Privacy policy

This page is a translation. In the event of any discrepancy between language versions, the Spanish version shall prevail. How we process the personal data you give us through penwin.org. This policy covers the website; the processing of data within the services contracted by an educational institution is governed by the data processing agreement signed with that institution.

Data controller

The controller of the data collected through this website is Baby Penguin, S.L. (PenwinEdu), with tax ID (NIF) B66358623 and registered office at Benet Cortada, 14 · 08174 Sant Cugat del Vallès (Barcelona), Spain.

You can contact us at any time by writing to info@penwin.org.

What data we collect and why

We only collect data when you give it to us voluntarily through one of the two forms on the website. We do not use analytics or advertising cookies, and we do not create profiles. There is, however, a connection to an external font service, which is explained further down, in the section on recipients.

  • Contact form: name, school or institution, email address and the content of the message. Purpose: to answer your enquiry and, where appropriate, to prepare a proposal.
  • Technology assessment form: details of the school, contact names and technical information about its infrastructure. Purpose: to carry out the assessment requested and prepare the corresponding service proposal.
  • Technical connection data, processed by our hosting provider in order to provide the service and keep it secure.

Lawful basis

The processing of data from both forms is based on your consent when you submit them and, where the enquiry relates to engaging or evaluating a service, on steps taken at the data subject's request before entering into a contract.

We do not process data on the basis of legitimate interests for commercial purposes, and we do not add you to any mailing list simply because you have written to us.

How long we keep the data

We keep contact details for as long as the relationship with the school lasts and, after that, for the limitation periods required by commercial and tax legislation. If the enquiry does not lead to a business relationship, the data is deleted once the enquiry has been dealt with and closed.

Recipients and international transfers

We do not sell or disclose data for commercial purposes. We do use technology providers that act as processors and only process data on our behalf and in accordance with our instructions. Some of them are companies whose parent company is based outside the European Economic Area, which may involve an international transfer covered by the safeguards provided for in the legislation.

In addition, this website loads the Inter typeface from Google's font service. This means that, when you visit any page, your browser connects to Google servers and sends them your IP address and the technical details of that request. No cookies are set as a result, but the connection does take place.

  • Website hosting and deployment provider.
  • Transactional email provider, so that the content of the forms reaches us.
  • Font service, which your browser connects to in order to download the website's typeface.

Children's data

This website is not aimed at children, and its forms are intended for people who contact us on behalf of an educational institution.

The processing of student data within the services we provide to a school – for example, in filtering or device management solutions – is a separate matter. In those cases the controller is the school itself, which determines the purpose and the lawful basis and informs families; we act as processors under the terms of the contract signed with the school.

Job applications

If you write to us about working with us, we process the data in your application for the sole purpose of assessing it for the position or collaboration in question. The lawful basis is steps taken at the data subject's request before entering into a contract.

We do not keep applications for future recruitment processes unless you expressly authorise us to do so, and you can ask us to delete them at any time.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to info@penwin.org, stating the right you are exercising and providing proof of your identity.

If you believe that the processing does not comply with the legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency, the AEPD (www.aepd.es).

Security

The website is served entirely over an encrypted connection. We apply technical and organisational measures to protect information against unauthorised access, and we restrict access to form data to the members of the team who need to deal with it.