PRIVACY POLICY

Last updated: August 2026

This Privacy Policy explains how Gloading collects and processes personal data in connection with our website, application and selection processes, and the services we provide to participants in our programs.

1. DATA CONTROLLER

The controller responsible for processing your personal data is:

MULTILINGUAL EDUCATION DEVELOPMENT & SUPPORT SL , operating under the Gloading brand.

Registered office: Calle Benjamín de Tudela, 32 – 2 C, 31008 Pamplona, Navarra, Spain
Tax ID (CIF): B71078950
Commercial Registry: Volume 1598, Folio 107, Page NA-31714
Email: data@gloading.com
Telephone: +34 623 960 520

2. WHAT PERSONAL DATA DO WE PROCESS?

The personal data we process depends on how you interact with Gloading, the program for which you apply, and whether you subsequently become a participant.

We may process the following categories of personal data:

We seek to collect only the personal data reasonably necessary for each stage of the process. During the initial application stage, we may request limited declarations regarding certain eligibility requirements without requiring the corresponding certificates or supporting documentation until they become necessary.

3. WHY DO WE PROCESS YOUR PERSONAL DATA AND ON WHAT LEGAL BASIS?

3.1. Inquiries

If you contact Gloading, we process the information you provide to respond to your inquiry, provide the information requested, and manage any necessary follow-up.

Where your inquiry relates to our programs or services, processing is based on taking steps at your request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR. For other general communications, processing may be based on Gloading’s legitimate interest in managing and responding to inquiries, pursuant to Article 6(1)(f) GDPR.

3.2. Applications and selection

When you apply for a Gloading program, we process your personal data to manage your application, verify that you meet the applicable requirements, assess your eligibility and suitability, communicate with you during the process, and manage selection and admission.

The legal basis for this processing is taking pre-contractual steps at your request, pursuant to Article 6(1)(b) GDPR.

Some program requirements may involve information subject to additional protection under data protection law. Where we process health information during the application process, we will do so on the basis of your explicit consent, pursuant to Article 9(2)(a) GDPR, together with the applicable legal basis under Article 6 GDPR. Information relating to criminal convictions or offenses will only be processed where and to the extent permitted by Article 10 GDPR and applicable law.

After the application process has ended, Gloading may retain application data on the basis of its legitimate interest, pursuant to Article 6(1)(f) GDPR, in maintaining an appropriate record of previous applications, managing repeat applications consistently, and addressing potential queries or claims relating to the application process, subject to the retention criteria set out in Section 5.

3.3. Participation in our programs

If you are accepted and formalize your participation, we process the personal data and documentation necessary to manage our contractual relationship with you and provide the services included in your program. This may include managing payments and refunds, providing assistance with visa and immigration procedures, handling administrative requirements, coordinating your participation and placement, communicating with the organizations involved in the program, and providing ongoing assistance and support.

The principal legal basis for these activities is the performance of our contract with you, pursuant to Article 6(1)(b) GDPR. Where processing is necessary to comply with legal obligations applicable to Gloading, it is based on Article 6(1)(c) GDPR.

For Teach in Spain, this includes managing, on your behalf, the relevant application and administrative procedures for participation as a language assistant and submitting the necessary information and documentation to the Spanish ministry responsible for education and/or other competent public authorities or organizations involved in the process.

For Teach in Thailand, Gloading provides services including candidate selection and assistance with visa and related procedures. Once you formalize your participation, the personal data and documentation necessary for the program will also be shared with our local partner in Thailand. The partner manages the local placement process, introduces participants to prospective schools, provides orientation and local administrative assistance, and offers ongoing local support.

As part of the placement process, the local partner may share the information necessary with prospective schools in Thailand so that they can consider participants for available teaching positions. A school that considers a participant for a position and, where applicable, ultimately hires the participant will process the relevant personal data as an independent controller for its recruitment and employment purposes.

3.4. Communications about programs and opportunities

If you have agreed to receive news, updates, and information about Gloading programs and opportunities, we may use your contact information for these purposes on the basis of your consent, pursuant to Article 6(1)(a) GDPR.

This consent is voluntary and is not a condition for applying to or participating in a Gloading program. You may withdraw it at any time through the unsubscribe mechanism included in our communications or by contacting data@gloading.com.

Communications necessary to manage your application or participation in a program are not marketing communications and do not depend on marketing consent.

3.5. Payments

Where you make a payment in connection with a Gloading service, we process the information necessary to manage and verify the transaction, associate it with the relevant service or participant, manage refunds where applicable, and comply with accounting and tax requirements.

Payments may be processed through external payment service providers. Where payment details are entered directly into the payment provider’s environment, those details are processed by the payment provider in accordance with its own data protection obligations.

Processing necessary to manage the payment is based on Article 6(1)(b) GDPR, while processing required to comply with accounting, tax, or other legal obligations is based on Article 6(1)(c) GDPR.

4. IS IT MANDATORY TO PROVIDE YOUR PERSONAL DATA?

Information identified as mandatory in our forms or during the application and participation process is necessary to manage your application or provide the relevant services.

If you do not provide information necessary to assess your eligibility or meet essential program, visa, immigration, placement, or administrative requirements, we may be unable to process your application or provide some or all of the relevant services.

Information requested for optional purposes, such as marketing communications, is voluntary and will not affect your application or participation.

5. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We retain personal data only for as long as necessary for the purposes for which it was collected and, where applicable, for the periods required to comply with legal obligations or address potential liabilities.

Data relating to general inquiries will be retained for as long as necessary to manage the inquiry and, where appropriate, any potential liabilities arising from it.

