Data controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), users are informed that personal data collected through this website will be processed by: Controller: ESCUELA SUPERIOR DEL ACEITE DE OLIVA, SOCIEDAD LIMITADA

• Tax ID (NIF): B22584262
• Address: C/ San Rafael, 1. Bajo K. 46011 Valencia, Spain
• Email: info@esao.es

ESAO, certified under ISO 9001, ensures quality, transparency, and continuous improvement in the processing of personal data of its students and users.

Purpose of processing

Personal data may be collected for the following purposes:

• Managing information and contact requests.
• Processing enrolments and payments for educational programs.
• Sending informational or promotional communications related to ESAO’s activities (only with prior consent).
• Complying with legal and administrative obligations arising from contractual or educational relationships.

Legal basis

The processing of data is based on:

• The performance of a contract or request for educational services.
• The consent of the data subject (for informational or promotional communications).
• Compliance with legal obligations.

Data retention

Data will be kept for as long as a contractual or educational relationship exists with ESAO, and thereafter for the time required by law or until the data subject requests its deletion.

Data disclosure and processors

Data will not be shared with third parties except where legally required or with service providers acting as data processors, such as communication or academic management platforms, all of which are bound by confidentiality and GDPR compliance agreements.

User rights

Users may exercise their rights of access, rectification, erasure, objection, restriction, and data portability by emailing info@esao.es and attaching a valid proof of identity. They may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe their rights have not been properly addressed.

Data security

ESAO applies appropriate technical and organizational measures to ensure the security of personal data and to prevent its loss, misuse, unauthorized access, or alteration.