Not all information is processed in the same way. This policy distinguishes what happens when you visit the website or contact KinderTIC from the processing carried out within the platform on behalf of your setting or management organisation.
Who controls data on this website?
The data controller for processing associated with this website, commercial enquiries and direct relationships with KinderTIC is KINDERTIC, S.L., with Spanish tax identification number B65906257 and registered office at Plaça de Julio González 3-4, third floor, door 2, 08005 Barcelona, Spain.
You can contact us or exercise your rights by emailing info@kindertic.com, using “Data protection” as the subject, or by post to the address above. This is the contact channel for any privacy-related matter.
Two environments, two different roles
When you visit the public website, request information or a demonstration, or maintain a professional or contractual relationship with us, KinderTIC determines the purposes and means of processing and acts as the data controller.
When you access the private educational platform, the educational setting, local authority or management organisation decides why information is used and who may access it. In this context, KinderTIC normally acts as a data processor and processes information only in accordance with the controller’s documented instructions and the applicable agreement.
Public links for admissions, pre-enrolment or other processes provided by an educational setting, local authority or management organisation also form part of the contracted educational service, even when accessed before signing in. The setting, authority or organisation running the process remains the controller; KinderTIC provides the technology on its behalf.
If your question concerns information on the platform,please contact your setting’s leadership or management organisation first. KinderTIC will help them respond.
What information may we process?
Depending on your relationship with us, we may process identification and contact details; professional and organisational information; contractual, administrative or billing data; enquiry content; communication preferences; and technical information such as your IP address, device, browser, access date and time, or security logs.
Information comes directly from you, the setting or organisation you work with, the contractual relationship or, when browsing, your device and authorised technologies. We request only information that is appropriate and necessary for each purpose.
We indicate when particular information is essential to respond to a request, prepare a proposal or provide a service. If it is not supplied, we may be unable to address the request properly or establish the relevant relationship.
Why do we process information, and for how long?
The legal basis and retention period depend on the relationship and the specific purpose. Once information is no longer needed, it is deleted or restricted for any period during which legal liability may still arise.
Enquiries and demonstration requests
- Purpose
- Respond, prepare a proposal and provide any follow-up you have requested.
- Legal basis
- Pre-contractual steps when you request information, a proposal or a demonstration, and our legitimate interest in responding to other enquiries about KinderTIC.
- Retention period
- Until your request is resolved and, where applicable, for as long as needed to address potential legal liabilities.
Clients, suppliers and professional contacts
- Purpose
- Manage the relationship, service delivery, support, invoicing and administrative obligations.
- Legal basis
- Performance of a contract, legal obligations and our legitimate interest in managing relationships with relevant contacts.
- Retention period
- Throughout the relationship and afterwards for the applicable statutory retention periods.
Communications about KinderTIC
- Purpose
- Send information about our services when you have requested it or when legally permitted.
- Legal basis
- Consent or legitimate interest where permitted under legislation governing commercial communications.
- Retention period
- Until you withdraw consent, object or the legal basis no longer applies.
Website and sign-in security
- Purpose
- Prevent misuse, detect incidents, protect accounts and maintain technical evidence.
- Legal basis
- Our legitimate interest in protecting the service, users and information, together with applicable legal security obligations.
- Retention period
- For a limited and proportionate period; longer only where necessary to investigate or document an incident.
Job applications received
- Purpose
- Assess an application for current recruitment processes or, with your permission, future opportunities.
- Legal basis
- Pre-contractual measures and consent to retain information for future opportunities.
- Retention period
- For the duration of the recruitment process and, with permission, for up to one year for future opportunities.
KinderTIC does not use data collected through this website for solely automated decisions that produce legal effects or similarly significant consequences for you.
Third-party data and children’s information
If you provide another person’s information, you must have a lawful basis to do so and inform them about this policy. Do not submit sensitive information, children’s records or details unnecessary for your enquiry through the public website.
The corporate website is intended for adults and education professionals, and its commercial forms are not designed to collect children’s information. Admissions, enrolment and other forms provided by an educational setting are a separate service: information is collected on behalf of the setting, local authority or responsible organisation and in accordance with the privacy information provided for each process.
Who can access your information?
