Privacy policy
Speakeasy is committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth therein, as well as the implementation of the security measures stipulated in the General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April, and in Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).
In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through contact forms or by sending emails, and that this data will be processed by “SPEAKEASY”, the data controller, whose details are as follows:
Company Name: CAROLINE ANNE RENNIE
Trade Name: SPEAKEASY
Tax ID: X2858721M
Registered Address: C/Santo Domingo 6 Palma de Mallorca
Telephone: +34 971 227 603
Email: info@speakeasyidiomas.es
Collection and Processing of Personal Data
Personal data is any information relating to an individual: name, email address, home address, telephone number, tax identification number (NIF/NIE), etc. Additionally, when a user visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their internet service provider.
SPEAKEASY, as the Data Controller, is obligated to inform users of its website about the collection of personal data that may occur, whether through email or by completing the forms included on the website.
Only the data necessary to provide the contracted service or to adequately respond to the user’s request for information will be collected. The data collected is identifying information and corresponds to the minimum reasonably required to carry out the activity. Specifically, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.
Contact Forms/Email
Purpose: To respond to your information request submitted through our contact form(s).
Legal Basis: The legal basis for this processing is the user’s consent, which may be withdrawn at any time.
Data Transfer: Personal data will be processed on servers managed by OVH, which will act as Data Processors.
Minors
Only individuals aged 14 and over may provide personal data on this website. In accordance with the Spanish Data Protection Act (LOPD) and the General Data Protection Regulation (GDPR), parental or guardian consent is mandatory for us to process the personal data of individuals under 14 years of age.
Furthermore, only individuals aged 18 and over may contract our services. Individuals under 18 years of age must have parental or legal guardian consent for us to provide the services offered, unless the minor is emancipated.
Security Measures
Users of the “SPEAKEASY” website are hereby informed that all available technical and organizational security measures have been adopted to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thereby guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected in the forms is processed solely by “SPEAKEASY” personnel or designated Data Processors.
The “SPEAKEASY” website also uses SSL encryption, which allows users to securely send their personal data through the website’s contact or registration forms.
Data Accuracy
Users declare that all data provided is true and correct and agree to keep it updated. The User is responsible for the accuracy of their data and will be solely liable for any disputes or litigation that may arise from its falsity. It is important that, in order for us to keep personal data up to date, the User informs “SPEAKEASY” whenever there is any change to it.
Data Transfer
“SPEAKEASY” will not transfer or disclose your data to any third party, except in cases legally required or when strictly necessary for the provision of a service. Specifically, data may be transferred to:
Technology or IT service providers
Payment service providers
Courier and parcel delivery companies
Third parties or intermediaries, acting as service providers, operating on our behalf (administrative services, consulting, etc.).
The strictest confidentiality will be maintained, employing the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies established on their respective websites. Users may refuse the transfer of their data to Data Processors by submitting a written request through any of the aforementioned means.
Furthermore, where necessary, customer data may be transferred to certain organizations in compliance with a legal obligation: the Spanish Tax Agency, the Labor Inspectorate, etc.
Exercising User Rights
The Spanish Data Protection Act (LOPD) and the General Data Protection Regulation (GDPR) grant data subjects the right to exercise a series of rights related to the processing of their personal data. To do so, users must submit a request, along with documentation proving their identity (national identity card or passport), by email to info@speakeasyidiomas.es or by written communication to the address provided in our Legal Notice. This communication must include the following information: the user’s full name, the purpose of the request, their address, and supporting documentation.
The exercise of rights must be carried out by the User themselves. However, they may be exercised by an authorized person acting as the User’s legal representative, provided that documentation proving such representation is submitted.
The User may request to exercise the following rights:
Right to request access to personal data, which is the right to obtain information about whether their personal data is being processed, the purpose of the processing, if any, as well as information available about the origin of said data and any communications made or planned regarding it.
Right to request rectification, if the personal data is incorrect or inaccurate, or erasure of data that is inadequate or excessive.
Right to request restriction of processing, in which case “SPEAKEASY” will only retain the data strictly necessary for the establishment, exercise, or defense of legal claims.
Right to object to processing: This refers to the data subject’s right to object to the processing of their personal data or to have such processing cease in cases where their consent is not required for processing, where the data is used for commercial prospecting, or where the purpose is to make decisions concerning the data subject based solely on automated processing of their data, unless there are legitimate grounds for the processing or for the establishment, exercise, or defense of legal claims.
Right to data portability: If you wish your data to be processed by another company, SPEAKEASY will facilitate the transfer of your data in an exportable format.
If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
We are committed to fulfilling all these rights within the maximum legal timeframe (1 month).
If a User believes there is a problem with how “SPEAKEASY” is handling their data, they can address their complaints to the Security Officer or the relevant data protection authority, which in the case of Spain is the Spanish Data Protection Agency (AEPD).
Data Retention
The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the information request, or until the consent granted is revoked.
Customer personal data will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary, and may be kept for up to:
4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding registration, commencement of employment, termination of employment, social security contributions, payment of wages, etc.); Articles 66 et seq. General Tax Law (accounting records, etc.)
5 years: Art. 1964 Civil Code (personal actions without a specific limitation period)
6 years: Art. 30 Commercial Code (accounting records, invoices, etc.)
10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorist Financing.
No time limit: disaggregated and anonymized data.
For their part, the data of Users who subscribe to the newsletter will be kept indefinitely, until the consent granted is revoked.
In the case of processing candidate data (CVs), “SPEAKEASY” may keep your CV stored for a maximum of two years to include it in future job openings, unless the candidate requests otherwise.
Social Networks
“SPEAKEASY” maintains a profile on some of the main social networks on the Internet, and in all cases acknowledges its responsibility for processing the data of its followers, fans, subscribers, commenters, and other User profiles (hereinafter, followers) published by “SPEAKEASY”.
The purpose of data processing by “SPEAKEASY”, when not prohibited by law, will be to inform its followers about its activities and offers, through any means permitted by the social network, as well as to provide personalized customer service. The legal basis for this processing is the consent of the data subject, which may be revoked at any time.
Under no circumstances will “SPEAKEASY” extract data from social networks unless the User’s explicit and specific consent is obtained for this purpose (for example, for the purpose of holding a contest).
Personnel Selection
Applicants who send electronic communications to “SPEAKEASY” for the purpose of participating in the company’s personnel selection processes authorize us to analyze the documents they submit (e.g., their CV), all content directly accessible through internet search engines (e.g., Google), their profiles on professional social networks (e.g., LinkedIn), the data obtained from entrance exams, and the information they disclose during the job interview, in order to evaluate their candidacy and, if applicable, offer them a job. If the candidate is not selected, “SPEAKEASY” may store their CV for a maximum of two years for consideration in future job openings, unless the candidate objects. The legal basis for this processing is the applicant’s consent, which they may revoke at any time.
Confidentiality
The information provided by the User will, in all cases, be considered confidential and may not be used for any purpose other than those described herein. “SPEAKEASY” undertakes not to disclose or reveal any information regarding the User’s requests, the reasons for the requested advice, or the duration of their relationship.
Validity
This privacy and data protection policy was drafted on November 5, 2025. It may change depending on regulatory and jurisprudential changes, and it is the responsibility of the data subject to read the updated document to understand their rights and obligations at any given time.