Privacy Policy
1. Who is the Data Controller?
ESDESIGN, S.L. (hereinafter “ESDESIGN”), with tax identification number (CIF) B67614560, shall be the data controller for the personal data you provide us by filling out any of our forms in paper or electronic format, as well as for the data obtained as a result of the formalization of your enrollment in any of our courses and the relationship derived from said enrollment. The company is located at Av Diagonal, 662-664, 08034 Barcelona, and you may contact them via the email address [email protected].
You can contact our Data Protection Officer by writing to [email protected] or to Grupo Planeta,
At.: Delegada de Protección de Datos
Avda. Diagonal 662-664
08034 - Barcelona
2. From which sources do your data originate?
Enrollment of a student in a Program.
Contact requests, including requests for information about Programs and services provided.
The creation of a Commercial Profile.
Through the various forms available on the websites.
Your newsletter subscription.
Information provided by telephone, postal mail, email, or through one of our paper forms.
During forums, masterclasses, and fairs, via computerized or paper forms completed by a potential client or a student.
The execution of the relationship we maintain with you.
Data provided by companies where you may undertake curricular or extracurricular internships.
In the event that the company you work for has contracted the Program in which you are enrolled, said company may have provided us with certain personal data relating to you, such as contact and identification details.
If you are a minor, it is possible that your father, mother, or legal guardian has provided us with certain personal data relating to you, such as identification or contact details.
In relation to higher education courses, we obtain certain personal data from the Department of Education for the purpose of managing the allocation of places based on cut-off marks. The categories of said data are: contact details, identification details, and academic data.
Regarding the obtainment of scholarships, grants, or financing, and in relation to the legal guardian and/or parents, the student may have provided us with certain personal data for the purpose of evaluating the allocation of such scholarships, grants, or financing. The categories of said data are: contact details, identification details, and financial data.
The use of our website.
ESDESIGN may collect your data directly or indirectly through other entities of the Planeta Group.
The provision of data marked with an asterisk in the registration form is necessary for the contracting of training services and the fulfillment of legal obligations. Consequently, if such data is not provided, the enrollment in your selected Program cannot be formalized, and therefore, you will not be able to access our training services.
3. What categories of personal data do we process?
Identification data: surnames, first names, nationality, telephone number, email address, postal address, date of birth, country of residence, identity document, and visa application if applicable.
Professional data: level of education and field of initial training, diplomas obtained, professional experience, and the addresses of the various employers where said professional experience was acquired, as well as data regarding your skills and interests.
Financial data: including bank details, relating to the payment of tuition fees and scholarship applications, or financing agreements for ongoing training.
Data relating to comments/questions: collected during the pre-contractual or contractual relationship.
Connection data: IP address, technical, and location information generated in connection with the use of our websites and applications.
Cookies: for more information, please see our Cookie Policy.
3.1. Special categories of personal data
Special categories of personal data (hereinafter, "sensitive data") are those personal data that may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning health, or data concerning a natural person's sex life or sexual orientation.
ESDESIGN will only process sensitive data in accordance with data protection laws and provided it has a valid legal basis to do so, and under very limited circumstance, for example, to identify specific needs in order to adapt the learning environment to those needs.
4. For what purposes do we process your personal data? What legitimizes us to process them? And for how long will we keep your data?
