At Spanish Planet School, we are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Dutch Algemene Verordening Gegevensbescherming (AVG). Last updated: July 2026.
This notice is in two parts: what happens when you use our website (visitors and enquiries), and what happens when you become a student (or enrol your child). If you enrol, we also show you a dedicated student privacy notice during enrolment.
Data Controller
Spanish Planet School
Anegang 31A, 2011 HR Haarlem, Netherlands
KvK: 89544382 · BTW: NL004740520B67
Email: info@spanishplanetschool.com
Phone: +31 6 21906546
Part 1 — When you use our website
Contact form: name, email address, subject, how you heard about us, and your message.
Intake session form: full name, email address, telephone number, who the lessons are for (adult or child), current Spanish level, preferred modality (online or face-to-face), type of lessons, availability, and acceptance of terms.
Free level test: if you take our online Spanish level test, we collect your email address (to send your result), optionally your name, your answers and your per-level scores (A1–B2/C1), and any details you choose to share (motivation, prior experience, when you would like to start, and whether you would like us to contact you). We may also record information linked to a random test-session identifier (not your name or email) about how far you progressed through the test, to help us improve it.
Analytics cookies (only if you accept): Google Analytics 4 and Ahrefs Web Analytics collect anonymised data such as pages visited, session duration, referral source, browser type, and approximate geographic location. See our Cookie Policy.
How we use this and our legal basis:
- To respond to your enquiries and schedule intake sessions — legitimate interest (answering a request you sent us) and, where you are requesting lessons, steps prior to a contract.
- To send your level-test result and, if you asked us to, to follow up about lessons — consent.
- To improve our website through anonymised analytics — consent (via the cookie banner).
Retention: enquiry and level-test submissions are stored securely and deleted after 12 months, unless you become a student (in which case they form part of your student record). Analytics data is kept for 14 months (Google's default). Your cookie choice is stored in your browser until you clear it.
Part 2 — When you become a student (or enrol your child)
When you enrol, we hold the information needed to provide and bill for lessons: your name and contact details, the billing/payer details you provide, your (or your child's) level and lesson history, attendance and remaining credits, invoices, and your portal account. For a child, we also hold the guardian's identity and contact details.
Legal basis: performing our lesson contract with you. For a child, the guardian enters into the contract and provides consent on the child's behalf. Invoicing and accounting records are also kept to meet our legal (tax) obligations.
At enrolment we show you a dedicated student privacy notice and our terms, and we record that you have read the notice and accepted the terms (kept with a version and date). Marketing emails are separate and optional — you choose whether to receive them, and can change your preference at any time by contacting us.
Children's data: for children's lessons we do hold the child's first name, level, attendance and lesson records, always linked to a guardian who enrols them and acts on their behalf. Children are not asked to provide data directly, and we collect no personal data from simply browsing the website.
Retention: student records are kept for the duration of the relationship and for up to 3 years afterwards; invoices and accounting records are kept for 7 years as required by Dutch tax law.
Third-Party Services We Use
- Google Analytics 4 — website analytics (consent-gated). Privacy Policy
- Ahrefs Web Analytics — website analytics (consent-gated). Privacy Policy
- Google Workspace — email delivery (form notifications, level-test results, invoices, portal sign-in links). Privacy Policy
- Google Calendar — for online classes, we send calendar invitations that include the student's name and email address, and a video-call link. Privacy Policy
- e-boekhouden — our accounting system, used to issue and record invoices (includes payer and billing details). Privacy Policy
- Cloudflare Turnstile — spam and bot protection on our forms; processes limited technical data (such as your IP address) to confirm you are human, sets no cookies, and is not used for advertising. Privacy Policy
- Render — our website and database hosting, located in the European Union (Frankfurt, Germany). Privacy Policy
We do not sell your personal data or share it for others' marketing.
International Transfers
Our website and database are hosted within the European Union (Frankfurt, Germany). Some of the service providers above — in particular Google, Cloudflare and Ahrefs — are based in, or store your data in, the United States, so some data may be transferred outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and/or the provider's certification under the EU–US Data Privacy Framework.
Your Rights Under GDPR
You have the right to: access the personal data we hold about you; rectify inaccurate or incomplete data; erase your data ("right to be forgotten"); restrict or object to processing; receive your data in a portable format; and withdraw consent at any time (for analytics, clear your browser's localStorage and reload; for marketing emails, contact us). You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise any of these rights, email us at info@spanishplanetschool.com and we will respond within one month.
Security
We take reasonable measures to protect your data from unauthorised access, disclosure, alteration, or destruction: all traffic uses HTTPS encryption, passwords are stored only as secure hashes, and access to student records is limited to authorised staff.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.
Contact Us
If you have any questions about this privacy policy or wish to exercise your data rights, contact us at info@spanishplanetschool.com.
