Privacy Policy
Last updated: 21 September 2026.
Data controller
- Controller: Patricia Monterroso Molina (Escuela Infantil Coleta)
- Tax ID (NIF): 27344683Y
- Address: Calle La Morera 57, 29602 Marbella (Málaga), Spain
- Email: info@eicoleta.es · Phone: +34 952 82 21 85
What data we process and why
This website has no forms or user accounts. We only process personal data in the following cases:
When you contact us
If you email us, message us on WhatsApp or call us, we process the data you give us (for example your name, phone number or email address and whatever you tell us, including any details about your child you choose to share) to reply to you, give you information about the school and, if you ask, arrange a visit.
- Legal basis: your consent when you contact us and, at your request, steps taken before a possible enrolment (article 6.1.a and 6.1.b GDPR).
- Retention: as long as needed to deal with your enquiry and at most one year from our last contact, unless you enrol your child.
Website usage statistics
Only if you accept analytics cookies, we use Google Analytics to find out how many visits the website gets and which pages are viewed. We look at the figures in aggregate and do not use them to identify you.
- Legal basis: your consent (article 6.1.a GDPR and article 22.2 of the Spanish LSSI). You can withdraw it at any time under “Cookie settings” at the bottom of the page.
- Retention: a maximum of 14 months in Google Analytics.
Website security
Like any web server, ours records the IP address, date, requested page and browser of each visit, and blocks suspicious access. We do this to protect the website against attacks.
- Legal basis: our legitimate interest in keeping the website secure (article 6.1.f GDPR).
- Retention: server logs are deleted after 7 days; security system records, once they are no longer needed to protect the website.
Photos of the school
The photos on this website that show children are published with their families' permission. Each family can withdraw it at any time by writing to info@eicoleta.es, and we will remove those images.
- Legal basis: the families' consent (article 6.1.a GDPR).
- Retention: for as long as the permission remains in place.
The data of pupils and their families collected at enrolment is not processed through this website, but according to the information you are given at that time.
Who else receives the data
We do not share your data with third parties unless required by law. We use the following providers to run the service:
- Website and email hosting and maintenance providers, who process the data on our behalf and only for that purpose. The website is hosted on servers located in Germany.
- Google, if you accept analytics cookies or load the map on the contact page.
- WhatsApp (Meta), if you choose to message us on WhatsApp. In that case, WhatsApp processes the data under its own terms.
International transfers
Google and Meta may process data in the United States. Both participate in the EU-U.S. Data Privacy Framework, which the European Commission recognises as an adequate safeguard.
Your rights
You can ask us to access, rectify or erase your data, object to or restrict its processing, request its portability and withdraw your consent at any time. Write to info@eicoleta.es or to our postal address stating which right you wish to exercise; we may ask you to prove your identity.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply technical measures to protect the data: encrypted connections (HTTPS), firewalls, protected access and backups.
Cookies
The use of cookies is explained in the Cookie policy.