Privacy Policy of The Montessori School of Mallorca

Privacy Policy

Last updated: 24/9/2025

The Montessori School of Mallorca, operated by Earth Children School S.L. and Earth Children High School S.L., is committed to protecting the personal data of parents, guardians, and students, and to ensuring full compliance with the General Data Protection Regulation (GDPR).

This Privacy Policy explains what personal information we collect, why we collect it, how it is used, and your rights regarding that data.

1. Who We Are

  • Legal entity: Earth Children School S.L. & Earth Children High School S.L.

  • Address: Carrer Batle Josep Canyelles, 9, 07320 Santa María del Camí, Mallorca, Balearic Islands – Spain

  • Email: [email protected]

  • Telephone: +34 971 140 170

  • Company registration: Registro Mercantil de Palma de Mallorca with the number 1/2013/15.303.0.

Earth Children School S.L. is the data controller for personal data collected through our website, forms, and school services.

2. What Personal Data We Collect and Why

We only collect the personal information necessary to provide our educational and related services. This includes:

  • Parent/guardian contact details (name, email, phone, address).

  • Child’s details (name, date of birth, programme applied for).

  • Billing and payment information (for uniforms or other purchases).

  • Login credentials (for the Parents’ Corner).

  • Technical information (IP address, browser type) for website analytics.

Legal bases for processing:

  • Consent: e.g. newsletter subscriptions, Open Day registration.

  • Contractual necessity: e.g. processing applications or uniform orders.

  • Legitimate interest: e.g. basic website analytics, responding to enquiries.

  • Legal obligation: e.g. maintaining tax and accounting records.

3. Specific Processing Activities

a) Application and Open Day Registration

When you submit an application or register for an Open Day, we collect your contact details and child’s details in order to process your request and communicate with you.

  • Retention: Applications not resulting in admission are retained for up to 36 months. Successful applications are retained as required by Spanish law.

  • Legal basis: Contractual necessity; consent for ongoing communications.

b) Newsletter Subscription

When you subscribe to our newsletter, we collect your email address.

  • Retention: Until you unsubscribe.

  • Legal basis: Consent (you may withdraw at any time).

c) Uniform Orders (Online Shop)

When you purchase uniforms, we collect billing, shipping, and payment information.

  • Retention: As required by Spanish tax and accounting law.

  • Legal basis: Contractual necessity; legal obligation.

d) Parents’ Corner

Registered parents are provided with login credentials for our Parents’ Corner. Login activity may be tracked for security and access control.

  • Retention: While the child is enrolled, and for a limited period after graduation or withdrawal.

  • Legal basis: Contractual necessity.

e) Contact Form

When you send us a message through our contact form, we collect your name, email address, and the content of your enquiry.

  • Retention: For as long as necessary to respond to your request.

  • Legal basis: Legitimate interest.

4. Cookies and Similar Technologies

Our website uses cookies to provide a secure and user-friendly experience.

What are cookies?
Cookies are small text files stored on your device when you visit our website.

Why we use them:

  • To enable login and security features in the Parents’ Corner.

  • To collect anonymous usage statistics (Slimstat analytics) to improve our website.

  • To display embedded content (e.g. YouTube videos), which may set their own cookies.

Types of cookies we use:

  • Essential cookies: Required for website functionality (cannot be disabled).

  • Analytics cookies: Collect anonymous usage data (only used with your consent).

  • Third-party cookies: Set by services like YouTube when you view embedded content.

How to manage cookies:
You can manage or delete cookies in your browser settings at any time. Non-essential cookies are only used if you give your consent through our cookie banner.

5. Third-Party Service Providers


We use trusted external providers who act as data processors on our behalf:

  • Google Forms (Google LLC) — admissions and event registration.

  • WooCommerce — uniform shop.

  • Slimstat — analytics.

  • Newsletter plugin (e.g. Mailchimp) — communications.

Where data is processed outside the European Union (e.g. by Google), we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.

6. Children’s Data

As a school, we process children’s data only with the consent of parents or legal guardians. We do not knowingly collect personal data directly from children without such consent.

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, and in accordance with legal requirements. Specific retention periods are detailed in Section 3 above.

8. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

  • SSL encryption of our website.

  • Access restricted to authorised staff only.

  • Regular security updates and backups.

9. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate data.

  • Request deletion of your data (“right to be forgotten”).

  • Restrict or object to processing of your data.

  • Request data portability.

  • Withdraw consent at any time.

We will respond to all requests within one month, unless an extension is legally permitted.

10. International Data Transfers

Some personal data may be processed outside the EU (e.g. Google). In such cases, we ensure adequate safeguards, such as the use of Standard Contractual Clauses, are in place to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated on our website. The date of the most recent revision appears at the top of this page.

12. Contact Us

For any questions or to exercise your GDPR rights, please contact:

  • Data Protection Contact: Dr. Thomas Winderl

  • Email: [email protected]

  • Phone: +34 971 140 170

If you are not satisfied with our response, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish Data Protection Authority.