Privacy notice

Last updated 12 August 2026. This notice covers the personal data handled by an editorial desk that writes about Spanish immersion courses: enquiry correspondence, the contact form and ordinary web serving. Schools, camps and accommodation providers named in our articles publish their own documents, and those govern any enrolment you make with them.

Who we are and what this notice covers

This notice explains how the castilbrief editorial desk (castilbrief.pro) handles personal data when you read these pages, write to us about a Spanish course, or use the contact form. It covers the website published at this domain and the email correspondence that follows an enquiry. It does not cover the language schools, camps or accommodation providers described in our articles; each of those is a separate controller with its own notice, and any enrolment you make with them is governed by their documents rather than ours.

Controller contact for privacy requests: [email protected], phone +34 910 052 174, postal address Calle de Serrano 41, 28001 Madrid, Spain. Editorial enquiries: [email protected].

We are a small editorial operation based in Spain. Our processing is deliberately narrow: we publish articles, we answer correspondence, and we keep the minimum record needed to do both consistently.

What personal data we collect

From the contact form: your first and last name, country of residence, email address, an optional area code and phone number, your preferred study region, the content of your message, and the fact that you ticked the privacy consent box. From email correspondence: whatever you choose to send us, including any documents you attach voluntarily, such as a course confirmation or a certificate you would like us to comment on.

From ordinary web serving: technical data such as IP address, user agent, requested page and timestamps, processed by our hosting provider in server logs for security and reliability. We do not operate advertising trackers, we do not build behavioural profiles, and we do not attempt to identify readers who have not written to us.

How the contact form actually behaves

The form on this site validates in your browser. While you type, a draft is stored in your own browser so that a mistyped address is not lost. After you send, the draft is cleared and a local copy of the submitted enquiry is kept on the same device. Those copies sit on your device and are not a transmission to us. The on-screen confirmation means we have the enquiry to answer; if you would rather keep a copy in your sent folder, write directly to the address published in the footer.

If you would rather not use the form at all, write directly to the address published in the footer. An email is exactly as effective and gives you a copy of your own words in your sent folder.

Why we process it, and our lawful basis

To answer your enquiry about studying Spanish, we rely on your consent and on the performance of the informal arrangement created when you ask us a question. To keep the site secure and available, we rely on legitimate interests. To retain correspondence that documents an editorial correction or a factual dispute, we rely on legitimate interests in maintaining an accurate published record.

We do not use your data for automated decision-making, and we do not profile readers for advertising. Nothing in your enquiry is used to build a marketing list unless you have asked to be added to one.

Who has access to it

Access is limited to the editorial team members who answer correspondence. Our processors are the hosting provider that serves these pages and the email provider that carries our correspondence. Both act on documented instructions and provide their own security commitments. Web fonts may be requested from a third-party font service; that request reveals your IP address to the provider, which is described in the cookie policy.

Personal data is never sold. Enquiry contents are not shared with schools, and your address is not passed to a language travel agency. If you ask us to introduce you to somebody, we will tell you what we would send before sending it.

International transfers

Our providers may process data outside the European Economic Area. Where that happens, transfers rely on the European Commission's standard contractual clauses or an adequacy decision, together with the technical measures those clauses require. If you would like to know which providers are involved at the time you read this, ask and we will tell you.

How long we keep things

Enquiry correspondence is kept for up to twenty-four months from the last message, which is long enough to recognise a follow-up question about the same course plan. Server logs are retained for a short period defined by our host, typically weeks rather than months. Correspondence that documents a published correction is kept for as long as the correction remains relevant to the article.

Anything stored locally in your browser by the consent banner or the form remains on your device until you clear site data.

Your rights

You can ask for access to your data, correction of inaccurate data, erasure, restriction of processing, and portability where it applies. You can object to processing based on legitimate interests, and you can withdraw consent at any time; withdrawal does not affect processing already carried out. To exercise any of these, write to the address in the footer and describe the request in your own words. We do not require a form.

We answer within one month. If a request is complex we will say so and explain the delay. If you are unhappy with our response you may complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the supervisory authority in your country of residence.

Children and young learners

Much of what we write concerns teenage summer camps, which means parents and guardians are frequent correspondents. This site is not directed at children, and we ask that enquiries about a minor come from an adult. Where you tell us about a young learner — an age band, a level, a dietary requirement — we treat that information as sensitive context, keep it inside the correspondence thread, and do not repeat it in published material.

Security

Pages are served over encrypted connections. Correspondence is held in accounts protected by strong authentication. Access is restricted to the people who need it. We minimise what we hold, which is the only security measure that never fails: data that was never collected cannot be exposed.

Editorial material and personal data

We publish learner comments. Those are used with permission, edited for length rather than sentiment, and attributed only by first name and city unless the writer asks otherwise. If you have sent us a comment and want it removed or anonymised further, write and it will be done without argument.

Where an article discusses a named school, network or camp, we are processing information about organisations rather than individuals. Where an individual is named in a complaint sent to us, we do not publish that name.

Changes to this notice

If our processing changes, this page changes with it and the revision is noted here rather than applied silently. The current version is dated 12 August 2026.