Privacy Policy

Yana Aleksandrova NIE: Y6017138F Address: Av. de l'Institut Obrer de València, 21, 46013 València, Spain Email: artes@ylc.es Phone: +34 644 937 664 The controller has not appointed a Data Protection Officer (DPO), as this is not mandatory. For any question regarding processing, contact the email above.

Identification and contact data via the form or email: first and last name, email, phone, message content. Enrolment data: student name, language level, chosen course, billing details; for minors, also the name and contact details of the legal representative. Navigation data (collected automatically, with your cookie consent): anonymised IP address, pages visited, visit duration, browser and device type. We do not collect special categories of data (health, religion, etc.) and ask that you do not include them in free-text fields.

Some courses are aimed at children. The data of minors under 14 is processed only with the consent of their parents or legal representatives (art. 7 LOPDGDD). When a minor is enrolled, the contract and the consent are given by the legal representative. The controller takes reasonable steps to verify that consent has been given by the holder of parental responsibility.

• Responding to enquiries and requests received via the form or email. • Organising and providing educational services (enrolment, groups, schedules, certificates). • Issuing invoices and complying with tax and accounting obligations. • Analysing site navigation and improving the site (only with analytical cookie consent). • Sending information about courses, only if you give your express consent.

• Handling enquiries and pre-contractual steps — art. 6.1.b GDPR (pre-contractual measures) or art. 6.1.a (consent). • Providing services under the training contract — art. 6.1.b GDPR (performance of a contract). • Invoicing and accounting — art. 6.1.c GDPR (legal obligation). • Analytical cookies and marketing communications — art. 6.1.a GDPR (consent), revocable at any time.

• Contact enquiries — until the communication ends, then a maximum of 1 year. • Student data — for the duration of the contract and, after it ends, the legally required periods (accounting and tax data up to 6 years under the Commercial Code and the General Tax Law). • Analytical data (cookies) — maximum 24 months or until consent is withdrawn. Once the periods elapse, data is erased or blocked.

We do not share your data with third parties, except where legally required and the following service providers (processors) acting on the controller's behalf under data processing agreements (art. 28 GDPR): • Website hosting and infrastructure provider. • Google Ireland Limited / Google LLC — Google Analytics, Google Tag Manager, Google Fonts (only with cookie consent). • Microsoft Corporation — Microsoft Clarity (only with cookie consent). Data may also be disclosed to public authorities where there is a legal obligation.

Some providers (Google, Microsoft) may process data outside the European Economic Area, in particular in the USA. Such transfers are protected by the safeguards provided for in the GDPR: the providers' membership of the EU–US Data Privacy Framework and/or the standard contractual clauses (SCCs) approved by the European Commission.

We do not make decisions based solely on automated processing, nor do we carry out profiling that produces legal effects for you.

The controller applies technical and organisational measures appropriate to the risk to protect data against unauthorised access, alteration, loss or disclosure (art. 32 GDPR), including connection encryption (HTTPS) and restricted access to data.

You may exercise the rights of: access, rectification, erasure ("right to be forgotten"), restriction of processing, portability, objection, and withdrawal of consent given (without retroactive effect). To exercise them, write to artes@ylc.es with the subject "Data Protection", enclosing a copy of your identity document. We will respond within 1 month. If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.

Data marked as mandatory is necessary to handle your request or provide the service. Refusal to provide it may prevent the processing of your request or the conclusion of the contract.

This policy may be updated due to regulatory changes or changes in processing. The current version will always be available on this page. Last updated: June 2026.