Privacy Policy

 

Last updated: April 20, 2026

1. Data Controller

Data Controller: Patricia Eugenia Vera Hernández and Francisco Javier García Méndez (Home Family Language)

Contact email: info@homefamilylanguage.com

Address: Calle Bélgica, n.1 38530 Candelaria Tenerife, Canary Islands, Spain

2. Personal data we collect

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you that the personal data you provide us through the contact form or by any other means will be processed in accordance with this Privacy Policy.

The data we may collect includes: first and last name, email address, phone number, country of residence, and any other information you voluntarily provide us in the body of your message. In the case of minors, we may additionally collect health data (specially protected data) with the express consent of the legal guardians.

3. Purpose of processing

• Management of inquiries, requests for information, and program reservations.
• Communication with legal guardians during the program.
• Handling of medical emergencies of the minor (health data).
• Sending information about the program when the data subject has requested it.
• Compliance with legal obligations.

4. Legal basis for processing

The legal basis for processing is the performance of a pre-contractual or contractual relationship at the request of the data subject (Art. 6.1.b GDPR), compliance with legal obligations (Art. 6.1.c GDPR), and the explicit consent of the data subject for sending informative communications (Art. 6.1.a GDPR). For the processing of minors' health data, the legal basis is the explicit consent of the legal guardians (Art. 9.2.a GDPR).

5. Data retention

Personal data will be kept for the time necessary to provide the service and, subsequently, for the time necessary to comply with applicable legal obligations and the statutes of limitations for legal actions (maximum 6 years for commercial obligations in Spain).

6. Recipients

Data will not be transferred to third parties, except: (a) legal obligation; (b) need for urgent medical attention for the minor; (c) technical service providers (hosting, email, CRM) who act as data processors under contract and offer adequate guarantees of GDPR compliance.

7. International transfers

If using digital tools whose servers are located outside the European Economic Area (e.g., Google Workspace, Meta Platforms), such transfers are covered by the appropriate safeguards established in the GDPR (Standard Contractual Clauses or adequacy decisions of the European Commission).

8. Rights of data subjects

You may exercise the following rights at any time by sending a written request to info@homefamilylanguage.com, indicating the right you wish to exercise and attaching a copy of your identity document:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten").
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Furthermore, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your data does not comply with the GDPR: www.aepd.es

9. Minors

The service provided by Home Family Language is aimed at young people, including minors between 12 and 17 years old, with the legal guardians being responsible for providing the necessary information and giving explicit consent for the processing of the minor's data. We do not collect data from minors directly or through the web form without the mediation of a responsible adult.

10. Security

We apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including the use of encrypted connections (HTTPS), restricted access to data, and training for personnel involved in processing.