Privacy Policy

What is “personal data”? 

Personal data is information that the Foundation holds about you and which identifies you or could identify you when combined with other data the Foundation either holds or is likely to obtain.

1. Website User 

Whenever you use our Foundation’s website, we collect limited technical data to help us improve your experience. 
Our web server automatically records non-identifying information such as: 

• IP address 

• browser type 

• pages visited and duration 

• referral source 

• navigation patterns 

If you fill out any form on our website (donation form, scholarship application form, partnership contact form), we will also collect the personal information you provide. 

2. Scholarship Applicants 

We may collect and process the following personal data: 

• Identification and contact details (name, address, email, phone, nationality, date and place of birth) 

• Education history 

• Financial or social circumstances relevant to scholarship eligibility 

• Motivation statements and supporting documents 

• Sensitive data where voluntarily provided (e.g., disability information, , refugee status) 

• Records of interactions with the Foundation (emails, application forms, interviews) 

We do not seek to collect personal data from individuals under the age of 16. Applicants under 16 must receive parental or guardian authorization before submitting information. 

3. Donors & Sponsors 

We may collect and process: 

• Identification and contact details 

• Donation history and financial transaction information 

• Country of residence for tax-deduction purposes 

• Communication preferences 

• Information required to issue donation receipts or certificates 
  
  
  

4. Partners & supporting organizations 

We may collect: 

• Contact information of partner organization representatives 

• Details voluntarily shared in the context of scholarship review or partnership discussions 

• Confirmation of information relevant to a candidate’s application (when acting as a reference, NGO partner, UN agency, etc.) 

Where does the Foundation obtain your personal data? 

We obtain personal data from the following sources: 

From you directly when you: 

• fill out a donation form 

• apply for a scholarship 

• contact us via email or an online form 

• subscribe to updates 
• engage with us through our social media channels
   

From third parties, including: 

• partner organizations (e.g., UN agencies, NGOs) 

• individuals who act as references for scholarship applicants 

• payment processors (donation platforms) 

• public information you have made available on social networks 

Why does the Foundation collect and use your personal data? 

For website users 

To improve the website, ensure proper functioning, and support personalization and analytics (see Cookies Policy). 

For scholarship applicants 
To: 

• process and evaluate your application 

• verify eligibility criteria 

• communicate program information 

• review supporting documents 

• maintain records of applicants 

• ensure equitable and transparent selection processes 

For donors 
To: 

• process your donation 

• issue tax receipts 

• communicate acknowledgments or updates when relevant 

• maintain donor records 

• ensure legal and financial compliance 
  
  

For partners and references 
To: 

• confirm information provided in a scholarship application 

• maintain partnership relations 

• communicate regarding scholarship selection or program requirements 

Legal grounds for processing 

We rely on one or more of the following bases: 

• Consent (for marketing or optional information) 

• Contractual necessity (to evaluate a scholarship application or donation) 

• Legal obligation (tax requirements, reporting obligations) 

• Legitimate interest (improving our services, developing partnerships, ensuring program integrity) 

Sharing your information with others 

We may share information only when necessary with: 

• Sommet Education Group entities involved in scholarship delivery 

• Payment service providers 

• Cloud hosting and IT service providers 

• Partner institutions delivering scholarship programs 

• Authorities where required by law 

We require all external service providers to comply with applicable data protection laws and our contractual obligations. 

We do not sell or rent personal data. 

International transfers 

Some of the personal data we process about you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) or Switzerland. In these circumstances, your personal data will only be transferred on one of the following bases: 

• A European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection; 

• Where the transfer is subject to one or more of the “appropriate safeguards” for international transfers prescribed by applicable law (e.g., standard data protection clauses adopted by the European Commission); or 

• There exists another situation where the transfer is permitted under applicable law (e.g., where we have your explicit consent). 

How we secure your data 

We implement appropriate physical, administrative and technical measures designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, disclosure or access or use, and all other unlawful forms of processing. We contractually require that External Parties provide equivalent levels of protection when handling your personal data and only process the data in accordance with our instructions. In any case, we limit access to personal data to those people who have a legitimate need for such access in accordance with this Notice. We endeavour to take all reasonable steps to protect your Personal Data but cannot guarantee the security of any Personal Date you disclose. You accept the inherent security implications of being and transacting on-line over the internet and will not hold us responsible for any breach of security  

For how long do we keep your personal data? 

We strive to keep our processing activities with respect to your personal data as limited as possible. We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a Service you have requested or to comply with applicable legal, tax or accounting requirements) 

Your rights 

You have the right to: 

• access your personal data 

• request correction or deletion 

• restrict or object to processing 

• withdraw consent at any time 

• request a copy of your data 

• stop receiving marketing communications 

• lodge a complaint with a data protection authority

   

To exercise these rights, contact us at: 
dpo@sommet-education.com
Sommet Education Foundation 
Carretera Istán, Km1, Urbanización Limas del Río Verde, 
29602, Marbella, Málaga (Spain)