Data relating to unsuccessful or discontinued applications will generally be retained for up to three years following the end of the relevant application process, based on Gloading’s legitimate interest in maintaining an appropriate record of previous applications, managing repeat applications consistently, and addressing potential queries or claims relating to the application process.

After that period, Gloading may retain, on the basis of the legitimate interests described in Section 3.2, a limited record of a previous application where reasonably necessary to identify and appropriately manage future or repeat applications. This record will be limited to basic identification information and information necessary to identify the relevant application and its outcome. It will be retained only for as long as those purposes remain applicable and will be periodically reviewed and deleted when no longer necessary.

Information subject to additional protection under data protection law will not be retained for longer than necessary for the purpose for which it was collected.

Where an applicant becomes a participant or customer, personal data will be retained for the duration of the contractual relationship and, after it ends, for the periods necessary to comply with applicable legal obligations and limitation periods.

Data processed for marketing purposes on the basis of consent will be processed until you withdraw your consent or unsubscribe, without prejudice to retaining the minimum information necessary to record and respect your communication preferences.

6. WHO MAY RECEIVE OR ACCESS YOUR PERSONAL DATA?

Access to personal data within Gloading is limited to personnel who require it to perform their duties.

Depending on the services you use and the program in which you participate, personal data may also be disclosed or made accessible to:

We currently use technology services that may include Typeform, Google Workspace, and Microsoft.

Where a service provider processes personal data solely on Gloading’s behalf, it will act as a data processor and the relationship will be subject to the safeguards required by Article 28 GDPR.

Organizations that determine their own purposes and means of processing will process personal data as independent controllers for their respective activities. This may include public authorities and prospective or employing schools in relation to their respective activities.

7. INTERNATIONAL TRANSFERS

Some of our service providers and program activities may involve personal data being processed outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, Gloading will ensure that the transfer is subject to an appropriate mechanism and safeguards in accordance with Chapter V of the GDPR. Depending on the recipient and destination, these may include an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework where applicable, or another legally recognized transfer mechanism.

In connection with Teach in Thailand, personal data and documentation necessary to provide the program are transferred from Gloading in Spain to our local partner in Thailand. As part of the placement process, the local partner may subsequently share the necessary personal data with prospective schools in Thailand for recruitment and placement purposes.

Thailand is not currently covered by an adequacy decision of the European Commission. Accordingly, Gloading will apply the safeguards required by the GDPR to transfers of personal data to its local partner in Thailand, including the European Commission’s Standard Contractual Clauses (SCCs) where applicable.

Where required, Gloading assesses the circumstances of international transfers and implements appropriate contractual, technical, or organizational safeguards.

You may contact data@gloading.com for further information about the safeguards applicable to international transfers of your personal data and, where applicable, how to obtain a copy of the relevant safeguards.

8. TECHNOLOGY AND SERVICE PROVIDERS

Gloading uses third-party technology providers to support its application processes and business operations.

For example, online application forms may be provided through Typeform, and information may subsequently be processed using Google Workspace, Microsoft, and Gloading’s own systems.

We require providers processing personal data on our behalf to be subject to appropriate data protection arrangements and, where their services involve international transfers, to use an appropriate transfer mechanism under the GDPR.

We also seek to avoid retaining unnecessary duplicate copies of personal data across different systems for longer than required.

9. AUTOMATED DECISION-MAKING

Gloading does not make decisions that produce legal effects or similarly significantly affect applicants or participants based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

Technology may be used to organize and support application and participant management, but admission and participation decisions are not made solely by automated means.

10. SOCIAL MEDIA

Gloading maintains profiles on social media platforms to provide information about our programs, activities, and opportunities and to interact with users.

If you interact with Gloading through a social media platform, we may process information made available through that interaction to respond to your message, comment, or request. The relevant platform may also process your personal data in accordance with its own privacy policy, terms, and account settings.

When posting comments, photographs, videos, links, or other content on or in connection with Gloading’s social media profiles, users are responsible for ensuring that they have the necessary rights or permissions to share that content and any personal data relating to third parties contained in it.

Gloading may remove or report content posted on its social media profiles where it infringes third-party rights, violates applicable law, or breaches the applicable rules of the relevant platform.

11. YOUR DATA PROTECTION RIGHTS

Under applicable data protection law, you may exercise the following rights, where applicable:

You may exercise your rights by contacting:

data@gloading.com

Please indicate the right you wish to exercise and provide sufficient information for us to identify and respond to your request.

We will not routinely require a copy of your identity document. However, where we have reasonable doubts regarding the identity of the person making a request, we may request additional information necessary to confirm their identity.

12. RIGHT TO LODGE A COMPLAINT

If you believe that Gloading has processed your personal data in breach of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Spain, the competent supervisory authority is the Agencia Española de Protección de Datos (AEPD).

You may also contact us at data@gloading.com with any questions or concerns regarding the processing of your personal data.

13. COOKIES AND SIMILAR TECHNOLOGIES

The Gloading website may use cookies and similar technologies.

Detailed information about the cookies used, their purposes, duration, and the options available to accept, reject, or configure them can be found in our Cookie Policy.

Where consent is legally required for a cookie or similar technology, it will not be used until the relevant consent has been obtained.

14. SECURITY

Gloading implements appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures are reviewed taking into account the nature of the processing, the personal data involved, and the risks associated with the processing.

15. CHANGES TO THIS PRIVACY POLICY

Gloading may update this Privacy Policy where necessary to reflect changes to our services, programs, processing activities, technology, or applicable legal requirements.

The current version will always be available on our website. Where a change materially affects the way in which we process personal data, Gloading will take appropriate measures to inform affected individuals where required by applicable law.

Last updated: August 2026