The EBC Data Privacy Notice
This page exists for two reasons:
We want to inform you about how we process your personal data so that you feel secure when interacting with us.
Transparency regarding data protection, data privacy and cookie use is required under applicable data protection law.
This privacy notice is written to comply with the General Data Protection Regulation (GDPR).
GDPR protects your fundamental rights and freedoms in relation to the protection of your personal data.
Data Controller
Name: EBC y Asociados Idiomas Internacional S.L.
Phone: (+34) 915 553 975
Email: ebc(at)ebcidiomas.com
Address: Calle Caléndula, 93, MINIPARC III, Edif. E, El Soto de la Moraleja, 28109 Alcobendas, Madrid, Spain.
Data Protection Officer
Name: Tita Ashton
Phone: (+34) 915 553 975
Email: ebc(at)ebcidiomas.com
Address: Calle Caléndula, 93, MINIPARC III, Edif. E, El Soto de la Moraleja, 28109 Alcobendas, Madrid, Spain.
Purposes for processing your personal data
Provision of free English classes (contractual necessity)
Legal basis: Article 6(1)(b) GDPR – performance of a contract
We process your personal data to:
- Register you for free English classes
- Manage your participation in classes
- Schedule sessions and allocate you to appropriate groups
- Send essential operational communications (e.g. timetables, class changes, reminders, or updates necessary for service delivery)
This processing is necessary in order to provide the service you have requested.
Service-related enrichment communications (legitimate interest)
Legal basis: Article 6(1)(f) GDPR – legitimate interest
We may send you information related to English learning activities and optional educational opportunities associated with your participation in our free English classes, such as:
- Optional learning resources
- Study tips or materials
- Information about related educational activities or improvements to your learning experience
These communications are limited to content reasonably related to your participation in our free English classes.
We process your data for this purpose based on our legitimate interest in improving learning outcomes and enhancing the educational experience of enrolled students.
We have performed and documented a legitimate interest balancing test under Article 6(1)(f) GDPR and concluded that our legitimate interests are not overridden by your rights and freedoms.
Recipients of your personal data
We do not sell your personal data.
We only share personal data with trusted service providers acting as data processors under Article 28 GDPR, strictly for the purpose of enabling and supporting the delivery of the free English class service, or where disclosure is required by law.
Data storage and processing
Personal data is processed and stored by our service provider Brevo (Sendinblue), which acts as a data processor under Article 28 GDPR.
Brevo stores and processes personal data within the European Economic Area (EEA), including data centres located in France, Germany, and Belgium. All processing is subject to appropriate technical and organisational security measures in accordance with GDPR requirements.
EBC does not operate its own dedicated systems for the storage of free class registration data.
International transfers
We do not transfer personal data outside the European Economic Area (EEA) in the context of storage or routine processing.
Where service providers may access personal data from outside the EEA for technical support or service operations, such access is subject to appropriate safeguards under the GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission.
Your rights over your personal data
You have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability (where applicable)
- Right to object to processing based on legitimate interest
- Right not to be subject to automated individual decision-making, including profiling
- Right to lodge a complaint with the supervisory authority
- Right to claim compensation for damages arising from a GDPR breach
Why we use your personal data
We use your personal data to register you for free English classes, manage your participation, communicate with you, and provide access to classes, including scheduling and operational management.
Automated decision-making
We do not carry out automated decision-making producing legal or similarly significant effects.
We do not undertake automated profiling.
Personal data we collect
We initially collect:
- Name
- Email address
If additional information is required for service delivery, you will be informed before collection.
Data retention
We retain your personal data only for as long as necessary to provide the service and comply with legal obligations.
Data used for optional communications is retained until you opt out.
Service providers
Web infrastructure hosting — Hosting.com
The EBC website is hosted on Hosting.com, with servers located in Germany (EEA).
Hosting.com provides infrastructure services only and does not access or process personal data.
Email campaign management — Brevo
We use Brevo (formerly Sendinblue) to manage and send communications.
Brevo processes personal data on behalf of EBC under Article 28 GDPR and acts strictly in accordance with our instructions. Data is hosted within the EEA.
Video conferencing — Zoom
We use Zoom Video Communications, Inc. to deliver live classes.
During sessions, Zoom processes audio and video data in real time solely to enable participation in live classes. EBC does not record sessions.
Zoom may retain certain technical data and service logs in accordance with its own legal obligations and documentation.
Zoom is headquartered in the United States. Transfers outside the EEA are carried out under Standard Contractual Clauses approved by the European Commission.
For more information, see: zoom.com/privacy
International transfer safeguards
Where personal data is transferred or accessed outside the EEA by service providers, appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission are applied.
Cookies – small files stored on your device
- Our website uses a content management system called WordPress.
- WordPress and its components use cookies to manage the site and display its content.
If you disable cookies, some parts of the website may not function properly.
A cookie is a small file that asks permission to be placed on your computer’s hard drive. Once you agree, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. For example, the web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our websites to tailor it to customer needs. We only use this information for statistical analysis purposes, and then the data is removed from the system.
Overall, cookies help us provide you with better websites by monitoring which pages you find useful and which you do not. However, a cookie in no way gives us access to your computer or any information about you other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. If you refuse a cookie, it may prevent you from taking full advantage of this website.
Please click the cog icon at the lower left side of the screen for more information about cookies.
Links to other websites
Our website may contain links to other websites of interest. However, if you use these links to leave our site, you should note that we do not control other websites. We are not responsible for the protection and privacy of any information you provide whilst visiting these sites, and our privacy statement does not govern these sites. You should always exercise caution and look at the data privacy statement applicable to the website in question.