01. Summary of our processing activities

The following summary provides you with a quick overview of the processing activities carried out on our Website. You will find more detailed information in the sections indicated below.

• When you visit our Website for informational purposes without opening an account, only limited personal data shall be processed to provide you with access to the Website (see section 3).
• If you register for one of our services (for example, educational web), more personal data will be processed in the context of providing these services (see sections 4 and 5).
• Additionally, your personal data will be used for statistical analysis that helps us improve our Website (see section 6). Furthermore, we enhance your Website experience through third-party content (see section 8).
• Your personal data may be disclosed to third parties (see section 9).
• We have implemented appropriate security measures to protect your personal data (see section 10) and will retain your personal data only for as long as necessary (see section 11).
• In accordance with applicable regulations, you may have the right to exercise certain rights concerning your personal data (see section 12).
• Our privacy policy is in line with the provisions established by the new regulation (EU 2016/679), General Data Protection Regulation (hereinafter GDPR).

02. Definitions

• Personal data: refers to any information related to a natural person who can be identified, directly or indirectly, particularly by reference to an identifier, such as a name, an identification number, location data, or an online identifier.
• User: the data owner.
• Processing: refers to any operation carried out with personal data, such as obtaining, recording, organising, structuring, storing, adaptation, any type of disclosure or other use.
• Controller: the one who determines the purposes and means of processing user data before obtaining their consent and who takes responsibility for complying with the General Data Protection Regulation (GDPR).
• Consent: equivalent to any free, unambiguous, specific, and informed expression of will, through which the user consents to the processing of their data.
• Processor: the legal entity, public authority, service, or other body that provides a service to the controller, entailing the processing of personal data on their behalf.
• Third parties: any natural or legal person outside BQ Education or different from the user.

03. Informational Use of the Website

When you visit our Website for informational purposes, that is, without registering for any of our services listed in section 4 and without providing us with personal data in any other way, we may automatically collect additional information about you which will contain personal data only in limited cases that our server automatically recognises, such as, for example:

• your device type (PC or mobile),
• device model;
• the date and time of your requests;
• the content of your requests;
• information about your browser version;
• information about your operating system, including language settings.
• Location from which you connect

We use this information solely to provide an effective service (for example, to tailor our Website to your device's needs or to enable you to log in to our Website), and to gather broad demographic information anonymously and in aggregate form.

The use of your personal data for this purpose is based on our legitimate interest as the owner of this Website, Article 6.1.f) GDPR

04. Sign up for our services

Our Website offers an educational platform. Regarding account registration and its subsequent use, we process the following personal data:

1. Data Storage: All personal data collected through our platform is stored on servers located within the European Union, ensuring compliance with European data protection regulations.
2. File Storage: Similarly, all files stored on our platform are also located on servers within the European Union, ensuring the same level of protection and security.
3. User Registration: Only users who are of legal age can register on our platform by providing their personal data in accordance with the stipulations of the Data Protection Act.
4. Student Access: Students do not need to create an account or register on the platform to use our services. They access the platform using an alias and an access code, which are not linked to any identifiable personal data. This ensures student privacy is protected at all times.
5. Confidentiality and Security: Teachers must ensure students do not share personal data on the platform, preventing such data from being identifiable by third parties. Clear guidelines are provided to teachers on how to handle this information, and technical controls are implemented to support this measure.
6. Additional Security Measures: In addition to the above, we have adopted additional security measures to protect the integrity, availability, and confidentiality of stored data. These measures include, but are not limited to, data encryption, firewalls, and strict access controls.

The information required for the provision of the service is indicated as such. All additional information is provided voluntarily.

We will process the personal data you provide to us for:

• Identify you when you access the site;
• Provide you with the services and information offered through the Website or requested by you;
• Manage your account;
• Communicate with you;

The legal basis for these processes is Article 6(1)(b) GDPR.

We use the personal data and contact information you provide through registration to inform you directly about our additional products and services. The use of your personal data for direct marketing of related products and services is based on our legitimate interest as the owner of this Website, Article 6.1. f) GDPR.

You may object to the use of your personal data for direct marketing at any time. Once you have expressed your objection, we will refrain from any processing related to such purposes. You can inform us of your objection by contacting us at contact@bqeducacion.cc.

05. Automated decision-making

We do not use your personal data for automated decision-making that produces legal effects on you or similarly significantly affects you.

06. Analysis

For statistical analysis, we use a tool called Google Analytics, a web analysis service provided by Google, to gather information about the use of this Website.

We use the information obtained from Google solely to determine the most useful information in relation to what you are searching for and to improve and optimise this Website. We do not combine the information collected through the use of Google Analytics with personal data.