ESDESIGN, S.L. may process your personal data for the following purposes:
| Data Treatment | Function | Legal basis | Storage period |
|---|---|---|---|
| Information request | To manage your request for information regarding the selected training program. | Consent | Your data will be deleted once said information has been provided and/or after two enrollment cycles have passed. |
| To create a profile based on the information provided both during registration and website browsing, in order to target advertising and improve the quality of the management and enrollment process. | Legitimate interest For further information regarding legitimate interest, you may refer to the corresponding section of this privacy policy. | ||
| Enrollment and completion of the Programme |
| Contractual relationship | We will process your data until the end of the contractual relationship. |
| Exception under Article 21 of the Law on Information Society Services and Electronic Commerce (LSSI-CE). | We will process your data until you object to the processing. | |
| Recording of asynchronous classes | To the extent that online classes taught within the framework of the Programme in which you are enrolled may be recorded so that they can be viewed at a later time, we may process your image or voice should you participate and/or intervene in any of said classes. | Legitimate interest For further information regarding legitimate interest, you may refer to the corresponding section of this privacy policy. | We will process your data until the end of the contractual relationship. |
| Scholarship, financial aid, or funding requests | To apply for a scholarship, financial aid, or funding to cover the payment of the Programme in which you enroll, we will process your personal data to manage your request and the corresponding scholarship, financial aid, or funding. | Contractual relationship | We will process your data until the end of the contractual relationship. |
| Alumni Club | Alumni Club, we will process your personal data to manage your registration and subsequent participation in it, in accordance with the corresponding terms of participation. Within the framework of said club, we may send you information regarding activities and benefits that you may enjoy as a member, as well as information related to the educational sector. Alumni Club, we will process your personal data to manage your registration and subsequent participation in it, in accordance with the corresponding terms of participation. Within the framework of said club, we may send you information regarding activities and benefits that you may enjoy as a member, as well as information related to the educational sector. Alumni Club, we will process your personal data to manage your registration and subsequent participation in it, in accordance with the corresponding terms of participation. Within the framework of said club, we may send you information regarding activities and benefits that you may enjoy as a member, as well as information related to the educational sector. Alumni Club, we will process your personal data to manage your registration and subsequent participation in it, in accordance with the corresponding terms of participation. Within the framework of said club, we may send you information regarding activities and benefits that you may enjoy as a member, as well as information related to the educational sector. | Consent | We will process your data for as long as you maintain your status as a member of the aforementioned club. |
| Events | To process your personal data, including your image and voice, which may be captured as a result of your participation in a specific event. | Consent | As long as you do not revoke said consent or exercise your rights to erasure and to object to the processing of your data. |
| Commercial surveys | To send you and manage your participation in commercial surveys, for the purposes of understanding your opinion and educational preferences and, based on these, recommending that you undertake another of our training programmes and/or programmes from other training centres unaffiliated with us. | Consent | As long as you do not revoke said consent or exercise your rights to erasure and to object to the processing of your data. |
| Encuestas de empleabilidad | Depending on the Programme in which you are enrolled, to send you and manage your participation in employability surveys, for the purposes of monitoring the job market integration of graduates. | Compliance with legal obligations derived from education regulations, specifically, Law 15/2015, of July 21, on the Agency for the Quality of the University System in Catalonia (AQU Catalunya). | We will process your data for the time necessary to carry out the survey, or until you object to the processing or we anonymize your data. |
| Quality or satisfaction surveys | In light of our legitimate interest in understanding the satisfaction of our clients or users regarding our products, services, and the teaching assistance provided, we may process your personal data to conduct or send you satisfaction or quality surveys. This also benefits you, as it allows us to learn your opinion and evaluate the quality of our products, services, and/or assistance, as well as to identify areas for improvement, strengths, and to understand the needs and expectations of our clients. | Interés Legítimo For further information regarding legitimate interest, you may refer to the corresponding section of this privacy policy. | We will process your data for the time necessary to carry out the quality or satisfaction survey, or until you object to the processing or we anonymize your data. |
| Prize Draws and Competitions | In the event that you participate in a prize draw or competition organized by ESDESIGN, your data will be processed to manage your participation and, if you are the winner, to deliver the prize and, where appropriate, manage the publication of your identifying data through various media such as the ESDESIGN website. For each prize draw or competition in which you participate, the legal terms and conditions will be available, providing you with more detailed information regarding the processing of your data. | Contractual relationship arising from the performance of the legal terms and conditions of the prize draw or competition. | We will retain your data until the conclusion of the prize draw, once the corresponding prize has been delivered, as well as subsequently for the period during which any type of liability may arise. |
| Sending of our own and third-party commercial communications | In the event that you provide us with your consent, we may send you personalized commercial communications regarding our products and/or services, or those of third-party collaborating companies, which may include the following sectors: publishing, training, culture, leisure, collectibles, textiles, private insurance, consumer goods, jewelry, telecommunications, banking and finance, travel, technology, and legal activities. Furthermore, there are certain social networks, applications, or third-party websites that allow for the sending of commercial communications or advertising impacts to specific or designated users. With this information, the social network or application verifies whether the user has an account on its platform, allowing ESDESIGN to create what is known as a "Custom Audience o personalized audience" with those users who have accepted the receipt of commercial communications in accordance with the provisions previously stated in this policy, and who also have an account on said social network or application, thereby enabling the display of advertising directly within them. This type of activity may be carried out across various media, notably social networks such as: Facebook (Custom audience), Twitter (Tailored audiences) o Google (Customer Match) https://business.safety.google/privacy/. | Consent | We will process your data until you unsubscribe or revoke your consent. |
