Privacy policy

Data controller

Escola Waldorf La Font. CIF: F-66364902. Postal address: Ronda Francesc Camprodon, 2 (edifici del Seminari), 08500 Vic. Telephone: 695 788 133. Email: info@waldorflafont.org.

Processing of data

The Data Controller, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the GDPR), hereby informs you that the sole and exclusive purpose of processing your data shall be to carry out the request for information made by you, without which this is not possible.

This information shall be used solely by the school's authorised staff.

To provide the service we rely on technology providers acting as data processors (web hosting and email delivery); some may process data on servers located outside the European Union, always with the appropriate safeguards required by the GDPR (Art. 44-46). We detail this in the "Website forms" section.

The data provided shall be retained for as long as the relationship binding the two parties remains in force.

Website forms (contact, enquiries and visit booking)

When you use the contact form or the form to ask how to support the school, we collect your name, email address, phone number and message. The visit-booking form additionally asks for the child's name, their date of birth and the stage you're interested in, so we can prepare the visit and support you better.

We process this data solely to answer your enquiry and arrange the requested visit. The lawful basis is your consent, given when you accept this policy (Art. 6(1)(a) GDPR), and pre-contractual steps taken at your request (Art. 6(1)(b) GDPR). We only ask for the minimum data necessary (Art. 5(1)(c) GDPR).

The child's data is provided by the parent or legal guardian, who authorises its processing and is responsible for it. We treat it with particular care and do not use it for any other purpose.

To handle the forms we use data processors: web hosting (Vercel) and email delivery (Resend), which may host or process data in the United States with appropriate safeguards (Standard Contractual Clauses and/or the EU-US Data Privacy Framework, Art. 44-46 GDPR). Only the school's authorised staff receive the data.

We keep form information for as long as needed to handle the request. If no further relationship with the school begins, we delete it once the request is resolved.

Requesting your donation certificate

If you make a donation through the foundation that supports the school and ask us for the certificate to deduct it on your tax return, we collect your full name, your tax ID (NIF/DNI), your fiscal address and your email. We use this data for the sole purpose of issuing and sending you the donation certificate.

The lawful basis is your consent, given when you accept this policy on submitting the form (Art. 6(1)(a) GDPR), together with compliance with our legal tax obligations, which require us to identify the donor and report donations to the tax authorities (Art. 6(1)(c) GDPR; Spanish Law 49/2002 on the tax regime of non-profit entities and patronage incentives). We only ask for the data strictly necessary to issue the certificate (Art. 5(1)(c) GDPR).

Because donations are received by the partner foundation (Fundació per a l'Art d'Educar de Rudolf Steiner), we share this data with the foundation, which issues the certificate and reports the donations to the Spanish Tax Agency as required by law. We also use the same data processors (Vercel and Resend) listed above.

We keep this data for the period required by tax and accounting legislation to substantiate the donations and the certificates issued; once that period has elapsed, we delete or anonymise it.

Cookies and web analytics

This website uses its own technical cookies, necessary for it to work, which do not require consent. In addition, with your consent, we use Google Analytics, a web analytics service from Google, to understand in aggregate how the site is used (pages visited, visit duration, device type and approximate location) so we can improve it.

Analytics cookies are only set if you accept them in the cookie notice shown when you enter the site. The legal basis is your consent (Art. 6.1.a GDPR). You can accept them or keep only the essential ones, and you can withdraw your consent at any time by deleting the cookies in your browser; declining does not affect your browsing.

Google LLC acts as a data processor and may process this data in the United States with the appropriate safeguards provided for in the GDPR (standard contractual clauses and/or the EU-US Data Privacy Framework, Arts. 44-46 GDPR). We do not use this data to identify you personally, nor do we combine it with the information you provide in the forms.

In addition, under the same consent, we use Vercel Web Analytics and Speed Insights, two services from our hosting provider (Vercel Inc.) that measure in aggregate and without cookies how the site is used and how fast it performs (pages visited, referrer, country, device type and page load times). They set no cookies and do not let us identify you personally, and they run only if you give your consent in the cookie notice; the legal basis is your consent (Art. 6.1.a GDPR). Vercel Inc. acts as a data processor and may process this data in the United States with the appropriate safeguards provided for in the GDPR (standard contractual clauses and/or the EU-US Data Privacy Framework, Arts. 44-46 GDPR).

Rights of the data subject

You are responsible for the truthfulness and accuracy of the data you provide to us, and you have the right to exercise your rights of access, rectification, erasure, restriction of processing, portability and objection regarding your data, in accordance with the provisions of data protection legislation. To exercise them, you may address the Data Controller in writing, either by letter or by email to info@waldorflafont.org; we will only ask you to prove your identity where there is reasonable doubt about who is making the request. If you consider that the processing of your data does not comply with the legislation, you have the right to lodge a complaint with the Catalan Data Protection Authority (APDCAT, apdcat.gencat.cat) or the Spanish Data Protection Agency (AEPD, aepd.es).

Consent for communications

In addition, if you wish to receive information about the activities we carry out at Escola Waldorf La Font and which we believe may be of interest to you, you must give us your consent by ticking the corresponding box.

You may withdraw your consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal. To do so, you may likewise proceed in writing, either by letter to the indicated postal address of the Data Controller or by email to info@waldorflafont.org.