Last updated: [5 June 2025]
1. Who We Are
ViaB Exchange Program is operated by Magic-Languages.
• Website: https://viabprogram.com/
• Data-protection email: info@magic-languages.com
Magic-Languages is the data controller for personal data collected through this site.
2. What Personal Data We Collect & Why
| Activity | Data Collected | Purpose & Legal Basis (GDPR) |
|---|---|---|
| Contact / enquiry forms | Name, email, phone (optional), school name, message content | Respond to enquiries, send programme materials. Contractual necessity (Art. 6 (1)(b)). |
| Newsletter opt-in (if enabled) | Email, language preference | Deliver marketing updates. Consent (Art. 6 (1)(a)). |
| Site analytics | Pseudonymised IP, device type, page views (via Google Analytics 4) | Improve site performance, understand visitor interest. Legitimate interest (Art. 6 (1)(f)). |
| reCAPTCHA v3 | Mouse movements, browser data | Spam / bot protection on forms. Legitimate interest. |
| Cookies | See § 4 below | Site functionality (login, language) & analytics. |
| User comments (currently disabled) | — | We do not collect comment data unless the blog feature is activated; section kept for future reference. |
Children
ViaB is aimed at parents, schools, and students aged 13 +. We do not knowingly collect data from children under 13 without parental consent.
3. Who Else Receives Your Data
| Recipient | Location | Safeguards |
|---|---|---|
| Google LLC (Analytics, reCAPTCHA) | USA | Standard Contractual Clauses (SCCs) + IP-anonymisation. |
| Mailchimp / Brevo / [your ESP] | USA / EU | SCCs. |
| SendGrid / AWS SES (transactional emails) | USA / EU | SCCs. |
We never sell or rent your information.
4. Cookies & Tracking
| Cookie Type | Examples | Duration | Opt-out |
|---|---|---|---|
| Functional | wp_lang, wp_logged_in | Session–1 yr | Via browser settings |
| Analytics | _ga, _ga_* | 14 months | Reject on banner or install GA Opt-out add-on |
| Security | rc::a (reCAPTCHA) | Persistent | Disable scripts in cookie banner |
A cookie banner appears on first visit and lets EU/EEA users reject non-essential cookies.
5. Retention Periods
| Data Set | Retention |
|---|---|
| Enquiry form submissions | 24 months after last contact |
| Newsletter list | Until user unsubscribes |
| Analytics data | 14 months (GA4 default) |
| Server logs | 90 days |
| Contractual records (confirmed participants) | 6 years (statutory limitation) |
6. Your Rights (EU / UK / Canada)
You may request access, rectification, erasure, restriction, portability, or objection to processing at any time.
• Email us: info@magic-languages.com
• EU/EEA residents can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or their local DPA.
• Canadian residents may contact the Office of the Privacy Commissioner of Canada (OPC).
7. Data Security
We use TLS 1.3 encryption, daily managed-hosting backups, role-based access, and 2-factor authentication for administrator accounts.
8. International Transfers
When we transfer data outside the EEA (e.g., to US-based processors) we rely on:
- Standard Contractual Clauses approved by the European Commission; and
- Additional encryption and minimisation.
9. Automated Decision-Making
No automated decisions or profiling producing legal or similarly significant effects are performed.
10. Embedded Content & Third-Party Links
Pages may embed YouTube videos, Google Maps, or Instagram posts. Interacting with embedded content is subject to the third party’s own privacy policy.
11. Changes to This Policy
We will update this notice when we add new features or change processing activities. Revisions are dated at the top of the page.
12. Contact
Questions? Email the Data Protection Officer at info@magic-languages.com.
How to use this page in WordPress
- Create a new page called Privacy Policy.
- Paste the text above.
- Replace bracketed placeholders ( [ ] ) and delete any section that doesn’t apply (e.g., Newsletter if not used).
- Go to Settings → Privacy and select this page as your official privacy policy.
This brings the generic WordPress policy up to GDPR and CCPA clarity while covering ViaB’s specific data flows. Let me know if you need a shorter cookie banner script or bilingual (Spanish/Catalan) versions!