| Disclosure of data to Grupo Planeta companies for the sending of commercial communications | Furthermore, you may provide your consent via the checkbox enabled for this purpose so that we may disclose your personal data to Grupo Planeta companies, enabling them to send you personalized commercial communications regarding their own products and/or services. The sectors in which Grupo Planeta companies operate include the following: publishing, training, culture, leisure, collectibles, textiles, private insurance, consumer goods, jewelry, telecommunications, banking and finance, travel, technology, and legal activities.. | Consent | We will process your data until you unsubscribe or revoke your consent. |
| Contact | We may process your data in the event that you contact us through the various channels established for this purpose to manage your questions, enquiries, and/or claims. | Consent | Until your enquiry, request and/or claim has been resolved. |
| Fraud prevention and management | Upon payment, we may process your data to monitor for potential fraudulent transactions, which may involve the communication of data to expert providers in fraud prevention and management, in accordance with the provisions of the section “To which recipients will your data be communicated?” | Interés legitimo For further information regarding legitimate interest, please refer to the corresponding section of this privacy policy. | Your data will be processed for as long as necessary to prevent and manage potential fraudulent transactions, or until you object to the processing. |
| Cookies | We may obtain information about you through cookies | Consent (with the exception of strictly necessary Cookies). | They may last for a duration of up to 2 years (in any case, please review the information provided in our Cookie Manager). |
| Publicidad en redes sociales o servicios de terceros | There are certain social networks, applications, or third-party websites that allow for the sending of commercial communications or advertising impacts to specific or determined users. This type of activity can be carried out across various media, notably on social networks such as These social networks or applications allow for the sharing of user data to find or identify what are known as "lookalike audiences"; that is, users who have a similar profile to yours on said social network or application, but who are not ESDESIGN users This type of activity is typically carried out through social networks such as Facebook (Lookalike audiences), Twitter (Tailored audiences), or Google (Similar Audiences). In this case, as advertising does not directly impact our own users, the basic data of all users is utilised—including those who have not consented to receiving commercial communications. Regarding the data provided to such third parties, we consider it relevant for our users to know that only your email address or telephone number will be shared Please note that if you do not wish to receive advertising through social networks or third-party platforms, you must restrict this through your own user profile, in accordance with the privacy policies established by each platform. These social networks and/or applications will only provide us with your data in an anonymised and statistical format; we will not be able to re-identify you or learn about new interests unless you interact with us through one of our advertisements on said social network and/or application. | Legitimate Interest For further information regarding legitimate interest, please refer to the corresponding section of this privacy policy. | Your data will be processed for as long as you have consented to receive commercial communications or until you object to the processing. |
| Video surveillance | Video surveillance to ensure the security of users and premises for personal data processing activities, with the primary purpose of capturing and/or processing images for surveillance purposes. | Legitimate interest For further information regarding legitimate interest, please refer to the corresponding section of this privacy policy. | 1 month |
5. Treatments based on compliance with legal obligations
Additionally to the processing activities specified in the table above, ESDESIGN, S.L. will need to process the user's personal data to comply with various accounting, legal, fiscal, and administrative legal obligations that may be required at any given time. We refer, primarily and among others, to those provided for in the following regulations:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").
Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD"), which obliges ESDESIGN, S.L., as the entity legally responsible for the processing of your personal data, to address requests, the exercise of rights, and claims submitted regarding data protection.
Should we be requested by any Court or Tribunal, the State Security Forces and Bodies, or any other competent Authority or Public Administration, we may also be required to provide your personal data, as we are legally obliged to do so.
Royal Legislative Decree 1/2007 of 16 November, approving the revised text of the General Law for the Defence of Consumers and Users and other complementary laws, to address requests, the exercise of rights, and claims submitted by you when acting in the capacity of a consumer.
These legal obligations will be fulfilled by ESDESIGN, S.L. for the periods required in each case by the legislation in force.
6. To which recipients will your data be communicated?
Your personal data may be communicated to:
The companies where you undertake your curricular internships, if applicable, as this communication is necessary for the completion of said internships.
External educational centres to which your academic records must be transferred if you choose to complete part of the Programme there, participate in an international training programme, or when you decide to enrol in another training programme and request the transfer of your records.
Organisations or entities that manage grants, aid, or financing that you may apply for to cover the cost of the Programme in which you enrol, as this communication is necessary to manage and process the requested grant, aid, or financing.
The Department of Education and relevant authorities when we are legally required to do so.
Third-party companies in the event that you have provided your consent.
Tutors and/or parents, in the case of minors, or for adults based on their explicit consent, your academic transcript may be shared with them.
