Privacy Policy

In compliance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD, the Spanish organic law on data protection and the guarantee of digital rights), Tribe Family S.L. hereby informs you about the processing of your personal data.

1. Data controller

• Identity: Tribe Family S.L. (International Montessori School Sotogrande)
• Registered address: Edificio Sotocentro, Planta 1, Carretera N-340, km 131, 11310 Sotogrande, San Roque, Cádiz
• Email: [email protected]
• Telephone: 653 04 17 39
• Data Protection Officer (DPO): Luis Miguel Barrientos [email protected]

2. Purposes and legal basis for processing

• Information and admission requests: name, email, telephone, details of the child. Legal basis: consent (art. 6.1.a GDPR) and steps taken prior to entering into a contract (art. 6.1.b).
• Provision of the educational service: academic and health data (allergies, special needs) and data of legal guardians. Legal basis: performance of the contract (art. 6.1.b) and legal obligation (art. 6.1.c).
• Commercial communications: information about programmes and activities. Legal basis: consent (art. 6.1.a). You may withdraw your consent at any time, with no retroactive effect.
• Web analytics: browsing data collected through analytics cookies (prior consent required). Please see our Cookie Policy.

3. Retention period

Data will be kept for as long as the educational or commercial relationship lasts and thereafter for the periods required by law (up to 10 years for accounting records, 6 years for contractual obligations). Data from requests that are not formalised will be deleted within 3 years.

4. Recipients and international transfers

Data will not be disclosed to third parties except where required by law or where necessary for the provision of the service. In the event of transfers outside the European Economic Area (for example Google LLC, which has adhered to the EU-US Data Privacy Framework since July 2023), a level of protection equivalent to the European one is guaranteed in accordance with articles 46-49 of the GDPR.

5. Rights of data subjects

You may exercise the following rights by writing to [email protected]:

• Access (art. 15 GDPR) to find out which data we process
• Rectification (art. 16) to correct inaccurate data
• Erasure / right to be forgotten (art. 17) to request deletion
• Objection (art. 21) to object to processing based on legitimate interest
• Restriction (art. 18) to restrict processing in certain circumstances
• Portability (art. 20) to receive your data in a structured and readable format
• Not to be subject to automated decisions (art. 22) including profiling
• Withdrawal of consent at any time, without affecting processing carried out previously

If you consider that your rights have not been duly attended to, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency): www.aepd.es.

6. Security

Tribe Family S.L. applies appropriate technical and organisational measures in accordance with art. 32 of the GDPR: HTTPS encryption, access control and regular backups.

7. Updates

This policy may be updated. We recommend that you review it periodically. Last updated: May 2026.