Privacy and data protection

INTERNATIONAL WORKSHOP ON FAMILY SUPPORT
At UIC Barcelona we are committed to protecting your privacy. That’s why we process your data and personal information in accordance with this Privacy Policy and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April, 2016 (General Data Protection Regulation or ‘GDPR’), and with Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (‘PPD-GDR’) and other implementing regulations.

This Privacy Policy applies to all registration and participation processes in the INTERNATIONAL WORKSHOP ON FAMILY SUPPORT, organised by UIC BARCELONA.

By providing us with your personal data and through the use of our website, we understand that you have read and understood the terms and conditions related to the personal data protection set out below.

Data controller
Identity: UNIVERSITAT INTERNACIONAL DE CATALUNYA, Private Foundation (hereinafter, UIC BARCELONA)
Address: Inmaculada, 22 08017 Barcelona
Tax ID: G-61737409
Telephone: +34 932 541 800
Fax: +34 934 677 275
Data Protection Officer: Ms. Marta Gustà
Contact details for the Data Protection Officer (DPO): dpo@uic.es

Personal data and special categories of personal data
Personal data is any information about an identified or identifiable natural person (the “data subject”), such as name, address, telephone number and email address.

Special categories of personal data are a subset of personal data that reveal ethnicity or race, religious or philosophical beliefs, sexual orientation, medical or health information, trade union membership, or other sensitive matters.

Personal data (or simply, data) is any information relating to a natural person, where that person is identified or identifiable, even in an indirect way, by reference to any other information, including personal identification numbers.

The personal data we collect and the purposes of processing

3.1 Request for personal data
The personal data we may request from you includes your contact details (for example, name, address, telephone number, email address, among others), identifying data (for example, national identity document number, NIE or passport, among others), or any other information necessary to fulfil the purposes set out in this Privacy Policy. If we collect special category personal data about you, we will inform you of this and ask you for your express consent to process this data, when necessary in accordance with applicable regulations. We will inform you of the purpose of this data processing.

It is possible that other personal data will be collected over the course of your relationship to the University. In this case you will be asked for your consent and will be informed of the processing to be carried out, the purpose and legitimacy of said processing, and the rights you hold in relation to your personal data, among other things.

The other personal data collected may be indicated in other sections of this Privacy Policy or via informative texts displayed at the time this data is collected.

Personal data may be provided directly by the user or collected automatically through use of the website.

3.2 Purposes of processing
Through this form, UIC BARCELONA collects your personal data in order to manage your participation (as a participant, speaker, etc.) in the INTERNATIONAL WORKSHOP ON FAMILY SUPPORT.

Your personal data will only be processed to carry out teaching functions or manage attendance at the workshop, as well as to organise participation in each of the round tables included in the workshop. Any use of students’ personal data other than those indicated herein will require the prior, express and specific consent of the data subjects or their legal representatives.

In the case of personal data on students, potential students, or suppliers, UIC BARCELONA collects and processes this data to provide offers of educational services and manage commercial relationship or services.

In any cases, the personal data collected will be used in order to comply with legal obligations and requirements arising from the execution of commercial relationships and academic, commercial, administrative contracts, etc., to which UIC BARCELONA is a party, as well as to handle any complaints or claims related to academic, legal, employment or commercial matters.

Likewise, the data may be used to send you surveys, questionnaires and request feedback on our services, since such information is very useful to monitor quality.

We will process the contact data collected through your letters, emails, or forms on this website, in order to manage your requests and queries.

Cookie data: unless otherwise specified, any use of Cookies or other tracking tools by the website, or by external service providers used by this website, is intended to identify the user and record their preferences for purposes strictly related to the provision of the service requested by the user, and are processed at all times according to our Cookie Policy.

Likewise, UIC BARCELONA may use your data to provide you with information about our courses, services, products or information about the University. You can request that we do not contact you, or stop informing you about our courses or services, at any time. Equally, you can request that we do not disclose your information to third parties for this purpose, either by contacting us directly or, where appropriate, by clicking on the “unsubscribe” button in promotional emails.

3.3 Forms of data collection
We generally collect your personal data directly from you. We collect the information and personal data you provide to us and store it electronically. This includes information provided through via the website, through telephone calls with UIC BARCELONA staff, through the provision of our services and through forms or any other written or electronic means you fill in.

If we collect personal information about you from third parties, we will bring this to your attention and, if necessary, request your consent to process this data.

If you provide data on third parties, you accept the responsibility of informing them in advance of all the provisions of Article 14 of the General Data Protection Regulation under the conditions established therein.

If we receive information or personal data about you that we have not requested, or that is not relevant for the purposes indicated above, we will destroy or anonymise the information, unless we must are obliged to keep it in accordance with current regulations.