In the event that you provide your consent, your personal data and, where applicable, your commercial profile will be communicated to the other companies of Grupo Planeta for the purposes indicated in the section “For what purpose do we process your personal data?” of this privacy policy. You may consult the list of Grupo Planeta companies at the following link:
Furthermore, we inform you that, should there be a legal obligation requiring us to do so, your data will be transferred to the administrations, authorities, public bodies, or Courts and Tribunals specified by the relevant legislation.
Furthermore, we inform you that ESDESIGN contracts various services from third-party providers, who may have access to your personal data for the provision of such services, in which case said providers will always process the data on our behalf, under a data processor agreement, and never for their own interests. Specifically, ESDESIGN, S.L. may contract the provision of services by third-party providers that carry out their activity in, including but not limited to, the following sectors: logistics services, legal advisory, supplier certification, multidisciplinary professional services companies, maintenance-related companies, technology service providers, IT service providers, instant messaging service providers, infrastructure management and maintenance companies.
7. Do we carry out international data transfers?
In the event that you choose to complete part of the Programme at an educational centre located outside the European Economic Area or participate in an international training programme, your data will be subject to international transfers. In such cases, ESDESIGN will adopt the appropriate safeguards to regularise these international transfers.
Likewise, as reported in the previous section, ESDESIGN contracts various services from third-party providers, some of which are located outside the European Union or the European Economic Area; therefore, ESDESIGN has signed with them the corresponding standard clauses authorised by the European Commission and the corresponding additional guarantees, where applicable
8. Do we carry out processing based on legitimate interest?
In accordance with what is indicated in this Privacy Policy, some processing activities may be based on legitimate interest. To assess this legitimate interest, a balancing test has been conducted in which our own benefits as the data controller, as well as the benefits of third parties, have been analyzed, concluding that our legitimate interest in the processing prevails over the interests, rights, and freedoms of users and/or third parties.
You may request further information regarding the balancing of legitimate interest at any time by contacting our Data Protection Officer.
We would also like to take this opportunity to remind you that you have the right to object to processing based on legitimate interest.
9. How long will we keep your data?
All data provided will be processed during the period established in section four of this Privacy Policy (“For what purpose do we process your personal data? what legitimizes us to process them? and how long will we keep your data?”). Notwithstanding, once said periods have ended, your data will be kept duly blocked, preventing their processing except for making the data available to judges and courts, the Public Prosecutor's Office, or the competent Public Administrations, for the enforcement of possible liabilities arising from the processing and only for th
Without prejudice to said periods, whenever possible, your data may be kept in an anonymized manner for statistical or market research purposes
10. What security measures do we apply to protect your data?
We adopt the necessary measures to guarantee that your personal data collected through the website is not lost, consulted, modified, or disclosed by unauthorized third parties.
To this end, we have established technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, alteration, or loss, as well as misuse and unauthorized access, alteration, or disclosure.
Furthermore, organizational measures (such as access authorization management systems, etc.) contribute to preserving the confidentiality of your data. For example, access to your personal data is strictly limited to expressly authorized personnel of ESDESIGN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL and to our partners and subcontractors, who act following our instructions and in accordance with our contractual provisions and applicable legislation.
11. What are the rights granted by the regulations in force?
"Any person has the right to obtain confirmation as to whether or not we at ESDESIGN, S.L. are processing personal data concerning them.
Likewise, interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defense of claims.
At any time, interested parties have the right to withdraw any consent they have given us; this will not prejudice the contractual relationship with ESDESIGN, S.L. nor the legality of what we have carried out up to that point: that is, the withdrawal of your consent does not have retroactive effects, but only applies from that moment forward.
In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. ESDESIGN, S.L. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
Furthermore, interested parties have the right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning them that they have provided to us, and to transmit it to another controller.
In the event that we carry out an automated process, you have the right to contest the decision that has been made, to request the personal intervention of one of our analysts, and to express your point of view so that your request can be re-evaluated. You may carry out the above by sending an email addressed to ESDESIGN.
You may revoke the consent, if provided, as well as exercise your rights of access, rectification, erasure, and portability of your data, and the limitation and objection to its processing before ESDESIGN, S.L. by means of a letter addressed to Apartado de Correos 221, Barcelona, or by sending an email to [email protected].
Likewise, when you consider it appropriate, you may file a complaint with the Spanish Data Protection Agency, especially when you consider that we have not duly satisfied the exercise of your rights.
12. Changes to the Privacy Policy
This policy was last updated on 21/01/2025.
ESDESIGN, S.L. recommends that you review this document each time you access the website in order to be properly informed about the processing of your personal data and to be aware of any changes that may occur.