Privacy Policy

1. Data Controller

The data controller responsible for your personal data is CapiLingua. For any questions regarding this Privacy Policy or our data practices, please contact us using the information provided in Section 11.

2. Information We Collect

We collect only the minimum amount of personal data necessary to provide our services and respond to your inquiries.

2.1 Information You Provide Directly

When you submit our contact form or communicate with us, we may collect: your name, email address, phone number (optional), and any message or inquiry you choose to share with us. This information is provided voluntarily by you.

2.2 Automatically Collected Information

We collect minimal technical information necessary for website functionality, including: IP address (anonymized where possible), browser type and version, device type, and pages visited. This data is collected only through essential cookies required for website operation.

3. How We Use Your Information

We process your personal data only for the following specific, explicit, and legitimate purposes:

• To respond to your inquiries and communicate with you about our language training services;
• To provide information about our programmes and schedule consultations or trial lessons as requested;
• To comply with legal obligations and protect our legal rights.

WE DO NOT USE YOUR DATA FOR MARKETING PURPOSES. We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not use your data for profiling, automated decision-making, or targeted advertising.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a) GDPR): When you submit the contact form, you provide explicit consent for us to process your personal data to respond to your inquiry.
• Legitimate Interests (Article 6(1)(f) GDPR): We have a legitimate interest in maintaining website functionality and security through essential cookies.
• Legal Obligation (Article 6(1)(c) GDPR): We may process your data to comply with applicable legal requirements.

5. Cookies and Tracking Technologies

We use cookies sparingly and transparently:

Essential Cookies

We use only strictly necessary cookies required for website functionality (session management, security). These cookies do not require your consent under GDPR as they are essential for providing the service you requested.

Optional Cookies

We currently do NOT use analytics, marketing, or tracking cookies. We do not use Google Analytics, Facebook Pixel, or similar tracking technologies. Should we introduce such technologies in the future, we will request your explicit consent.

You can manage cookie preferences through your browser settings. Rejecting cookies may limit certain website functionalities.

6. Data Sharing and Disclosure

WE DO NOT SELL, TRADE, OR RENT YOUR PERSONAL DATA TO THIRD PARTIES.

We do not share your personal information except in the following limited circumstances:

• When required by law, regulation, legal process, or governmental request;
• To protect our rights, property, or safety, or that of our users or the public;
• With your explicit consent or at your direction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Contact form submissions are retained for up to 24 months after your last communication with us, after which they are securely deleted. You may request earlier deletion at any time by exercising your rights under Section 8.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access (Article 15): You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data and receive information about our processing activities.
• Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Article 17): You have the right to request deletion of your personal data ('right to be forgotten') under certain circumstances.
• Right to Restriction of Processing (Article 18): You have the right to request that we restrict processing of your personal data under certain conditions.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): You have the right to object to our processing of your personal data on grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption of data in transit, secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated Privacy Policy on this website. The 'Effective Date' at the top of this page indicates when the policy was last revised. Your continued use of the website following the posting of changes constitutes your acceptance of such changes.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us through the contact information provided on our website or via the contact form.