1. Data controller. Ivanis Iser López, NIE (Spanish foreigner identity number) Z1028110S, with address in Barcelona (Spain), trading as Espanis. Contact: info@espanis.school.
2. What data we process.
- Enrolment form: name, email, preferred contact channel, Telegram username or WhatsApp number, goal, level, format, availability, country or time zone, and how you heard about us.
- Level test: name, email, optional contact, goal, test answers and result.
- Registration form: surnames, city, date of birth, preferred accent and native language.
- Newsletter and free resources: name, email and language.
- Technical data collected automatically: date and time, website language, browser time zone, page or link you came from, and time spent on the test.
We do not ask for special categories of data (health, religion, beliefs, etc.). If the classes are for a child under 14, the data is provided, and consent is given, by their parent or legal guardian.
3. Why we use it and on what legal basis.
| Purpose | Legal basis |
|---|---|
| To answer your request, assess your level and recommend a course and teacher | Your consent (Art. 6(1)(a) of the EU General Data Protection Regulation, GDPR) |
| To organise and manage your classes, payments and invoicing | Performance of the contract (Art. 6(1)(b)) and legal tax obligations (Art. 6(1)(c)) |
| To send you resources, news and offers by email | Your express consent, which you can withdraw at any time (Art. 6(1)(a) GDPR and Art. 21 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce, LSSI) |
| To improve the website and measure where our students come from | Legitimate interest (Art. 6(1)(f)), with aggregated data |
If you give us your written permission, we also publish your testimonial (video or review) to make our courses known; you can withdraw this permission whenever you want. We do not make automated decisions with legal effects on you. The test result is a guide; a teacher confirms your final level.
4. How long we keep it.
- If you do not enrol: 12 months from your last contact, and then it is deleted.
- If you enrol: while you are a student and, after that, for the time required by tax and accounting obligations (up to 6 years for invoicing).
- Marketing consent: until you unsubscribe.
5. Who we share it with. We do not sell or share your data. To provide the service, we use providers that process the data on behalf of Espanis, under a data processing agreement:
- Google (data storage in Google Sheets, and email).
- Netlify (website hosting).
- EmailOctopus (sending the newsletter), if you subscribe.
- The Espanis teachers who give your classes, who access only the data they need.
Some of these providers may transfer data to the United States. These transfers are covered by the EU–US Data Privacy Framework and, where it does not apply, by the European Commission’s standard contractual clauses.
6. Your rights. At any time, you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to info@espanis.school and stating which right you are exercising. We will reply within one month at the latest. If you think we have not handled your request correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, www.aepd.es).
7. Security. We apply technical and organisational measures to protect your data: restricted access to the database, accounts protected with two-step verification, and an encrypted connection (HTTPS) on the website.
8. Changes. We may update this policy. The current version and its date will always be on this page.
Last updated: November 2026.