Data Privacy and Cookies
Last updated: September 19, 2026
Contents
1. Data Controller
Your personal data is processed by:
EBC y Asociados Idiomas Internacional S.L.
Calle Caléndula, 93, MINIPARC III, Edif. E, El Soto de la Moraleja,
28109 Alcobendas, Madrid, Spain
CIF/NIF: B-82135245
Email: ebc(@)ebcidiomas.com
Click here to see our Legal Notice.
2. Personal Data We Collect
We only collect personal data that is necessary to provide, administer and support our products and services.
Depending on how you use our website and services, we may collect:
- your name;
- your email address;
- your telephone number, where you choose to provide it;
- your country of residence;
- your IP address and certain technical information relating to your use of our website;
- information relating to your enrolment, courses, lessons, assessments and certificates; and
- information relating to payments and transactions, such as the course purchased and payment status.
We do not intentionally collect special categories of personal data. Please do not provide us with sensitive personal information unless it is necessary for a specific purpose and we have asked you to do so.
We may collect additional information where it is necessary to provide a particular product or service. Where appropriate, we will inform you about this at the time the information is collected.
3. Why We Use Your Personal Data
We use your personal data for the following purposes:
- to create and administer your account or enrolment;
- to provide courses, lessons, assessments, certificates and related services;
- to communicate with you about your course, lessons, enrolment, payments and other matters relating to the services you have requested;
- to process and administer payments;
- to provide customer support and respond to enquiries;
- to maintain and secure our website, systems and services;
- to comply with legal, accounting, tax and other regulatory requirements;
- to protect our legitimate interests, including preventing fraud, misuse and unauthorised access; and
- where permitted by law, to send you information about EBC courses, services, news or other relevant opportunities.
4. Legal Bases for Processing
Depending on the purpose, we process your personal data on one or more of the following legal bases:
- Performance of a contract: where processing is necessary to provide a course or service you have requested, administer your enrolment or manage our contractual relationship with you.
- Pre-contractual steps: where processing is necessary to respond to an enquiry or take steps at your request before entering into a contract.
- Legal obligations: where we are required to process or retain information by law, including applicable accounting, tax and other legal requirements.
- Legitimate interests: where necessary for purposes such as website security, service administration, fraud prevention, customer relationship management and, where permitted by applicable law, relevant communications to existing customers.
- Consent: where consent is required by law, including for certain cookies or direct marketing communications.
Where we rely on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Marketing Communications
We may send promotional communications about EBC courses, services and related opportunities where permitted by applicable law.
Where the law permits us to rely on an existing customer relationship, we may send information about our own products or services that are similar to those previously purchased.
Where consent is required by law, we will obtain your consent before sending marketing communications.
Promotional communications are sent separately from communications that are necessary to provide, administer or support a course or service you have purchased from us. You can opt out of promotional communications at any time using the unsubscribe or opt-out option provided in the communication.
Opting out of promotional communications does not prevent us from sending communications that are necessary to provide, administer or support a course or service you have purchased from us.
6. Payment Information
Payments are processed by Stripe.
EBC does not collect or store your full payment card details.
Payment information is handled by Stripe in accordance with its own terms and privacy information.
7. Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
8. External Service Providers
We use external service providers to operate and support our website and services. These providers may process personal data on our behalf or, depending on the service, process information under their own legal responsibilities.
Our principal service providers include:
- Hosting.com / A2 Hosting: provides hosting infrastructure for our website and WordPress installation. Our WordPress and LifterLMS data is stored in the database hosted on this infrastructure. Hosting.com may process data in the European Economic Area and in other locations, including the United States, subject to applicable safeguards.
- WordPress and LifterLMS: our website and learning platform run on WordPress and LifterLMS. Student and course information is stored within our WordPress installation and database hosted by Hosting.com. LifterLMS’s optional usage tracking is disabled on our website.
- Brevo: used for contact management and email communications. Brevo’s database infrastructure is hosted within the European Union, subject to its applicable terms and safeguards.
- Stripe: an external payment provider used to process certain payments. Stripe may process personal data in different countries depending on the services provided and applicable payment arrangements.
- CookieHub: used to manage cookie consent and preferences. CookieHub processes the information necessary to record and manage your cookie choices.
These providers only receive or have access to information necessary for the services they provide, subject to their applicable contractual and legal obligations.
9. Sharing and Disclosure of Personal Data
EBC does not sell, rent or otherwise make your personal data available to third parties for their own purposes.
Your personal data is only made available to entities engaged and controlled by EBC for the purpose of providing, administering, securing or supporting the products and services you have requested from us. These entities may process your personal data only to the extent necessary for the services they provide to EBC and are subject to appropriate contractual and data-protection requirements.
We do not provide your personal data to independent third parties for their own marketing, advertising, profiling or other commercial purposes.
We will only disclose your personal data to another entity outside this service-provider framework where:
- you have specifically requested or authorised us to do so and have provided any consent required by law;
- the disclosure is necessary to comply with a legal obligation or binding legal requirement; or
- the disclosure is otherwise expressly permitted or required by applicable law.
Where you specifically ask EBC to provide your personal data to another organisation, we will only do so after taking appropriate steps to confirm your request and, where required, obtaining your explicit consent.
10. International Data Transfers
EBC is committed to ensuring that personal data is processed in accordance with the GDPR, including where personal data is processed outside the European Economic Area (EEA).
