Privacy Policy

The controller is the trader providing your course: • Spanish courses — Andranik Danielian, NIE: Y6246079Y • English courses — Yana Aleksandrova, NIE: Y6017138F Address: Av. de l'Institut Obrer de València, 21, 46013 València, Spain Email: artes@ylc.es Phone: +34 711 570 066 The controller has not appointed a Data Protection Officer (DPO), as this is not mandatory. For any question regarding processing, contact the email above.

Identification and contact data via the form or email: first and last name, email, phone, message content. Enrolment data: student name, language level, chosen course, billing details; for minors, also the name and contact details of the legal representative. Navigation data (collected automatically, with your cookie consent): anonymised IP address, pages visited, visit duration, browser and device type. We do not collect special categories of data (health, religion, etc.) and ask that you do not include them in free-text fields. Document signing data: date and time, IP address, device and browser details, the consent boxes ticked, the versions of the signed documents and their checksums. Legal basis: performance of the contract and defence of the parties' rights.

Some courses are aimed at children. The data of minors under 14 is processed only with the consent of their parents or legal representatives (art. 7 LOPDGDD). When a minor is enrolled, the contract and the consent are given by the legal representative. The controller takes reasonable steps to verify that consent has been given by the holder of parental responsibility.

• Responding to enquiries and requests received via the form or email. • Organising and providing educational services (enrolment, groups, schedules, certificates). • Issuing invoices and complying with tax and accounting obligations. • Analysing site navigation and improving the site (only with analytical cookie consent). • Sending information about courses, only if you give your express consent. • Sending five emails to someone who starts the level test and does not finish it: a reminder about the test, an invitation to a free trial lesson and information about the courses. Set out below in its own section.

• Handling enquiries and pre-contractual steps — art. 6.1.b GDPR (pre-contractual measures) or art. 6.1.a (consent). • Providing services under the training contract — art. 6.1.b GDPR (performance of a contract). • Invoicing and accounting — art. 6.1.c GDPR (legal obligation). • Analytical cookies and marketing communications — art. 6.1.a GDPR (consent), revocable at any time. • Five emails after an unfinished level test — art. 6.1.f GDPR (legitimate interest) and art. 21.2 of Spanish Law 34/2002 (LSSI-CE): you gave us the address yourself when requesting a service from the school. One click in any of those emails stops them.

The site shows reviews of the school left on the YLC Valencia profile on Google. We display only the author name as published on Google and the text of the review. Photographs, profile links and any contact details are not carried over. Legal basis: legitimate interest (Art. 6.1.f GDPR) in showing visitors genuine opinions about the school. The reviews have already been published openly by their authors and we collect no additional data. If you wrote a review and would rather it did not appear on our site, email artes@ylc.es. We remove it within 10 working days, no explanation needed. Removing it from our site does not affect its publication on Google: that stays under your control in your own account.

If you start the level test, give us your email address and never reach the end, we send at most five emails: one a day for five days. They carry a reminder about the unfinished test, an invitation to a free trial lesson, the real timelines for each level, a personal discount and the group timetable. There will be no further emails on this account. Legal basis: legitimate interest (Art. 6.1.f GDPR) and Art. 21.2 of Spanish Law 34/2002 (LSSI-CE): you gave us the address yourself when requesting a service from the school, and the emails concern that same service. Every email carries a «Stop sending me these» link in the footer. Unsubscribing takes effect at once and for good: you will not be added again. The series also stops by itself if you come back and finish the test or start a payment. The series data (address, language, how many emails went out, the unsubscribe) is kept for up to 12 months and then deleted.

• Contact enquiries — until the communication ends, then a maximum of 1 year. • Student data — for the duration of the contract and, after it ends, the legally required periods (accounting and tax data up to 6 years under the Commercial Code and the General Tax Law). • Analytical data (cookies) — maximum 24 months or until consent is withdrawn. Once the periods elapse, data is erased or blocked.

We do not share your data with third parties, except where legally required and the following service providers (processors) acting on the controller's behalf under data processing agreements (art. 28 GDPR): • Website hosting and infrastructure provider. • Google Ireland Limited / Google LLC — Google Analytics, Google Tag Manager, Google Fonts (only with cookie consent). • Microsoft Corporation — Microsoft Clarity (only with cookie consent). Data may also be disclosed to public authorities where there is a legal obligation.

Some providers (Google, Microsoft) may process data outside the European Economic Area, in particular in the USA. Such transfers are protected by the safeguards provided for in the GDPR: the providers' membership of the EU–US Data Privacy Framework and/or the standard contractual clauses (SCCs) approved by the European Commission.

We do not make decisions based solely on automated processing, nor do we carry out profiling that produces legal effects for you.

The controller applies technical and organisational measures appropriate to the risk to protect data against unauthorised access, alteration, loss or disclosure (art. 32 GDPR), including connection encryption (HTTPS) and restricted access to data.

You may exercise the rights of: access, rectification, erasure ("right to be forgotten"), restriction of processing, portability, objection, and withdrawal of consent given (without retroactive effect). To exercise them, write to artes@ylc.es with the subject "Data Protection", enclosing a copy of your identity document. We will respond within 1 month. If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.

Data marked as mandatory is necessary to handle your request or provide the service. Refusal to provide it may prevent the processing of your request or the conclusion of the contract.

This policy may be updated due to regulatory changes or changes in processing. The current version will always be available on this page. Last updated: June 2026.