The information generated about your use of the Website will be transmitted to and stored by Google on their servers in Europe. Google Analytics collects only the IP address assigned on the date you visit this Website, rather than your name or any other identifying information. The provider will use this information to assess your use of the Website, compile reports on Website activity, and provide us with other services related to the use of the Website and the Internet.

The legal basis for this processing is Art. 6.1. f) GDPR, based on our legitimate interest in analysing traffic on our website to enhance user experience and optimise the website overall. Google will retain personal data collected for statistical analysis for 6 months.

07. Links to third-party websites

This Website may contain links to third-party websites. We are not responsible for the content and data collection through these third-party websites; please check the privacy policy of these websites for information on the data processing carried out on them.

08. Communication of information

Your data may be shared with companies within the Educación y Robótica, S.L. group. The legal basis justifying the sharing of your data is BQ Educación's legitimate interest in fulfilling administrative purposes.

We may share statistics with aggregated and anonymised information about the users of the Website to describe our services to potential partners, advertisers, and other reputable third parties, as well as for other legal purposes. However, these statistics will not include personal data.

Additionally, we may share personal data with service providers and authorised third parties for activities and purposes legitimised by BQ Education.

We may share personal data with service providers and authorised third parties for activities and purposes that are legitimate (for example, those necessary to provide the contracted educational services, the proper functioning of the Website, conducting commercial activities, marketing, and other advertising campaigns...) as contracted by Us under a "Data Processor" agreement.

The processing of personal data is carried out based on the instructions we specify in writing in a contract and always in accordance with the provisions of the GDPR.

If the processing of these personal data were to take place outside the list of countries that make up the European Economic Area, it would be based on Standard Contractual Clauses approved by the European Commission.

Remember that we may also share your data with third parties when it is necessary to comply with our legal obligations (tax, commercial, etc.) or at the request of a legal authority.

09. Security

We have reasonable, state-of-the-art security measures in place to protect personal data from loss, misuse, and alteration. For instance, our security and privacy policies are reviewed and improved periodically as necessary, and only authorised personnel have access to personal data. While we cannot guarantee that loss, misuse, or alteration of information will not occur, we make every reasonable effort to prevent it.

You should be aware that transmitting information over the Internet is never completely secure. We cannot guarantee the security of information you send via our Website while it is in transit over the Internet and any transmission is at your own risk.

10. Data conservation

We strive to limit our processing activities concerning your personal data as much as possible. If no specific retention periods are mentioned in this notice, your personal data will be retained only for as long as necessary to fulfil the purpose for which we collected it and, where applicable, as required by retention obligations set out in the relevant regulations.

11. Your rights

In accordance with the applicable regulations, you may be entitled to exercise some or all of the following rights:

• request (i) access to and/or copies of your personal data, (ii) receive the personal data concerning you, in a structured, commonly used and machine-readable format, and (iii) transmit those data to another controller without hindrance from us; where technically feasible, you also have the right for us to transmit the personal data directly to another controller;
• request the rectification, erasure or restriction of processing of your personal data, e.g. because (i) they are incomplete or inaccurate, (ii) they are no longer necessary for the purposes for which they were collected, or (iii) the consent on which the processing is based has been withdrawn, or (iv) you have exercised your right to restrict processing; if the personal data are processed by third parties, your request for rectification, erasure or restriction of processing will also be forwarded to those third parties unless this proves impossible or involves disproportionate effort;
• refuse to grant as well as, without affecting processing activities that have taken place prior to such withdrawal or any other existing legal justification of the processing concerned, withdraw your consent for the processing of your personal data at any time;
• object at any time to your personal data being used for direct marketing purposes, or —due to reasons related to your particular situation— your personal data being processed for other purposes;
• take legal action in relation to any possible breach of your rights concerning the processing of your personal data, as well as lodge complaints with the competent data protection authorities; and/or
• not be subject to any automated decision-making, including profiling (automated decisions based on processing of data by automated means, for the purpose of evaluating various personal aspects) that produce legal effects concerning you or similarly affect you.
• You can (i) exercise the aforementioned rights, (ii) raise any queries or (iii) lodge a complaint regarding data processing by contacting us through the contact details provided below.

12. Contact us

Please send any questions, concerns, or comments you have about this notice or any request related to your personal data via email to contacto@bqeducacion.cc.

You can contact the Data Protection Officer of BQ Education via contacto@bqeducacion.cc

The information you provide when you contact us (for example, your name or email address) will be processed to handle your request and will be deleted upon request. Alternatively, we will restrict the processing of this information in accordance with the retention requirements established by regulations.

13. Amendments to this policy

We reserve the right to modify this policy periodically by updating our Website. Please visit the Website regularly and review our current privacy policy. This policy was last updated in August 2020.