This policy explains how Teach in Spain ("we", "us") processes your personal data when you apply for a teaching placement, contact us by email, or browse teachspain.com. We comply with the EU General Data Protection Regulation (GDPR) and Spain's Ley Orgánica 3/2018 (LOPDGDD).
What we collect
When you submit the application form we collect:
- Identity: full name, nationality.
- Contact: email address.
- Placement preferences: preferred region.
- Professional information you choose to share: teaching experience, qualifications and your CV (PDF or Word document).
- Technical data: basic server logs (IP address, timestamps) for security and abuse prevention.
Your CV may contain additional personal data (date of birth, photo, previous employers, references). Please do not include data you do not want us to process — for example, you do not need to share political, religious, health or other special-category data.
Why we use it
- To evaluate your application and match you with partner schools.
- To reply to you and arrange interviews or onboarding.
- To send you the automated confirmation email after you apply.
- To keep records required by Spanish labour and tax law if you go on to be placed.
- To protect the service from abuse and to comply with legal obligations.
We do not use your data for advertising, profiling, or automated decision-making, and we never sell it.
Legal basis
- Consent (Art. 6(1)(a) GDPR): you tick the consent box when submitting the form. You can withdraw consent at any time by emailing us.
- Pre-contractual steps (Art. 6(1)(b)): processing necessary to evaluate a placement at your request.
- Legitimate interests (Art. 6(1)(f)): keeping our service secure and operational.
- Legal obligation (Art. 6(1)(c)): retaining records required by Spanish law where applicable.
Who sees your data
Your data is read by our placement team. We share it only when needed:
- Partner schools and academies in Spain, when your profile matches an open role — and only after we have discussed it with you.
- Service providers who process data on our behalf under written data-processing agreements: our database and file storage host, our transactional email provider, and our error monitoring tool. These providers process data inside the EU/EEA or under EU-approved transfer safeguards (Standard Contractual Clauses).
- Authorities, where we are legally required to disclose data.
We do not transfer your data to countries outside the EEA without appropriate safeguards.
How long we keep it
- Applications that do not lead to a placement: up to 12 months from submission, then deleted or anonymised. We may retain it longer if you ask us to keep your profile on file.
- Applications that lead to a placement: for the duration of the engagement plus the period required by Spanish labour and tax law.
- Email logs and unsubscribe records: as long as needed to honour your preferences and demonstrate compliance.
Your GDPR rights
You can, free of charge:
- Access the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data ("right to be forgotten").
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting prior lawful processing.
To exercise any right, email hola@teachspain.com from the address you applied with. We respond within 30 days.
Security
Data is transmitted over HTTPS. CVs are stored in a private, access-controlled bucket — never publicly browsable. Application records are protected by row-level security and accessible only via authenticated server-side processes. We log access and review permissions regularly. Despite our efforts, no system is perfectly secure; please contact us immediately if you suspect a breach.