GRADOS Y POSGRADOS VILLANUEVA, S.A.(hereinafter GRAPOVISA or UNIVERSIDAD VILLANUEVA) undertakes to process your personal data as confidential, lawful, loyal, transparent, proper, relevant, restricted, exact and updated in conformity with the existing data protection regulative law.
Upon giving us your personal data, you agree that you have read and understood the terms related to the information on personal data protection thereby exposed and on the data protection clauses with regard to filling out registration forms on the website.
GRADOS Y POSGRADOS VILLANUEVA, S.A.accepts the responsibility of abiding by theRegulation(EU) 2016/679 dated April 27, 2016 regarding the protection of naturalpersons with respect to the processing and free movement of their personal data(GDPR)based on Organic Law 3/2018 dated December 5 and the rest of applicable regulations concerning personal data protection and digital rights security.
• Personal Data Controller:
GRADOS Y POSGRADOS VILLANUEVA, S.A.
CIF: A86787850
Address: Calle Costa Brava, nº 2 28034 Madrid
Email: infodatos@villanueva.edu
Data Protection Officer: dpd@villanueva.edu
Main Purposes of Personal Data Processing
Personal Data of Students and their Families
This serves to keep on track, develop and monitor the relationship that may be established between the entity and the students and their families as well as to send information regarding the services, activities and important events ofGRAPOVISA or UNIVERSIDAD VILLANUEVA.
Data Associated with the Academic Activity
All necessary personal data will be handled individually for the management of research and academic activity including the process and development of auxiliary activities such as companyinternships and others; the management, processing, payment and monitoring of scholarships and grants; the furtherance and enhancement of other activities whether directly or indirectly organized by the University for its actual and former students. The main recipients of these personal data are the Educational Administration and those othersin the course of legal and judicial obligations.
Contact Information
Compiled through different registration forms such as requests for information, suggestion forms or complaint sheets so as to process your application or to keep the relationship with the providers as legal persons.
Attendance to Events, Courses or Masters
This serves to keep on track, develop and monitorthe relationship that may be established betweenGRAPOVISA and the attendees to events, courses or masters as well as to send information regarding the services, training activities and important events of GRAPOVISA.
Candidateor Job Applicant’s Data
Designed to process your participation in the selection processes of staff carried out by GRAPOVISAas well as to send information regarding the services, training activities and important events of GRAPOVISA.
Collaborator and Employee’s Information
This serves to comply with the employment relationship, contract or precontract, that maintains the employees, grantees, and collaborators within GRAPOVISA.
Rapporteur’s Information
This serves to keep on track, develop, and monitor the relationship that may be established between the two parties, to comply with legal obligations and to send information regarding the services, training activities and important events of GRAPOVISA.
Provider’s Information
This serves to initiate, keep on track, develop and monitor the relationship that may be established between GRAPOVISA and its goods and service providers as well as to comply with the legal responsibilities that lie within the commercial relationship.
Former Student’s Data
For first-time registrationunder the legitimate interest of GRAPOVISA.
How We Collect Your Personal Data
Information that You Provide Us
Done through our website, by means of registration or filling out forms, printed form sheets, by subscribing to our newsletter, or through giving us your email. Allthese registry forms on the web means giving us your explicit consent regarding the matter in accordance with Art.7 of GDPR. GRAPOVISA will keep a record of that user’s voluntary act.
Upon collecting your data, you will be advised of our Privacy Policy.
Information Collected through Visiting our Website
We gather and store restricted personal information and anonymous global statistics of those users who visitour website, whether by providing us with such information directly or simply by surfing through our website. For more information, see the section on cookies of this document and our Policy on Cookies.
Legal Standing for the Processing of your Personal Data
The legal foundations for the process of your personal data are:
The maintenance of legal relationships, contracts, precontracts or such with students, personnel and third parties.
Prior consent, express and explicit, free and granted whenever necessary, without compromising the completion of the contract or any preexisting relationship with the Entity due to data concession or its withdrawal.
Abidance by various legal or judicial responsibilities.
The legitimate interest of GRAPOVISA, for instance, on grounds of control and security reasons, management of consultation or application.
Storage Period
Data will be stored and processed for as long as they are necessary in conformity with the objectives for which the data are being collected and in accordance with the judicial basis of the processing within the limits of deadline cancelations and with applicable legislation in each case.
Your personal data will be kept recorded while there is an existing relationship between GRAPOVISA and the interested individual or while the latter does not exercise his/her right to deletion, cancelation, and/or restriction of the processing. In such cases, your data will be blocked and will not be used whereas it may be retrieved and recovered, ifnecessary, for the exercise of defense and claims or any kind of judicial, legal or contractual responsibility regarding its processing.
The personal data associated toadmission process will be deleted every year once the proceeding has been completed, except when the interested individual has given his/her consent to keep them to serve other purposes such as information delivery.
Universidad Villanueva will keep the academic information permanently for certification purposes. The written exams will be guarded for two years.
Recipients of Personal Data
Personal data will be communicated, whenever necessary, by request of the interested individual, or by legal obligation, to the appropriate administrative departmentsfor every case (education, tax, employment, etc.), to the Judges and Courts, or to whomever it may correspond in compliance with legal matters.
Villanueva University also uses services, such as Facebook Custom Audiences, and other Google digital marketing services to provide users of these digital platforms with information about the University’s activities and events, and which may process personal data outside the European Union.
GRAPOVISA relays these personal data to other service providers who may act as responsible for the data processingat the expense of GRAPOVISA.These third-party companies only have access to personal information needed to carry out the service being provided.