We expect our external processors and service providers to process personal data only for the purposes for which they are engaged, to maintain appropriate technical and organisational security measures, to respect applicable data protection requirements, and to provide the contractual protections required by applicable data protection law.
Where we engage a processor to process personal data on our behalf, we require the processing relationship to be governed by appropriate contractual terms, including the requirements applicable to processors under Article 28 of the GDPR and, where relevant, provisions governing the use of subprocessors and international transfers.
Where personal data is transferred outside the EEA, EBC will only permit the transfer where a lawful transfer mechanism under Chapter V of the GDPR applies. Depending on the circumstances, this may include an adequacy decision, participation in an applicable recognised data-transfer framework such as the EU-U.S. Data Privacy Framework, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Where a processor or subprocessor relies on an international transfer mechanism in its own contractual or privacy documentation, we expect that mechanism to be applicable to the relevant processing of EBC personal data and to provide the level of protection required by applicable data protection law.
Our principal external service providers may process data in different jurisdictions depending on the services they provide and the infrastructure or subprocessors they use. For example, Hosting.com states that it participates in the EU-U.S. Data Privacy Framework and may rely on that framework for transfers of personal data from the EEA to the United States. Stripe states that its data-transfer arrangements may rely on the EU-U.S. Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses. CookieHub states that transfers outside the EEA are subject to appropriate safeguards under Chapter V GDPR, including Standard Contractual Clauses where applicable.
EBC does not authorise international transfers of personal data on the basis that a provider is located outside the EEA alone. The relevant transfer mechanism and applicable safeguards must be identified and maintained for the processing concerned.
Where required by applicable law, EBC will assess the relevant transfer arrangements and consider whether additional safeguards are necessary to ensure that personal data receives a level of protection essentially equivalent to that required within the European Union.
11. How Long We Keep Your Data
We keep personal data for as long as necessary to provide the relevant services, manage our relationship with you, comply with applicable legal and accounting requirements, and establish, exercise or defend legal claims where necessary.
When personal data is no longer required, we will delete it or securely dispose of it, subject to any legal requirement to retain it for a longer period.
12. Your Data Protection Rights
Subject to applicable law, you have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing, including processing based on legitimate interests;
- request portability of your personal data where applicable;
- withdraw consent where processing is based on consent; and
- lodge a complaint with the relevant data protection authority.
To exercise your rights, please contact us using the details provided above. We will need to verify your identity before processing your request. We may request information or documentation reasonably necessary to confirm that the request relates to you.
In Spain, you can also lodge a complaint with the Spanish Data Protection Agency (AEPD).
13. Data Security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmission or storage can be guaranteed to be completely secure.
14. Links to Other Websites
Our website may contain links to external websites or services. These websites are not operated by EBC.
EBC accepts no responsibility or liability for the privacy practices, content, security or data-processing activities of external websites. We recommend that you review the privacy and cookie information of any external website you visit.
15. Cookies
Our website uses cookies and similar technologies. Cookies are small files or other technologies that may be stored on your device when you visit a website.
Some cookies are necessary for the website to function correctly. Other cookies may be used for purposes such as analytics, preferences or other functionality and may require your consent under applicable law.
Where consent is required, non-essential cookies are not placed or used until you have given your consent.
16. Cookie Consent and Preferences
When you first visit our website, CookieHub allows you to manage your cookie preferences.
Depending on the cookies used on the website, you may be able to:
- accept non-essential cookies;
- reject non-essential cookies; or
- manage your preferences by cookie category.
Your cookie choice is recorded through CookieHub.
You can change or withdraw your cookie preferences at any time by clicking the CookieHub settings icon (gear icon) displayed on our website.
The CookieHub settings panel provides direct access to your cookie preferences and allows you to change your selection.
17. Information About the Cookies We Use
The CookieHub settings panel provides the current information about the cookies used on our website. By clicking the CookieHub gear icon, you can view the cookies currently in use, including information about their categories, providers, purposes and duration, where applicable.
Because the cookies used on a website may change as its technology and functionality change, the cookie information displayed through CookieHub may be updated from time to time.
This means that the CookieHub panel should be regarded as the current, detailed source of information about the cookies active on our website, while this page explains our general approach to cookies and data protection.
18. Essential Cookies
Some cookies are necessary for the operation, security and basic functionality of our website. These cookies may be used without consent where they are strictly necessary for a service or functionality that you have requested or where another legal exemption applies.
These cookies may include cookies required for website functionality, security, session management, consent preferences or other essential technical functions.
19. Non-Essential Cookies
Non-essential cookies are only used where the applicable legal requirements for their use have been met, including obtaining consent where required.
The categories and individual cookies currently in use can be viewed through the CookieHub settings panel by clicking the gear icon.
20. Changes to This Policy
We may update this Data Privacy and Cookies page from time to time to reflect changes to our services, technology, legal requirements or the way we process personal data.
The latest version will be published on this page with the relevant update date.
21. Contact
If you have any questions about this Data Privacy and Cookies page or how we process your personal data, please contact us:
EBC y Asociados Idiomas Internacional S.L.
Calle Caléndula, 93, MINIPARC III, Edif. E, El Soto de la Moraleja,
28109 Alcobendas, Madrid, Spain
Email: ebc(@)ebcidiomas.com