1. Data controller
In compliance with Regulation (UE) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018, on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), you are informed that the controller of personal data processing is:
- Responsible Party: PCE ESCUELA A DISTANCIA, S.L. (hereinafter, “PCE Spanish School”)
- CIF: B01591296
- Address: C/ Río Jalón 17, 4º 3, 28935 Móstoles (Madrid), Spain
- Phone: +34 621 09 77 39
- Email: info@pcespanishschool.com
This policy applies to all data processing carried out through the platforms, applications, and tools developed and/or managed by PCE Spanish School.
2. Data we process
PCE Spanish School processes the following categories of personal data:
- Identification details: name, surnames, NIF/DNI/Passport.
- Contact Information: mailing address, email, and phone.
- Academic and Usage Data: Information regarding enrollment, completed courses, educational progress, and use of the educational platform (Moodle).
- Economic and transaction data: information on payments, billing, and contracted services.
- Navigation data: IP address, browser settings, pages visited, and actions taken, recorded in our server logs.
- Access details: codes or identification keys to access the platform.
- Commercial information: data linked to requests for information or communications about our courses and services.
- Certain browsing data is obtained through the use of cookies. You can find detailed information in the Cookie Policy.
3. Purposes of processing
PCE Spanish School processes personal data for the following purposes:
- Manage user registration and enrollment in courses and training programs.
- Provide and manage contracted training services, including access to the Moodle platform and academic content.
- Handle inquiries, information requests, suggestions, or complaints.
- Manage invoicing, collections, and compliance with accounting, tax, and administrative obligations.
- Ensure platform security, prevent fraud, and resolve technical incidents.
- Send informative and commercial communications about courses, services, and news from PCE Spanish School when the user has expressly requested it or there is a prior contractual relationship that allows it in accordance with current regulations.
- No automated decisions or profiling with legal effects for the user are made.
4. Lawfulness of Processing
The legal bases that allow the processing of your personal data are:
- Execution of a contract or application of pre-contractual measures: enrollment management, provision of training services, and handling of requests.
- Compliance with Legal Obligations: Tax, Accounting, and Fiscal Obligations.
- Legitimate interest: maintaining platform security, improving services, fraud prevention, and technical management. In these cases, the corresponding balancing of interests has been carried out in accordance with the GDPR.
- Consent of the data subject: sending of electronic commercial communications, use of certain cookies, and processing not covered by the previous bases.
- The user may withdraw their consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal.
5. Retention Periods
Personal data will be kept for the time necessary to fulfill the stated purposes and, subsequently, for the periods legally required to address possible liabilities.
In general:
- Data linked to the contractual relationship: while the relationship subsists and, subsequently, during the statutory limitation periods.
- Tax and accounting data: during the period required by current tax regulations (currently, generally four years).
- Commercial communication data: as long as the user does not withdraw their consent or object to the processing.
- User account data: until deletion is requested, without prejudice to any legal blocking.
- Once the applicable deadlines have passed, the data will be blocked and subsequently securely deleted.
6. Recipients and data processors
Your data may be communicated to:
- Accounting, tax, and legal advice: REMEDIOS ARANCE (NIF 50695647J), with registered office at Avda. Mediterráneo 34, 1ºB, 28007 Madrid, for the provision of professional services.
- Competent public authorities, when legally required.
- Likewise, certain technology providers necessary for the development of the activity (web hosting, Moodle educational platform, email services, technical support, payment gateways, or other digital services) may act as data processors in accordance with Article 28 of the GDPR, under contract and following the instructions of PCE Spanish School. In no case will data be transferred to third parties for their own commercial purposes without the prior consent of the data subject.
7. International data transfers
In cases where certain technology providers are located outside the European Economic Area, data processing will be carried out in accordance with Articles 44 and following of the GDPR, adopting appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other legally valid mechanisms.
8. Data Origin
Personal data comes from:
- Direct communication from the interested party via the web, Moodle platform, email, telephone, or other means.
- Academies or collaborating companies, prior authorization from the interested party.
- PCE Spanish School does not obtain personal data from publicly accessible sources for the purposes described.
9. Safety Measures
PCE Spanish School applies appropriate technical and organizational measures to ensure the security and integrity of personal data, including:
- Perimeter protection and firewall systems.
- Encryption and access control.
- Strong passwords and authentication.
- Antivirus programs and security updates.
- Restricted access to authorized personnel subject to confidentiality.
10. Rights of Data Subjects
The user can exercise the following rights:
- Access
- Correction
- Suppression
- Opposition
- Treatment Limitation
- Portability
- Withdrawal of consent
In this area, PCE Spanish School:
- Requests will be answered within a maximum of one month, extendable by another two months in cases of special complexity.
- There is an account deletion system available from the user's private area, without prejudice to the locked maintenance of data when there is a legal obligation.
11. Exercise of Rights
To exercise your rights, you can contact:
- info@pcespanishshool.com
- C/ Río Jalón 17, 4th Floor, Apt 3, 28935, Móstoles (Madrid), Spain
Proof of identity may be requested when necessary to verify the application.
12. Claims before the supervisory authority
If you believe your rights have been violated, you can file a complaint with the Spanish Data Protection Agency (AEPD). You can find more information at:
Furthermore, you may go to the competent courts in accordance with the applicable regulations.
13. Policy Update
PCE Spanish School may modify this Privacy Policy to adapt it to new legislation or changes in data processing practices. In the event of a substantial modification, users will be notified in a prominent manner and, where appropriate, their consent will be requested again.
Current version release date: March 4, 2026