educado

Privacy Policy

1. Introduction

Educado ("we", "us", or "our") operates the website educado.es (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Spain's Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee ("LOPDGDD").

2. Data Controller

The data controller responsible for your personal data is Educado. For any privacy-related inquiries, please contact us at: privacy@educado.es.

3. Information We Collect

We may collect the following categories of personal data:

  • Contact Information: Name, email address, phone number — when you submit an inquiry or contact form.
  • Usage Data: IP address, browser type, pages visited, time spent on pages, referral source — collected automatically through cookies and similar technologies.
  • Preference Data: Language preferences, search filters, and saved schools.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for analytics and marketing cookies.
  • Legitimate Interest: To operate, maintain, and improve our Service; to analyze usage patterns; and to prevent fraud.
  • Contractual Necessity: To respond to your inquiries and provide the services you have requested.

5. How We Use Your Information

We use collected data to:

  • Provide, operate, and maintain the Service.
  • Respond to your inquiries about schools in Spain.
  • Analyze usage to improve user experience and content.
  • Send relevant communications (only with your consent).
  • Comply with legal obligations.

6. Data Sharing and Transfers

We do not sell your personal data. We may share your information with:

  • Schools: When you request information about a specific school, we share your contact details with that school so they can respond to your inquiry.
  • Service Providers: Hosting, analytics, and email providers that process data on our behalf under appropriate data processing agreements.
  • Legal Requirements: When required by law or to protect our rights.

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Inquiry data is retained for up to 24 months. Analytics data is retained in aggregated, anonymized form.

8. Your Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Request limitation of processing.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@educado.es. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "last updated" date.

Last updated: February 2026