DATA PROTECTION POLICY NEWSLETTER
By accessing out website and providing us with your personal data so we can send you our Newsletter on a regular basis, we understand that you have read and understood the terms and conditions related to the personal data protection set out below.
Identity: UNIVERSITAT INTERNACIONAL DE CATALUNYA, Private Foundation (hereinafter, UIC BARCELONA)
Address: Inmaculada, 22 08017 Barcelona
Tax ID: G-61737409
Telephone: +34 932 541 800
Fax: +34 934 677 275
Data Protection Officer: Ms. Marta Gustà
Contact details for the Data Protection Officer (DPO): firstname.lastname@example.org
Personal data and special categories of personal data
Personal data is any information about an identified or identifiable natural person (the “data subject”), such as name, address, telephone number and email address.
Special categories of personal data are a subset of personal data that reveal ethnicity or race, religious or philosophical beliefs, sexual orientation, medical or health information, trade union membership, or other sensitive matters. Special category data should not need to be processed in relation to the data required to send the UIC Newsletter.
Personal data (or simply, data) is any information relating to a natural person, where that person is identified or identifiable, even in an indirect way, by reference to any other information, including personal identification numbers.
The personal data we collect and the purposes of processing
3.1 Request for personal data
The personal data we may request from you includes your contact details (for example, name, address, telephone number, email address, among others), identifying data (for example, national identity document number, NIE or passport, among others), or any other strictly necessary information to comply with your request to receive information about the teaching, educational and institutional services offered by the UIC. In any case, if we collect special category personal data about you, we will inform you of this and ask you for your express consent to process this data, when necessary in accordance with applicable regulations. We will inform you of the purpose of this data processing.
It is possible that other personal data will be collected over the course of your relationship to the University. In this case you will be asked for your consent and will be informed of the processing to be carried out, the purpose and legitimacy of said processing, and the rights you hold in relation to your personal data, among other things.
Personal data may be provided directly by the user or collected automatically through use of the website.
3.2 Purposes of processing
The personal data that has been collected in this form will only be processed to keep you informed about the University’s activities, both from an institutional, teaching and training point of view, and in response to the interest you have expressed.
Any use of students’ personal data other than those indicated herein will require the prior, express and specific consent of the data subjects or their legal representatives.
Likewise, the data may be used to send you surveys, questionnaires and request feedback on our services, since such information is very useful to monitor quality.
We will process the contact data collected through your letters, emails, or forms on this website, in order to manage your requests and queries.
Likewise, UIC BARCELONA may use your data to provide you with information about our courses, services, products or information about the University. You can request that we do not contact you, or stop informing you about our courses or services, at any time. Equally, you can request that we do not disclose your information to third parties for this purpose, either by contacting us directly or, where appropriate, by clicking on the “unsubscribe” button in promotional emails.
3.3 Forms of data collection
We generally collect your personal data directly from you. We collect the information and personal data you provide to us and store it electronically. This includes information provided through via the website, through telephone calls with UIC BARCELONA staff, through the provision of our services and through forms or any other written or electronic means you fill in.
If we collect personal information about you from third parties, we will bring this to your attention and, if necessary, request your consent to process this data.
If you provide data on third parties, you accept the responsibility of informing them in advance of all the provisions of Article 14 of the General Data Protection Regulation under the conditions established therein.
If we receive information or personal data about you that we have not requested, or that is not relevant for the purposes indicated above, we will destroy or anonymise the information, unless we must are obliged to keep it in accordance with current regulations.
3.4 What happens if you do not provide your information and personal data or do not give consent for data processing
In this case, the University will not be able to respond to your request for information about the courses, programmes or institutional, teaching and training activities carried out at UIC BARCELONA.
Legitimacy to process personal data
The legal basis for processing your data for the aforementioned purposes will always be as provided for in Article 6 of the GDPR, i.e.:
If the data processing refers to special category personal data, the legitimacy will always be based on one of the legal bases of Article 9 of the GDPR.
If the user is a minor, they must have the prior consent of their parents or guardians before filling out the forms on the website with their personal data. UIC BARCELONA cannot be held liable for failure to comply with this requirement.
Duration of processing personal data
When UIC BARCELONA is considered as the Data Controller, it will ensure that the data being processed:
Holding data is considered justified when:
When there is a legal obligation to keep the data for a certain period of time and/or during the prescribed periods related to the activity or service provided, the University will block the data. The blocked data will be available only to the Public Authorities, Judges and Courts, for any possible liabilities arising from data processing, during the prescribed period for these actions and/or during the legal periods established for this purpose. Once the aforementioned deadlines have been met, the blocked data must be deleted.