We do not sell personal information. Information may be accessed by authorised KinderTIC personnel and providers needed for website hosting and infrastructure, email and communications —including Google Workspace/Gmail—, form protection —Google reCAPTCHA—, support, administration or professional advice.
These providers operate under appropriate contracts, instructions, confidentiality obligations and safeguards. We may also disclose information to public authorities, courts, law-enforcement bodies or other authorities where required by law or a valid official request.
International transfers
Some third-party technology services may involve data being processed in, or accessed from, countries outside the European Economic Area. Where an international transfer occurs, a mechanism recognised by the GDPR will be used, such as an adequacy decision, standard contractual clauses or another valid safeguard, together with any necessary additional measures.
You can request information about the safeguards applying to a specific transfer by contacting info@kindertic.com.
You stay in control
Where KinderTIC acts as the data controller, you may exercise your rights of access, rectification, erasure, objection, restriction and portability where applicable. You may also withdraw consent at any time without affecting the lawfulness of prior processing.
Understand what information we hold and how we use it.
Correct inaccurate or incomplete information.
Request deletion where applicable.
Object to certain processing activities.
Temporarily restrict the use of your information.
Receive or transfer your data where legally applicable.
Send your request to info@kindertic.com, specifying the right you wish to exercise and the information needed to identify the relationship concerned. We will request additional identification only where there are reasonable doubts about your identity. We generally respond within one month; this period may be extended by two further months for complex or numerous requests, and you will be informed of any extension.
If you believe your information is being processed unlawfully, you may lodge a complaint with theSpanish Data Protection Agency.
When information is held within the platform
The educational setting, local authority or management organisation determines the processing purposes, authorised roles, retention periods and information entered into KinderTIC. It is therefore also the primary contact for exercising rights concerning data about children, families, professionals or other platform users.
For admissions, eligibility assessments, place allocation, enrolment, renewals and the management of permissions or consent, the controller determines what information is requested, the purpose and legal basis, retention periods and authorised users. Each form or process must identify the controller and provide the relevant privacy information before collecting personal data.
If a family starts an application through a public link provided by its educational setting and later signs in to complete enrolment, the information remains subject to the same processing agreement and the controller’s instructions. KinderTIC does not use it for advertising, profiling or its own commercial purposes.
Depending on the modules enabled and the information the controller chooses to enter, the platform may contain identification and contact details; educational and family information; employment and management data; financial or banking information; images, videos and documents; and, where needed to support a child, health information or other special-category data. KinderTIC does not decide which information is entered or why; that is determined by the responsible setting or organisation.
KinderTIC provides the service as a data processor under Article 28 of the GDPR: it processes data in accordance with documented instructions, applies security measures, imposes obligations on subprocessors, assists the controller with individual rights and incidents and, when the service ends, follows contractual provisions on return, restricted retention or deletion.
Risk-based security
KinderTIC applies technical and organisational measures proportionate to the risk to protect the confidentiality, integrity, availability and resilience of information. Depending on the context, these measures include access controls and permissions, traceability, backups, maintenance, vulnerability and incident management, staff confidentiality and supplier oversight.
No system can guarantee zero risk. If a security breach occurs, KinderTIC will activate its response procedures and, when acting as a processor, notify the controller without undue delay so it can fulfil its obligations. When acting as a controller, KinderTIC will assess and make any notifications required by law.
Cookies, reCAPTCHA and third-party services
The current website does not have analytics, advertising or profiling cookies configured. It only uses technologies required to protect sign-in, contact and demonstration forms and private sessions. Details, activation times and management options are available in the Cookie policy.
KinderTIC uses Google reCAPTCHA to protect sign-in, contact and demonstration forms from automated misuse. For security purposes, this service may process technical information such as your IP address, device, browser and interaction signals. The provider’s processing is also governed by its Google Privacy Policy.
Social media links and profiles lead to environments operated by third parties under their own policies. Including a link does not make KinderTIC responsible for processing carried out independently by those third parties for their own purposes.
Updates and contact
We may update this policy to reflect legislative changes, regulatory guidance, new processing activities or service developments. The current version is published on this page together with the date it was last updated.
If a change is significant for the people concerned, we will communicate it through the website, the platform, email or another appropriate channel. For questions, incidents or privacy rights requests, contact info@kindertic.com.
Legal framework