At Urduña Herri Eskola we treat personal data responsibly and strictly comply with current data protection regulations , including Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation or GDPR) and Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights.

1. Data controller

Organization : Orduña Public School
Address : San Francisco 3, 48460 Orduña, Bizkaia
Telephone : 945 383 504
Email : 014379aa@hezkuntza.net

2. Principles of data processing

We comply with the following principles established by the GDPR when processing personal data:

  • Lawfulness, fairness and transparency : Data is processed in a lawful, fair and transparent manner, with the consent of the interested party or to comply with legal obligations, perform a contract or protect a legitimate legal interest.

  • Purpose limitation : The data will only be used for the purposes stated in this policy.

  • Data minimization : Only the requested data is collected, which is strictly necessary for the management and communication of school activities.

  • Accuracy : Data is kept up-to-date and accurate. Users or interested parties must notify changes to the data.

  • Limitation of retention period : The data will only be kept for the time necessary, after which it will be deleted.

  • Integrity and confidentiality : Appropriate technical and organizational measures are taken to protect data.

3. Categories of personal data processed

The data processed are the following, provided by users:

  • Data collected through the contact form : Name, email address, telephone number and content of the message.

  • Data related to registration or school procedures : Student and family guardian data, enrollment, permits and other documents.

Special data (related to health, union affiliation or criminal records) are not processed unless necessary and the corresponding explicit consent is obtained.

4. Origin of the data

Personal data is provided directly by interested parties or their representatives, through digital forms, by telephone or email.

5. Purpose of data processing

Personal data is processed for the following purposes:

  • Contact form: To manage inquiries, requests or information requests.

  • Procedures related to school activities: To manage enrollments, permits and family communication.

  • Receiving and responding to suggestions, complaints or ratings.

No automated processing of profiles is carried out.

6. Legal basis for processing

The data processing is based on:

  • With the consent of the interested party, to receive inquiries or messages via the contact form.

  • When the management of educational activities is necessary to comply with legal obligations or to protect a legitimate interest.

7. Data recipients

Data is not transferred to third parties, except when necessary to comply with a legal obligation or to provide school services (such as educational administrations, insurance companies, companies that manage the cafeteria or transport, etc.).

8. Retention period

The data will be stored for as long as necessary, and then for the periods required to comply with applicable legal deadlines.

9. User rights

Users have the following rights:

  • Right of access : To know what data is being processed.

  • Right to rectification : To change incorrect or incomplete data.

  • Right to erasure (right to be forgotten) : To delete data when it is no longer necessary.

  • Right to limit processing : To limit processing in certain cases.

  • Portability : Collecting data in a specific structure and transmitting it to another controller.

  • Right to object : To object to the processing of data in certain cases.

10. How to exercise your rights

To exercise these rights, interested parties must send a request by regular mail or email to the following address:

Address : Foru street 20, 48460 Orduña (Bizkaia)
Email : [enter email address]

The school will respond within the deadlines established by current regulations.

11. Complaints to the Spanish Data Protection Agency

If you believe that the processing of your data has not been handled properly, you can file a complaint:

  • Website : www.aepd.es

  • Address : Jorge Juan Street, 6 – 28001 Madrid

12. Security

The school has implemented appropriate technical and organizational measures to protect personal data in accordance with Article 32 of the GDPR.

13. Obligation of confidentiality

All school employees and collaborators who have access to personal data are obliged to maintain confidentiality, even after the employment relationship has ended.

14. Use of the website by minors

Detailed information on the use of the website by minors can be consulted in the Legal Notice .

15. Cookies

Cookies are used to facilitate navigation and remember user preferences. For more information, please consult the website’s cookie policy .

Text updated: February 10, 2025.