Privacy policy

Introduction

The protection of personal data is one of the core values of KIDS&US ENGLISH, S.L. and its schools (“Kids&Us”). Compliance with the provisions of both Regulation (EU) 2016/679 of 27 April 2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data (“GDPR”), as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”) and any other implementing regulations, is a priority for us.

In this policy, we inform you of how we will process the personal data you provide to us when you register to obtain the official Trinity College London certification.

Data controller

Personal data processed as part of the certification service is managed by KIDS&US ENGLISH, S.L., with tax identification number (CIF) B-64622087 and registered office at Avinguda Tudela, 12, 08242 Manresa (Barcelona). You can contact the Data Protection Officer via the email address [email protected].

Purposes of processing and legal basis

Kids&Us processes the personal data provided via the website for the purposes set out below, with the legal basis for each processing operation and the specified retention period:

Recipients of the data

Your data will not be sold, rented, or made available to third parties. In certain cases, access to your data will be granted to specific suppliers who provide services to our company; they will process the data on behalf of and in accordance with the instructions of Kids&Us.

However, in accordance with the provisions of the section “Purposes of processing and legal basis” in the context of the provision of the Service, the personal data of the person processing the registration, as well as the students’ identification details, will be disclosed to Trinity College London, which acts as an independent data controller for the purpose of managing the registrations of all students. Once the exam has been taken, Kids&Us will provide Trinity College London with the personal data of all those who have passed it, so that the official Trinity certificate can be issued to the relevant individuals.

Trinity College London will process personal data for its own purposes and in accordance with its privacy policy, available at https://www.trinitycollege.com/page/data-protection; it may contact the students or the person completing the registration for any enquiries relating to the certificate. Furthermore, Trinity College London may carry out statistical, educational and regulatory monitoring of the results.

Automated decisions

Kids&Us does not make decisions based solely on the automated processing of your data, including profiling, which produce legal effects concerning you or similarly significantly affect you.

International transfers

Personal data may be processed outside the European Union (EU) or the European Economic Area (EEA). Where data is processed outside the EU or the EEA, Kids&Us will ensure that this cross-border data processing is protected by appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission. These standardised clauses provide sufficient safeguards to ensure that the adequacy and security requirements set out in the General Data Protection Regulation are met; or
• Certifications demonstrating that third parties located outside the EEA process personal data in a manner consistent with the General Data Protection Regulation. These certifications are approved either by the European Commission, by a competent supervisory authority, or by a competent national accreditation body in accordance with the General Data Protection Regulation.

The disclosure of data to Trinity College London involves an international transfer of personal data to the United Kingdom. This transfer is covered by Commission Implementing Decision (EU) 2021/1772 of 28 June 2021, on the adequacy of the level of protection of personal data ensured by the United Kingdom, as amended and extended by Implementing Decision (EU) 2025/2574 of 19 December 2025, which recognises an adequate level of protection.

Retention periods

Personal data will be processed for as long as is necessary to obtain the relevant certification, that is, until the qualification is awarded by Trinity College London. Furthermore, it will be retained for as long as there is any legal obligation requiring us to do so, such as obligations arising from consumer legislation applicable to the contract, the retention of commercial documentation relating to the details of the service and, where applicable, the invoice issued, or even to comply with the provisions of the Criminal Code.

Once the above time limits have expired, the data may be retained in a restricted manner and made available to judges, courts or competent authorities for the duration of the limitation periods for any legal actions that may apply in each case.

Notwithstanding these time limits, your data may be used anonymously for statistical or market research purposes, wherever possible.

Minors

Kids&Us students are minors; therefore, their personal data will generally be provided by their parent or legal guardian, and the email address of the parent or legal guardian will be used for this purpose. In accordance with the applicable data protection regulations, where processing is based on consent, consent from minors who have not reached the minimum age established by the applicable legislation in their country of residence will only be lawful if it is provided by the holder of parental authority or guardianship; from that age onwards, the minor may give consent themselves, except in cases where the law requires the assistance of such holders. In Spain, this age is currently fourteen years (Article 7 of the LOPDGDD), subject to any legislative amendments that may raise it. Consequently, where applicable, the sending of commercial communications to minors will require the consent of their parent or legal guardian.

Exercising your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, free of charge, and may withdraw any consent you have given at any time by contacting Kids&Us via email at [email protected], quoting the reference “Data Protection – Trinity” in the subject line.

You also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence if you consider that your data has not been processed correctly. You can consult the list of supervisory authorities in the European Economic Area at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. In Spain, this authority is the Spanish Data Protection Agency (www.aepd.es). Where the data subject is a minor, the above rights may be exercised on their behalf by their father, mother, or legal guardian.