3.4 What happens if you do not provide your information and personal data or do not give consent for data processing
The consent of the person providing personal data constitutes the legal basis for responding to requests to participate in, or questions related to, the INTERNATIONAL WORKSHOP ON FAMILY SUPPORT and subsequent follow-up. The provision of data is voluntary, although failure to provide data will mean that the request, inquiry or complaint cannot be responded to. Therefore, communicating your personal data for these purposes is a necessary requirement for us to respond to requests on this channel.

Legitimacy to process personal data
The legal basis for processing your data for the aforementioned purposes will always be as provided for in Article 6 of the GDPR, i.e.:

  1. Consent of the interested party.
  2. Execution of a contract.
  3. Compliance with the Data Controller’s legal obligations.
  4. Protection of the vital interests of the data subject or another natural person.
  5. The comply with the legitimate interests of the Data Controller or a third party 

If the data processing refers to special category personal data, the legitimacy will always be based on one of the legal bases of Article 9 of the GDPR.

If the user is a minor, they must have the prior consent of their parents or guardians before filling out the forms on the website with their personal data. UIC BARCELONA cannot be held liable for failure to comply with this requirement.

Duration of processing personal data
Generally, the personal data provided will be kept for as long as necessary to fulfil the purposes described in this Privacy Policy, or to respond to any request from the interested parties, unless a longer period is legally permitted or required, or until the deletion of said data is requested by the interested party.

When UIC BARCELONA is considered as the Data Controller, it will ensure that the data being processed:

  • Meet the purpose for which they were collected.
  • Are not incompatible with the purposes that justified their collection and processing.
    Are those that justified their collection and processing.
  • Are not kept indefinitely without justification.
  • Are cancelled when they are no longer necessary for the purpose that justified their collection and processing.

Holding data is considered justified when:

  • The data will be used for a historical and/or statistical purpose.
  • The data could cause harm to the legitimate interests of the data subject or third parties.
  • Regulations impose the obligation to hold data for a specified period of time.
  • The data and documentation serve as proof of an activity or service provided, during the prescribed periods for civil, criminal, administrative or action or otherwise that may derive from the activity or service provided.
  • A longer shelf life has been agreed by the parties concerned.

When there is a legal obligation to keep the data for a certain period of time and/or during the prescribed periods related to the activity or service provided, the University will block the data. The blocked data will be available only to the Public Authorities, Judges and Courts, for any possible liabilities arising from data processing, during the prescribed period for these actions and/or during the legal periods established for this purpose. Once the aforementioned deadlines have been met, the blocked data must be deleted.

When UIC BARCELONA is the Data Processor in accordance with the GDPR, and once the contractual provision that gave rise to the data processing has been fulfilled, the personal data must be destroyed or returned to the Data Controller, as well as any medium or document containing any personal data subject to processing.

As detailed above, the data will not be deleted by the Data Processor when there is a legal provision that requires it to be held, in which case the data must be returned, with the Data Controller guaranteeing the data will be held. The Data Processor will hold the blocked data as long as they could be held liable as a result of the relationship with the Data Controller.

In accordance with these requirements, the following conditions are established:

Periods for holding personal data
Registration for the INTERNATIONAL WORKSHOP ON FAMILY SUPPORT.

  • Period: the personal data on the registration form for the INTERNATIONAL WORKSHOP ON FAMILY SUPPORT will be held for the duration of the organisation of the workshop, as well as for the period that is legally necessary to fulfil the University’s legal obligations.

The data held to manage the customer relationship, and to bill for and provide services, will be held for the entire duration of the contract. Once this relationship has ended, the data may be held for the time required by applicable legislation and for the period covering any eventual liabilities arising from the contract.

Reference regulation: Articles 2 and 6 of Organic Law 6/2001, of 21 December, on Universities and regulations on archives and documentation.

Statistical reports relating to market surveys may be held indefinitely, although they do not include personal data.

For more information on the period for which any of your personal data will be held, you can contact us at the email addresses included in this Privacy Policy.

Transfer of personal data to third parties
The data will be communicated to the following entities:

  • To the financial institutions in charge of handling payments.
  • To the competent public authorities, in the cases provided for under the law and for the purposes defined therein.

We may share or disclose your personal information to third parties for any of the above reasons. Such third parties may be educational establishments, university establishments and their clients, external consultants, suppliers or subcontractors (e.g. the postal service, support services, etc.), in compliance with contractual relations entered into with such third parties, both within and outside the EU/EEA. Likewise, your data may be communicated to third parties as a result of legal obligations or requirements, as well as to courts, tribunals and public administrations where necessary, or to any other third party, person or entity you authorise.