GRAPOVISA selects the people in-charge of processing who offer enough guaranty that the insertion and maintenance of proper technical and organizational measures assigned to a contract or to an equivalent judicial act are in accordance with the GDRP, and that which guarantee the protection of the rights of the interested individual.
GRAPOVISA, with a view to elaborate statistics, may process anonymous personal data to an extent that these data can no longer be attributed to a certain interested individual.
International Transfer
When students participate in international programs that require international transfer of personal data to third-party countries outside the European Economic Area (EEA),we inform that, as appropriate,and in conformity with the principle of minimizing data, only the adequate, relevant and restricted data will be providedfor the purpose for which it was processed.
The judicial grounds of the transfer will be: the execution of a contract between the student and the University or the enforcement of precontractual measures established upon request of the interested individual, or when an execution or completion of a contract is deemed necessary in the interest of the individual, between the University and another natural or legal person, or eventually, with express prior approval of the interested individual.
Rights of the Interested Individual
1. Which Rights can You Exercise in Relation with the Processing of Your Data?
- Right to request access to your personal data
- Right to demand modification or deletion
- Right to demand restriction of the process
- Right to object to the process
- Right to data portability
- Right to consent withdrawal
Access/Modification and Deletion:
The interested individuals have a right to access their personal data as well as demand modification of the inexact data, or where appropriate, demand deletion when, among other reasons, the data are no longer necessary for the execution of the judicial relationship.
Limitation:
In certain circumstances, the interested individuals may request limitation of the processing of their data. In which case, theseare only maintained for the exercise or defense of claims.
Objection:
The interested individual may object to the processing of his/her personal data. In this case, GRAPOVISA will stop processing them except for imperative or legitimate purposes,or for the exercise or defense against any possible claims. The data will be properly blocked for as long as the corresponding period to legal obligations may require.
Likewise, the interested individual has the right to object to the implementation of automated individual decisions that may cause legal consequences or that may affect him/her significantly.
Portability:
The interested individuals may request and receive the data that concern them, and that which have been provided or solicited to be sent to another party of their choice responsible for the processing in a common structured and machine-readable format.
2. When Do We Respond to Your Requests?
We will respond to your requests as soon as possible, and by all means, within the period of one month since the reception of your request. Such period may be extended to two months, if necessary, taking into account the complexity and number of applications. You will be informed by the person-in-charge about the need of an extension within the first month of application.
3. Do You have the Right to Withdraw Your Consent?
The interested individual has the right to withdraw his/her consent at any moment without affecting the lawfulness of the processing based on the approval given at the time of subscribing or providing of data.
4. Where Shall I Go to Exercise My Rights?
To exercise your rights, you may send a written expression with all your data including a photocopy of your national I.D. card or passport stating your exact request or the particular right you wish to exercise with the subject: “PROTECCION DE DATOS” and addressed to POSGRADOS VILLANUEVA, S.A., Costa Brava, nº 2 28034 Madrid, or by email at infodatos@villanueva.edu
5. ¿Do You Have a Right to Claim?
When your rights have been unsatisfied, you have the right to lodge a complaint to the Agencia Española de Proteccion de Datos (Spanish Agency for Data Protection).
Responsibilities
GRAPOVISA accepts no responsibility for data and content stored in forums, social networks or any other means that allow third parties to publish information found on the webpage separately from the service provider.
However, taking into account articles 11 and 16 of Act 34/2002,Servicios de la Sociedad de la Información y del Comercio Electrónico (Informationand E-commerce Society Services), GRAPOVISAundertakes to withdraw or block any content that may affect or go against the international or national legislation, the rights of the third parties, or public moral and order. In the event that the user considers that any content on the website may be classified as mentioned above, it is advisable to notify the web administrator immediately.
GRAPOVISA holds itself free from anyliability derived from the information published on their website when the information has been manipulated or inserted by a third party.
Security
GRADOS Y POSGRADOS VILLANUEVA, S.A., adopts and updates organizational and technical measures that guarantee data security; that is to say, the integrity and confidentiality, the protection against illicit or unauthorized processing and against its loss, destruction, or accidental damage in conformity with the provisions of the existing legislations.
Electronic Communications
In compliance with the Act 34/2002 dated July 11, Servicios de la Sociedad de la información y comercio electrónico (Information and E-commerce Society Services), we inform you that all emails may be used for sending information about Universidad Villanueva. If you do not want to receive information or would like to withdraw your consent given to us for the processing of your data, you may do so by clicking:
- a) The option “unsubscribe” found in each message received
- b) A fill-out form to “manage preferences” on interesting content associated with each message
- c) An email addressed directly to infodatos@villanueva.edu indicating your preferences
Cookies
As a consequence of surfing through the pages of our website, GRAPOVISA collects information considered as personal data by the law considering the fact that any identifiable natural person is all that which can be determined, whether directly or indirectly, by a name, an I.D. number, location data or online user identifier.
Through cookies and similar tracking device technology, such as web beacons, we collect and store limited personal information and anonymous global statistics of all those users who visit our website—whether the information has been directly given to us or simply by surfing through our website—to manage the webpage, analyze tendencies, trace user movements across the pages and gather demographic information on the origin of users in general. For more information, see our Policy on Cookies.
Modifications to the Current Information on Data Protection
GRADOS Y POSGRADOS VILLANUEVA, S.A. reserves the right to modify its Privacy Policy in accordance with the currentlegislation applicable at any given time. Any modifications will be published on the website.
Last updated:
29/06/2020