Privacy notice

Data Privacy and Cookie Notice

How we protect your personal data and manage cookies.

  • Data privacy
  • Cookie consent

Data Privacy Notice

This page exists for two reasons:

  1. We want to inform you how we protect your information because we want you to feel secure dealing with us.
  2. Transparency regarding data protection, data privacy and cookie use is now obligatory.

This privacy notice is written to comply with the General Data Protection Regulation (GDPR) because we are headquartered in a European Union country.

The GDPR protects your fundamental rights and freedoms regarding protecting your personal data.

DATA CONTROLLER

  • Name: EBC y Asociados Idiomas Internacional S.L. trading as Data Protection Controls
  • Phone: (+34) 915 553 975
  • Contact us
  • Address: Calle de la Caléndula 93, Miniparc III, Edificio E, 28109, Alcobendas, Madrid, Spain

DATA PROTECTION OFFICER

  • Name: Jim Ashton
  • Phone: (+34) 915 553 975
  • Contact us
  • Address: Calle de la Caléndula 93, Miniparc III, Edificio E, 28109, Alcobendas, Madrid, Spain

PURPOSES OF PROCESSING YOUR PERSONAL DATA

We process your personal data for the following reasons:

  1. To collect the contact details you give us to maintain correspondence with you.
  2. To periodically send you information that may interest you or the company you work for.
  3. To honour our contractual obligations when you contract our services or buy our products.
  4. To comply with law enforcement or other legally justified requests.

LEGITIMATE INTERESTS IN PROCESSING YOUR PERSONAL DATA

We class the following as legitimate interest purposes:

  1. Communicate with you after you have expressed interest in our product and services or contacted us regarding other matters.

RECIPIENTS OF YOUR PERSONAL DATA

We are the only recipients of your personal data.

TRANSFERRING YOUR PERSONAL DATA

  1. We store your personal data in secure servers in France and Germany.
  2. Connection to this website and our secure servers uses TLS encrypted communication.
  3. We do not transfer your personal data outside our organisation.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law.

YOUR RIGHTS OVER YOUR PERSONAL DATA GIVEN TO US

You have the following rights that we respect:

  • get access to a copy of your personal data
  • object to processing that is likely to cause or is causing you damage or distress
  • opt-out of receiving direct marketing material
  • opt-out of decisions being taken by automated means
  • have your personal data rectified, blocked, erased or destroyed
  • lodge a complaint with a Supervisory Authority
  • claim compensation for damages caused by a breach of the GDPR

WHY WE NEED TO USE YOUR PERSONAL DATA

We need your personal data to communicate with you, draw up contracts and honour contractual obligations. We may also use your personal data to improve our products and services or send relevant material which we think you may find interesting.

AUTOMATED PROFILING USING YOUR PERSONAL DATA

We do not undertake any automated profiling.

THE PERSONAL DATA WE COLLECT

We initially collect the following information:

  • your name
  • your email address
  • the company you represent
  • your phone number

We may need to collect more information later as our relationship evolves. If more information is required, you will be informed.

COOKIES: SMALL FILES PLACED ON YOUR COMPUTER

This site uses two types of cookies, both of which are stored on your device.

  1. Cookies that the site needs to work. These cannot be turned off and only exist to enable you to use the site.
  2. Cookies used by Google Analytics to anonymously track visitors to this site. We only use Google Analytics cookies to identify which pages are being used. This is done anonymously, and it helps us analyse data about web page traffic and improve our websites to tailor it to customer needs. We only use this information for statistical analysis purposes. We receive technical data (standard internet log information and details of visitor behaviour) from Google Analytics about visitors to this website. This information does not identify anyone. To opt-out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout. You may also use our cookie control by clicking the gear icon in the page’s bottom left corner.

Overall, cookies help us provide better websites by monitoring page visits. However, a cookie in no way gives us access to your computer or any information about you other than the data you choose to share with us.

NOTE: Google Analytics cookies are switched off by default. We do not use marketing cookies.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over other websites. We are not responsible for the protection and privacy of any information you provide whilst visiting these sites, and our privacy statement does not govern these sites. You should always exercise caution and look at the data privacy statement applicable to the website in question.

DATA PROTECTION MANAGEMENT SOFTWARE AS A SERVICE (DPMSAAS)

  1. DPMSaaS is hosted in France by OVHCloud – certifications (ISO 27001, SOC 1 Type II, SOC 2 Type II)
  2. DPMSaaS uses TLS encryption for data transmission
  3. DPMSaaS makes use of database level and field level encryption for data at rest
  4. DPMSaaS incorporates strict session hi-jack controls
  5. DPMSaaS includes methods and measures against SQL injection
  6. DPMSaaS does not use marketing or tracking cookies
  7. DPMSaaS has weekly security tests, including OWASP Top 10, CORS, Amazon S3 Bucket and DNS misconfigurations
  8. Each DPMSaaS has its own dedicated field-level encryption keys
  9. Each DPMSaaS uses different database-level encryption keys
  10. Each DPMSaaS account has its dedicated database

When your organisation is set up to use DPMSaaS, you will be in control of its data content. Concerning all your data content, you will determine what goes in, what goes out and how it is used.

SECURITY

Cyber Essentials certifiedData Protection Controls is a trading name of EBC y Asociados Idiomas Internacional SL. EBC’s data security is Cyber Essentials certified. Cyber Essentials is a UK government information assurance scheme operated by the National Cyber Security Centre that encourages organisations to adopt good practices in information security.

data protection controls

Data Protection Controls

Head Office

Calle de la Caléndula 93, Miniparc III, Edificio E, 28109, Alcobendas, Madrid, Spain

Call us

+34 915 553 975