When we need to transfer or disclose your data to third parties, we will maintain our commitment to safeguarding your personal data in accordance with the provisions of this Privacy Policy and will take reasonable measures and precautions to ensure that third parties protect your personal data and maintain its confidentiality. The transfer or communication of your personal data will always be carried out in compliance with legal obligations and on the basis of personal data processing agreements, in order to ensure that your data are not processed for any other purpose than those clearly established and that the necessary security measures are taken.

In the case of international transfers, we will always seek your express consent to transfer your personal data to third parties located outside the country in which we have collected your data (where applicable), except where the transfer is authorised or required by law, regulations or the courts.

We will not share any special category personal data with any person or entity other than UIC BARCELONA, our employees, UIC BARCELONA employees, government agencies, entities with legal obligations or requirements, courts, tribunals and public administrations, or other third parties authorised by law.

Storage and security of your personal data
We may store your personal data on paper or electronic files. We have put safeguards in place, in accordance with the requirements of current regulations, to protect your personal data from misuse, interference, loss, unauthorised access, modification or disclosure. 

UIC BARCELONA applies technical security measures, such as encryption, in cases where this is possible. Likewise, the secure processing of personal data is guaranteed through a number of different systems, such as the secure archiving of original documents and restricting access to personal data to authorised personnel.

In addition, UIC BARCELONA will take reasonable steps to permanently destroy all personal data after the end of its term of use in accordance with this Privacy Policy.

Rights relating to your personal data
UIC BARCELONA ensures that the information it obtains on you is accurate, up-to-date, complete and relevant. You have the right to access and correct this information if it is incorrect, inaccurate, outdated or incomplete. You may also withdraw your consent to the processing of your personal data.

In addition, if you have any questions about this Privacy Policy or wish to access or in any way modify or rectify your personal data, you may contact the Data Protection Officer (DPO) by post at this address: Calle Inmaculada, 22, 08017 Barcelona; or by email at: dpo.@uic.es

Your rights in relation to data processing

  • The right to request access to your personal data.
  • The right to request its rectification or deletion.
  • The right to request the limitation of data processing.
  • The right to object to data processing.
  • The right to data portability.
  • The right to withdraw consent given.

Access, rectification and suppression: Data subjects have the right to access their personal data, and to ask for inaccurate data to be rectified or, where applicable, to request its erasure when the data is no longer necessary to execute the contract, among other reasons.

Limitation: Under certain circumstances, interested parties may request the limitation of the processing of their data, in which case said data will be kept only to handle or respond to complaints.

Objection: Data subjects may object to their data being processed. UIC BARCELONA will no longer process the data, except for legitimate reasons, or defend against any possible claims, and we will keep the data duly blocked for the corresponding period, for as long as legal obligations persist.

Likewise, the interested party has the right to oppose individual automated decisions that could have legal effects or have a significant impact on the interested party.

Data portability: data subjects may request to receive the data held on them, which they have provided to us, and may request request data be sent to another data controller of their choice, in a structured, commonly used and readable format.

When will we respond to your request?
We will respond to requests as soon as possible, within one month of receipt of your request. This period may be extended by a further two months if necessary, depending on the complexity of the request and number of requests received. The Data Controller will inform the data subject of the extension within the first month following the request.

The right to withdraw consent
The interested party has the right to withdraw consent at any time, without affecting the legality of any data processing based on the prior consent given when registering or providing data.

Where to go to exercise your rights
The interested party may exercise their rights by sending a letter with all their data, including a photocopy of their ID or passport and an indication of the right being exercised by contacting this address: UIC BARCELONA, C/Immaculada 22, 08017 – Barcelona, or by sending an email to dpd@uic.es

 The right to complain
We hereby inform you that if you submit a request for the exercise of these rights and consider that it has not been adequately addressed by our institution, you can file a complaint with the Spanish Data Protection Agency in accordance with the procedure detailed on this link: https://sedeagpd.gob.es/sede-electronica-web/vistas/formReclamacionDerechos/reclamacionDerechos.jsf

Electronic communications.
In compliance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, we inform you that the email addresses provided may be used to send information about the University. If you do not wish to receive information or wish to revoke the consent granted for data processing, please do so in the manner indicated above or by contacting the following email address: dpd@uic.es.

Updating our Privacy Policy
We may update, revise or modify this Policy, and the way in which we process your personal data, at any time. The latest version of the Privacy Policy will always be available on our website: www.uic.es. Any updates will be effective from their publication.

Additional information
The User may request additional information about specific data processing measures, the collection and processing of Personal Data, as well as the information contained in this Privacy Policy.

For more information on privacy in general, please visit the website of the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es and the Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades – APDCAT) at www.apdcat.gencat.cat.