, through our forms, via email or due to the contractual relationship that binds you to C. SAN JOSÉ it is personal data. When filling in each of the forms on our website, there will be a series of mandatory data, the fields of which are marked with the symbol *. If you do not fill in these fields, you will not be able to carry out the purposes described in each of the forms. On some occasions, we inform you that by simply using and browsing our Website, C. SAN JOSÉ store data relating to:

• IP address
• Browser Version
• Operating system
• Duration of the visit or browsing of the Website

Such information may be stored by Google Analytics, so we refer to Google's Privacy Policy, as Google collects and processes such information.

In the same way, the Website provides the utility of Google Maps, which can have access to your location, if you allow it, in order to provide you with greater specificity about the distance and/or paths to our headquarters. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and processing of such data.

SAN JOSE reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review the same each time you access the Website. In the event that the user has registered on the website and accesses their account or profile, when accessing it, they will be informed in the event that there have been substantial changes in relation to the processing of their personal data.

1.1. Contact Forms:

1. Purpose. The purpose of this form is to respond to your request for information made through the contact form.
2. Legitimation. The legitimacy for the processing of personal data is the consent of the interested party.
3. Recipients. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

1.2. Registration form:

1. Purpose. The purpose of this form is to carry out the process of enrolling the student in C. San José.
2. Legitimacyn. The legitimacy for the processing of personal data is the consent of the interested party.
3. Recipients. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

1.3. Information provided through the e-mails made available on the website:

1. Purpose. Respond to your request for information.
2. Legitimation. The consent given by you at the time you send us the request via email.
3. Recipients. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

1.5. Exercising GDPR rights

1. Purpose: Respond to data protection requests from data subjects
2. Legitimation: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the General Data Protection Regulation.
3. Recipients: The recipients of your data will be the IT department, the Data Protection Officer, management and/or administration of the centre depending on the request, as well as the third parties to whom your data is transferred, provided that the requirements for data protection are met.

1.6. Security Breach

1. Purpose: Manage and resolve the data protection security breach, as well as the possible communication to those affected.
2. Legitimation: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the General Data Protection Regulation.
3. Recipients: The recipients of your data will be the IT department, the Data Protection Officer, management and/or administration of the centre depending on the request, as well as the third parties to whom your data is transferred, provided that the requirements for data protection are met.

1.7. Open day

1. Purpose. The purpose of this form is to arrange the appointment with the parents for the visit to the center.
2. Legitimation. The legitimacy for the processing of personal data is the consent of the interested party.
3. Recipients. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

1.8. Form works with us and spontaneous applications.

1. Purpose. To involve you in the personnel selection processes that are carried out by SAN JOSE.
2. Legitimation. The pre-contractual relationship between the parties.
3. Recipients. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

1.9. Form works with us and spontaneous applications:

1. To make you participate in the personnel selection processes carried out by C. SAN JOSÉ.
2. Legitimation. The consent given by the data subject that he or she grants us by virtue of his or her spontaneous application.
3. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

2.1. Exclusively for professional contacts.

1. At C. SAN JOSÉ we process your personal data in order to maintain the professional relationship that we have between the two of us.
2. Legitimation. Legitimate interest.
3. The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current regulations on data protection.

2.2. Exclusive for contacts through social networks

1. Purpose: At C. SAN JOSÉ we process your personal data for the following purposes:

• • Respond to queries, requests or requests.
  • Manage the requested service, respond to the request, or process a request.
  • Establish a user-responsible relationship, and create a community of followers.

1. Legitimation. The legitimate interest of the data controller, as well as the acceptance of a contractual relationship in the environment of the corresponding social network.
2. Recipients: The recipients of your data will be the different departments of our centre, as well as the third parties to whom we transfer your data, when it is lawful in accordance with the provisions of current data protection regulations. However, we recommend reviewing the privacy policy of the social networks that we mainly use, since social networks, being North American, may transfer data to the United States.

