Privacy Policy



ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS), as Responsible for the Treatment, informs you that, according to the provisions of Regulation (EU) 2016/679, of April 27, (RGPD) and in L.O. 3/2018, of December 5, of data protection and digital rights guarantee (LOPDGDD), we will treat your data as we reflect in this Privacy Policy.

In this Privacy Policy we describe how we collect your personal data and why we collect them, what we do with them, who we share them with, how we protect them and their options regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you accept the measures of this Policy, you agree that we will treat your personal data as defined in this Policy.



Commercial name: NABSS

CIF: G28631752

Address: C/ FERRAZ, 85, 2008 MADRID

Phone: 915 50 01 02


DPO contact details:


We have always been committed to providing our services with the highest degree of quality, which includes treating your data with security and transparency. Our principles are:

  • Lawfulness: We will only collect your Personal Data for specific, explicit and legitimate purposes.
  • Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.
  • Limitation of the Purpose: We will only collect your personal data for the declared purposes and only according to your wishes.
  • Accuracy: We will keep your personal data accurate and up-to-date, as far as possible.
  • Data Security: We apply technical and organizational measures appropriate and proportional to the risks to ensure that your data does not suffer damage, such as disclosure or unauthorized access, accidental or unlawful destruction or accidental loss or alteration and any other form of illicit treatment.
  • Access and Rectification: We have the means to access or rectify your data when it deems appropriate.
  • Conservation: We keep your personal data in a legal and appropriate manner and only as long as it is necessary for the purposes for which they were collected.
  • International transfers: when it is the case that your data will be transferred outside the EU / EEA, they will be adequately protected. The access and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with adequate contractual guarantees.
  • Direct Marketing and cookies: We comply with the applicable legislation on advertising and cookies.


The types of data that can be requested and processed are:

  • Identification data, personal characteristics and social circumstances.
  • Economic data, if applicable.

We also collect automatically data about your visit to our website as described in the cookie policy.

Whenever we request your personal data, we will inform you with clarity of what personal data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:

  • To answer your questions, through forms posted on our WEB page.
  • In order to serve our clients, we request:
    • If the client is a legal person, name and surname of a contact person, their position in the company, corporate e-mail and contact telephone number. The consent granted by the proxies or authorized, for the purposes of article 21 of Law 34/2002, of July 11, services of the information society and electronic commerce (LSSI), will be understood given both in its own name as in the legal entity they represent
    • If the client is a physical person, only basic contact information.

ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) does not collect data considered especially sensitive by the RGPD such as: race or ethnic origin, political opinions or religious or philosophical beliefs, participation in unions, health, sexual activity or sexual orientation, biometric or genetic data.

It is the responsibility of each stakeholder that the information provided is true, accurate, complete and up-to-date and only they will be responsible for any damage or loss, direct or indirect, that could be caused as a result of the breach of such obligation.

In the event that the data provided by a User belonged to a third party other than the one providing the data, the User must inform the third party of the aspects contained in this Privacy Policy and obtain their authorization to provide their data to the BRITISH COLLEGE ASSOCIATION. IN SPAIN (NABSS).


Personal data is collected exclusively for the purposes indicated in this Privacy Policy, based on the following legitimating bases:

  • Execution of the contractual relationship between you and the ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) or application of pre-contractual measures:
    • Process the registration request of users on the website, in order to activate your subscription, for which it will be necessary to verify your identity.
    • Provide the requested service, as well as perform the billing and collection thereof, and manage, maintain and control the contractual relationship with our customers, and resolve any doubts.
    • In the case of clients: ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) may carry out commercial or advertising actions or communications, by any means, including through electronic communications or equivalent, related to products or services similar to those contracted, in accordance with Law 34/2002 (LSSI).
    • You can object to this treatment based on legitimate interest, following the indications set out in the Stakeholders’ Rights section of this Privacy Policy.
  • Consent
    • In the event that you are not a customer: for the sending of information and publicity about products and services of the ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS), by any means, including through electronic communications or equivalent.
    • Forwarding information and advertising of products and services of other group companies or third parties, by any means, including through electronic or equivalent communications.

If you do not authorize the processing of your personal data for the above purposes, this will not affect the maintenance or fulfillment of the contractual relationship you have with the ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS).


From the information you provide when filling out a WEB form or contracting our products and / or services.


The data may be communicated to companies related to the ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) for the provision of the various services, acting as Treatment Managers but we will not transfer your personal data to third parties, unless we are bound by a law or that you, with prior information and acceptance, have agreed so with us.

We share your information with:

  • Providers of services contracted by (in charge of the treatment). As, for example: our hosting service or our legal advisors. We require all our managers, contractually, to only use the personal data provided for the purpose set forth in the contract and, upon completion, return or destroy such personal data.
  • Providers of services located outside the European Economic Area (International Data Transfers), for example. USA[1]. In these cases, it requires that said recipients comply with measures designed to protect personal data and, for this, it is based on mechanisms approved by the EU that allow such transfers
  • By legal obligation: Tax Agency, Public Administration with jurisdiction, Judges and Courts, etc.


The personal data, provided through contact forms, will be kept by the ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) for a maximum period of 6 months, unless you indicate your desire to receive commercial communications, in which case they will be kept while you do not object

If you are a client, we will keep your personal data while our contractual relationship remains in force and has not requested its deletion. Once the contract ends, ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) will keep your personal data blocked during the statutory limitation periods, with a general character, 6 years by Code of Commerce regulations. After said limitation periods, your data will be destroyed.


You have the right to ask for confirmation about whether we are treating your personal data and, if so, to access said data or request your portability.

You have the right to object to the processing of your data (we will always consider your objection to receiving publicity) and / or to request the deletion of the same.

You can request the limitation of the processing of your data in the following cases:

  • While the contestation of the accuracy of your data is checked.
  • If the treatment was illegal, but opposed the deletion of your data.
  • When ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS) does not need your data, but you need them for the exercise or the defense of claims.
  • When you have opposed the processing of your data for the fulfillment of a mission in the public interest or for the satisfaction of a legitimate interest, while verifying if the legitimate reasons for the treatment prevail over yours.

In addition, you can revoke the consent given at any time. However, keep in mind that after attending your revocation we can continue to communicate with you when necessary to comply with our legal obligations or to execute the contract you have with us.

For the correct exercise of your rights, we ask you, when making your request, to prove your identity by means of a copy of your ID, or equivalent official document, and identify the company (or companies) to which your data are linked, if It is the case. Channels at your disposal:

  • Postal: ASSOCIATION OF BRITISH COLLEGES IN SPAIN (NABSS), C/ FERRAZ, 85, 2008 MADRID, indicating in the subject “Data Protection”
  • Email:, indicating in the subject “Data Protection”

If you believe that we have not treated your personal data in accordance with the regulations, you can contact the Data Protection Delegate at DPO contact details:, Subject: Data Protection Claim.

However, you can obtain more information about your rights by contacting the Spanish Agency for Data Protection ( before which you can file a claim.



We strive to continuously improve our services, processes and the protection of the rights of the interested parties. Therefore, we will update this privacy policy periodically. We advise you to consult it regularly.

[1] Decision of Execution (U.E.) 2016/1250 of the Commission of July 12, 2016 in accordance with Directive 95/46 of the European Parliament and of the Council, on the adequacy of the protection conferred by the EU-US Privacy Shield.