Privacy policy
Last updated: August 2025
AIDEA DEVELOP SLU (hereinafter, ACE EDUCATION SPAIN), in compliance with applicable data protection regulations, and as the party responsible for this website, informs all users who provide or are going to provide their personal data that such data will be processed and recorded among the processing activities of this website, in accordance with Article 30 of Regulation (EU) 2016/679 of April 27, 2016, General Data Protection Regulation (hereinafter, GDPR), as well as Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights.
Identity and Contact Details of the Data Controller
-
Name and identity: AIDEA DEVELOP SLU
-
CIF: B-98540792
-
Registered in the Commercial Registry, sheet V-154225, folio 25, volume 9638, book 6920 of the Valencia Commercial Registry.
-
Address: Avenida de Catalunya, 6 -Bajo- 46021 Valencia (Spain).
External Data Protection Coordinator:
Juan Carlos Galindo
Email: lopd@esbs-spain.com
User Consent
The submission of personal data through the electronic forms of this website, or the sending of emails requesting information or services, constitutes the User’s explicit consent to the automated processing of the data provided, as well as to the sending of electronic communications with information about ACE EDUCATION activities.
By doing so, the User expressly consents that the Personal Data provided or submitted to ACE EDUCATION will be incorporated into a personal data processing record and will be subject to automated processing by ACE EDUCATION for the purposes described below.
This Privacy Policy governs the following processing of personal data:
1. Employee Selection Process
-
Data subjects: Potential candidates
-
Data: Identification and contact details (name, surname, email, phone number), academic data (CV), LinkedIn profile
-
Purpose: Process applications to work with us, manage recruitment processes, conduct interviews with the aim of joining our organization
-
Legal basis: Pre-contractual measures at the request of the data subject (when applying via LinkedIn). Consent when sending a CV by email or in person.
-
Retention period: CVs will be kept for a maximum of 12 months if the candidate is not selected, after which they will be destroyed.
2. Video Surveillance
-
Data subjects: All visitors to our facilities
-
Data: Image
-
Purpose: Security and workplace control
-
Legal basis: Legitimate interest in maintaining security in our facilities, and Article 20.3 of the Spanish Workers’ Statute
-
Recipients: Law enforcement and/or courts
-
Retention period: Recordings will be stored for one month, unless an access request is made, in which case they will be kept until a response is given.
3. Use of Images
ACE EDUCATION may use images (photos or videos) taken in the context of academic, research, cultural, or institutional activities for publication on its official website and social networks.
These images will be used exclusively for informational and institutional purposes, not commercial purposes. The processing of such images is based on the school’s legitimate interest in documenting and communicating its activities.
WHISTLEBLOWER CHANNEL (ETHICS MAILBOX)
Procedure for Managing Reports Received
Internal reporting channel of ACE EDUCATION SPAIN:
ACE EDUCATION SPAIN has a whistleblowing channel in compliance with Law 2/2023 of February 20, on the protection of persons reporting regulatory violations and anti-corruption.
-
Separate from other communication channels used internally or with third parties.
-
Designed to ensure integrity and confidentiality of information and to prevent access by unauthorized staff.
-
Allows secure storage of information for further investigation.
Available channels:
-
Through a web form at: https://esbs-spain.com/buzon-etico/
-
In-person meeting at ACE EDUCATION SPAIN facilities (requestable via the form).
External reporting channels are also available, such as the CNMV, CNMC, SEPBLAC, the Independent Authority for Whistleblower Protection, the Valencian Anti-Fraud Agency, AEPD, among others.
Scope of reports:
-
EU law infringements (as per Directive (EU) 2019/1937), including public procurement, financial services, product safety, transport safety, environmental protection, nuclear safety, food and feed safety, animal welfare, public health, consumer protection, data protection, cybersecurity, etc.
-
Breaches affecting EU financial interests (Article 325 TFEU).
-
Infringements relating to the internal market (Article 26 TFEU), competition, state aid, tax avoidance.
-
Criminal or serious/very serious administrative offenses, especially those involving economic harm to public finances or social security.
Personal scope of application: Employees, freelancers, partners, suppliers’ staff, volunteers, interns, trainees, and job candidates who obtained information during recruitment or pre-contractual negotiations.
Contact Us
-
Data subjects: Website users
-
Data: Identification and contact details (email, name)
-
Purpose: Respond to information requests about our programs and services via web form, email (valencia.basket@valenciabasket.com), phone, or WhatsApp
-
Legal basis: Consent
-
Retention: Until the request is resolved
Other Processing Activities (summarized)
-
Course information requests → potential students, data for advice and queries.
-
Program applications & enrollment → names, contact, education background, documents (passport, transcripts, motivation letters, etc.).
-
Training, internships & international relations → manage admitted students and exchange programs.
-
Alumni services → build alumni community, process memberships/payments.
-
Events & courses → manage participation and promotion.
-
Webinars → manage access and downloads.
-
Use of images → for press, social media, and corporate materials (with consent).
International Data Transfers
Data shared through platforms like Instagram, Facebook, Twitter, YouTube, LinkedIn, and TikTok involves transfers outside the EEA (to the USA or China).
Recipients of Personal Data
-
Authorities, regulators, or government bodies (when required by law)
-
Service providers (hosting, financial services, email delivery, customer support, etc.)
-
Financial institutions (for payments)
-
Law enforcement agencies (for compliance with legal obligations)
Data Retention
Personal data will be retained only as long as strictly necessary for the purposes collected, or as legally required. Data will be deleted or anonymized once no longer necessary.
Your Data Protection Rights
-
Access to your data.
-
Rectification of inaccurate data.
-
Restriction of processing in certain cases.
-
Objection to processing.
-
Erasure of data under justified circumstances.
-
Portability of data (where technically possible).
-
Right not to be subject to automated decisions, including profiling.
-
Withdrawal of consent at any time (without affecting prior lawful processing).
-
Right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
Requests may be sent to lopd@esbs-spain.com. For minors under 14, rights must be exercised by parents or guardians.
Automated Decision-Making and AI
We may tailor commercial offers based on your preferences (with your consent). You may object at any time by emailing lopd@esbs-spain.com.
Security Measures
ACE EDUCATION SPAIN commits to appropriate technical and organizational measures: encryption, restricted access, password policies, backups, security assessments, and staff training. However, no system is completely secure, and we disclaim liability for breaches beyond our legal obligations.
Minors
For children under 14, consent must be provided by parents or guardians. ACE EDUCATION SPAIN will take reasonable steps to verify this consent.
Changes to this Privacy Policy
ACE EDUCATION SPAIN may update or modify this Privacy Policy at any time. We recommend reviewing it regularly.
For questions, contact: valencia.basket@valenciabasket.com.
Cookies Information
We use cookies to facilitate navigation and understand user interaction. Please see our Cookies Policy for details.
Would you like me to format this translation in a polished, ready-to-use “legal English” style (like the versions companies usually post on their websites), or do you prefer to keep it as a faithful word-for-word translation?