When UIC BARCELONA is the Data Processor in accordance with the GDPR, and once the contractual provision that gave rise to the data processing has been fulfilled, the personal data must be destroyed or returned to the Data Controller, as well as any medium or document containing any personal data subject to processing.
As detailed above, the data will not be deleted by the Data Processor when there is a legal provision that requires it to be held, in which case the data must be returned, with the Data Controller guaranteeing the data will be held. The Data Processor will hold the blocked data as long as they could be held liable as a result of the relationship with the Data Controller.
In accordance with these requirements, the following conditions are established:
Periods for holding personal data
The processing of personal data for advertising and promotional purposes.
Regulatory reference: Art. 6.1.a) of the General Data Protection Regulation.
Transfer of personal data to third parties
We may share or disclose your personal information to third parties for any of the above reasons. Such third parties may be educational establishments, university establishments and their clients, external consultants, suppliers or subcontractors (e.g. the postal service, support services, etc.), in compliance with contractual relations entered into with such third parties, both within and outside the EU/EEA. Likewise, your data may be communicated to third parties as a result of legal obligations or requirements, as well as to courts, tribunals and public administrations where necessary, or to any other third party, person or entity you authorise.
In the case of international transfers, we will always seek your express consent to transfer your personal data to third parties located outside the country in which we have collected your data (where applicable), except where the transfer is authorised or required by law, regulations or the courts.
We will not share any special category personal data with any person or entity other than UIC BARCELONA, our employees, UIC BARCELONA employees, government agencies, entities with legal obligations or requirements, courts, tribunals and public administrations, or other third parties authorised by law.
Storage and security of your personal data
We may store your personal data on paper or electronic files. We have put safeguards in place, in accordance with the requirements of current regulations, to protect your personal data from misuse, interference, loss, unauthorised access, modification or disclosure.
UIC BARCELONA applies technical security measures, such as encryption, in cases where this is possible. Likewise, the secure processing of personal data is guaranteed through a number of different systems, such as the secure archiving of original documents and restricting access to personal data to authorised personnel.
Rights relating to your personal data
UIC BARCELONA ensures that the information it obtains on you is accurate, up-to-date, complete and relevant. You have the right to access and correct this information if it is incorrect, inaccurate, outdated or incomplete. You may also withdraw your consent to the processing of your personal data.
Your rights in relation to data processing
Access, rectification and suppression: Data subjects have the right to access their personal data, and to ask for inaccurate data to be rectified or, where applicable, to request its erasure when the data is no longer necessary to execute the contract, among other reasons.
Limitation: Under certain circumstances, interested parties may request the limitation of the processing of their data, in which case said data will be kept only to handle or respond to complaints.
Objection: Data subjects may object to their data being processed. UIC BARCELONA will no longer process the data, except for legitimate reasons, or defend against any possible claims, and we will keep the data duly blocked for the corresponding period, for as long as legal obligations persist.
Likewise, the interested party has the right to oppose individual automated decisions that could have legal effects or have a significant impact on the interested party.
Data portability: data subjects may request to receive the data held on them, which they have provided to us, and may request request data be sent to another data controller of their choice, in a structured, commonly used and readable format.
When will we respond to your request?
We will respond to requests as soon as possible, within one month of receipt of your request. This period may be extended by a further two months if necessary, depending on the complexity of the request and number of requests received. The Data Controller will inform the data subject of the extension within the first month following the request.
The right to withdraw consent
The interested party has the right to withdraw consent at any time, without affecting the legality of any data processing based on the prior consent given when registering or providing data.
Where to go to exercise your rights
The interested party may exercise their rights by sending a letter with all their data, including a photocopy of their ID or passport and an indication of the right being exercised by contacting this address: UIC BARCELONA, C/Immaculada 22, 08017 – Barcelona, or by sending an email to email@example.com
The right to complain
We hereby inform you that if you submit a request for the exercise of these rights and consider that it has not been adequately addressed by our institution, you can file a complaint with the Spanish Data Protection Agency in accordance with the procedure detailed on this link: https://sedeagpd.gob.es/sede-electronica-web/vistas/formReclamacionDerechos/reclamacionDerechos.jsf
In compliance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, we inform you that the email addresses provided may be used to send information about the University. If you do not wish to receive information or wish to revoke the consent granted for data processing, please do so in the manner indicated above or by contacting the following email address: firstname.lastname@example.org.
For more information on privacy in general, please visit the website of the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es and the Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades – APDCAT) at www.apdcat.gencat.cat.