2.3. Web enrolment form:

1. Purpose:

• • The purpose of this form is to carry out the process of enrolling the student in C. San José.
  • Manage the relationship of the student and his/her family with the school.
  • Know, where appropriate, the student's health data that allows prompt and diligent action (allergies, chronic pathologies, intolerance to certain foods, chronic medication, intolerance to medications, etc.).
  • To process the student's health data necessary for his/her evolution in his/her educational stage within the work carried out by the Guidance Department of the Centre.
  • Manage the relationship of the student and his/her family with the school.
  • Organise educational, sporting and recreational activities such as visits to museums or excursions to places of cultural, scientific or historical interest.
  • Disseminate the videos and images collected from students and their families on their websites and social networks.

1. Legitimation.
   • The legitimacy for the processing of your data is the consent of the interested party/legal representative (father/mother/legal guardians), the execution of a legal relationship, the processing is necessary to protect the vital interests of the student, and compliance with the following legal obligations that apply to us:
     • The processing of data related to the compulsory schooling of the student, including health data, as well as those to which the inspectors have access in the framework of the exercise of their activity (pedagogical, academic and administrative documentation), are legitimized by Organic Law 2/2006, of 3 May, on Education as drafted by Organic Law 8/2013, of 9 December, for the improvement of the quality of education.
     • Processing for tax and accounting purposes, legitimised by Law 58/2003, of 17 December, General Taxation.
2. Recipients.
   • The recipients of your data will be the different departments of our entity, as well as the third parties to whom we transfer your data, in accordance with the provisions of current regulations on data protection, when completing the registration form. In those cases where it is necessary, the students' data may be communicated to the following bodies and entities, in compliance with a legal obligation, or when they have given us their consent:
     • Ministry of Education and Ministry of Education in accordance with current legislation.
     • To banks, the data related to the collection to manage direct debit bills.
     • When required by the State Tax Administration Agency, data related to the collection of direct debit bills.
     • Travel agencies for the organization of trips and insurance companies for the contracting of insurance (accidents, trips), to public and/or private entities for the control of attendance of students in excursions and similar activities.
     • Entities visited or in charge of the organization when the student participates in outings, excursions and visits to third party public or private entities.
     • Publication of the student's image or other information related to him/her, and related to the activities carried out at the Centre.
     • To the school's alumni association (AAA).
     • To Catholic Schools.
     • Publication of images or videos of the student through communication channels and the press.
     • Dissemination of the photographs of the border in which the student appears among the families of the students in their class.

In the event that you have given us your consent for the processing of images of the student or other information referring to them and related to the activities and workshops in which they participate, they will be disclosed on the different communication channels of the centre. To this end, we recommend reviewing the privacy policy of the main social networks used by the entity: Twitter, Facebook, Instagram and YouTube. Social networks, being North American, can transfer data to the United States, so we recommend that you know their privacy policy.

2.4 Retention periods

2.5. International Transfers

The Center does not plan to carry out international data transfers. In those cases in which it is necessary, they will only be carried out to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements provided for in the current regulations on data protection, such as the European Regulation, or when there is a legal authorization to carry out the international transfer. such as the consent of the data subject. In any case, the corresponding information will be provided to the interested party.

2.6. What are your rights in relation to data processing?

You, as a data subject, have the right to obtain confirmation of the existence of a processing of your data, to access your personal data, to request the rectification of data that is inaccurate or, where appropriate, to request the deletion, when, among other reasons, the data are no longer necessary for the purposes for which they were collected or you, as a data subject, withdraw the consent granted. C. SAN JOSÉ It will process and store your data in accordance with current regulations, without prejudice to the fact that as an interested party you may request in any case, the limitation of the processing of your data. In certain cases, you may exercise your right to data portability, which will be delivered in a structured, commonly used or machine-readable format to you or to the new data controller you designate. You have the right to revoke your consent at any time for any of the processing for which you have given consent. To exercise your rights, please contact us at the following email address: protecciondedatos@colegiosjosesalamanca.es. We have forms for the exercise of all the rights indicated above, however, you can also use those prepared by the Spanish Data Protection Agency. You will have the right to file a complaint with the Spanish Data Protection Agency in the event that you consider that the exercise of your rights has not been adequately addressed. The maximum period for resolving will be one month from the receipt of your request. In the event of any modification to your data, please notify us in writing in order to keep your data up to date.