The Website collects personal data through the following forms:
Data collected: full name, school name, role at the school, educational stage, email address and a description of the pilot’s goal.
Purpose: to manage the request to join the pilot school network, provide access to the materials and communicate with the school’s contact person during the pilot.
Legal basis: performance of a pre-contractual or contractual relationship (Art. 6.1.b GDPR) and the data subject’s consent (Art. 6.1.a GDPR).
Retention period: for the duration of the relationship with the pilot network and, once it has ended, for the applicable statutory limitation periods.
Data collected: full name, school name, educational stage, main subject and email address.
Purpose: to provide access to the freely downloadable classroom instruments and, if the user has agreed, to send communications about MIRA news.
Legal basis: the data subject’s consent (Art. 6.1.a GDPR). The user may withdraw consent at any time.
Retention period: until the user requests erasure of their data or withdraws consent.
Data collected: contact person’s name, school name, educational stage and answers to the survey questions.
Purpose: to gather feedback from the pilot schools in order to improve the materials and the implementation process of the MIRA model.
Legal basis: performance of the relationship with the pilot network (Art. 6.1.b GDPR).
Retention period: for the duration of the relationship with the pilot network and for the applicable statutory limitation periods.
The personal data provided by the user will not be transferred to third parties, except where legally required. However, for the technical management of the Website and associated services, the following service providers are used as data processors:
| Provider | Service | Location |
|---|---|---|
| Netlify / Hosting | Website hosting | USA (EU standard contractual clauses) |
| Google LLC | Google Forms / Sheets — termly survey | EU / USA (adequacy decision) |
| Make / Zapier | Email automation | EU / USA (EU standard contractual clauses) |
| Brevo / Mailchimp | Sending welcome emails and communications | EU / USA (EU standard contractual clauses) |
The user may exercise the following rights in relation to their personal data at any time:
| Right | Description |
|---|---|
| Access | To know which personal data is processed and obtain a copy of it. |
| Rectification | To request the correction of inaccurate or incomplete data. |
| Erasure | To request the deletion of data when it is no longer necessary. |
| Objection | To object to the processing of their data in certain circumstances. |
| Restriction | To request the restriction of processing in the cases provided for by law. |
| Portability | To receive the data in a structured, commonly used format. |
| Withdrawal of consent | To withdraw consent at any time without affecting the lawfulness of prior processing. |
To exercise these rights, the user may write to hola@miraaprendizaje.org, stating the right they wish to exercise and attaching a copy of their identity document. The data controller will respond within a maximum of one month from receipt of the request.
If the user believes that their rights have not been duly addressed, they may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
The data controller has adopted the technical and organisational measures necessary to ensure the security of personal data and to prevent its alteration, loss, or unauthorised processing or access. All data is transmitted over a secure connection (HTTPS).
The data controller reserves the right to modify this privacy policy in order to adapt it to legislative or case-law developments. Changes will be published on the Website together with the date of update.