Integritetspolicy
HolaSpain
Senast uppdaterad: 12 februari 2026.
1. Inledning
HolaSpain (“HolaSpain”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, store, and disclose your personal data when you visit our website, submit an enquiry, apply for an educational programme, arrange insurance through us, participate in group or sports programmes, or otherwise interact with our services.
We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Irish Data Protection Acts 1988–2018, and other applicable Irish and European data protection laws.
2. Data Controller
HolaSpain is a company registered in Ireland and acts as the Data Controller for the personal data collected through our website and services.
For any privacy-related queries, please contact: info@holaspain.agency.
3. Categories of Personal Data We Collect
We may collect and process the following categories of personal data depending on the services requested:
- Identity information (full name, date of birth, nationality, passport details where required)
- Contact information (email address, phone number, residential address)
- Academic and programme information (language level, course selection, destination city, duration)
- Insurance-related information necessary for policy issuance
- Payment and transaction details (excluding full card numbers)
- Emergency contact details (for group or sports programmes)
4. Special Category Data
Where necessary, particularly for insurance or participation in sports programmes, we may process limited health-related information provided directly by you. Such data is processed strictly for insurance arrangement, safeguarding, or legal compliance purposes and only where a lawful basis applies.
5. How We Collect Data
We collect personal data directly from you through website forms, application submissions, email correspondence, telephone communications, booking confirmations, and payment transactions. In some cases, we may receive information from authorised educational institutions, group organisers, or insurance providers where relevant to your booking.
6. Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
- Performance of a contract or pre-contractual steps at your request
- Compliance with legal obligations under Irish law
- Legitimate interests in operating and improving our services
- Your consent, where required
7. How We Use Your Data
Your personal data may be used to process course enrolments, arrange accommodation, facilitate insurance policies, coordinate group or sports programmes, provide visa-related guidance, manage payments, comply with regulatory requirements, and communicate with you regarding your booking.
8. Disclosure of Personal Data
We may share your personal data with relevant third parties strictly as necessary for service delivery, including educational institutions, accommodation providers, insurance companies, sports clubs, payment processors, and regulatory authorities where legally required. We do not sell personal data to third parties.
9. International Transfers
As we operate internationally, your personal data may be transferred outside the European Economic Area (EEA). Where such transfers occur, appropriate safeguards such as Standard Contractual Clauses or adequacy decisions will be applied in accordance with GDPR requirements.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal and regulatory obligations, resolve disputes, and enforce agreements. Certain financial and compliance records may be retained for up to six or seven years in accordance with Irish law.
11. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet can be guaranteed to be completely secure.
12. Your Rights Under GDPR
Under GDPR, you have the right to request access to your personal data, request correction of inaccurate data, request erasure in certain circumstances, restrict processing, object to processing, and request data portability where applicable. You also have the right to withdraw consent where processing is based on consent.
Requests may be submitted to info@holaspain.agency.
13. Complaints
If you are not satisfied with how we process your data, you have the right to lodge a complaint with the Data Protection Commission (Ireland) at www.dataprotection.ie.
14. Cookies
Our website uses cookies and similar technologies. Please refer to our Cookie Policy for detailed information on how cookies are used and how you can manage your preferences.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any updates will be published on this page with a revised “Last Updated” date.
16. Tillämplig lag
This Privacy Policy is governed by the laws of Ireland.