Privacy policy
The University of Navarra has drawn up this web page to inform you in detail and transparently about the circumstances and conditions of the processing of personal data that it carries out, as well as the rights that you have as a data subject.
You should carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate your understanding and to enable you, where appropriate, to freely and voluntarily determine whether or not you wish to provide your personal data to the University.
Content:
Who is responsible for the processing of your data?
Who is the Data Protection Officer?
Information about your rights and how to exercise them.
Additional information applicable to some treatments.
1. Treatments affecting students or prospective students and their parents/guardians
3. Donations
Who is responsible for the processing of your data?
Your data are collected and will be processed by the University of Navarra, an entity registered in the Registry of Universities Centers and Qualifications of the Ministry of Science, Innovation and Universities of the Government of Spain under No. 031, with CIF R-31/68001-J.
The information on contact from the University of Navarra is as follows:
Registered Office: Campus Universitario, S/N, Central Building. 31080 Pamplona (Navarra, Spain).
Phone number: (+34) 948 42 56 00
Fax: (+34) 948 42 56 16
e-mail for data protection related communications: dpo@unav.es
Who is the Data Protection Officer?
The University has appointed aData Protection Officer (DPO). The DPO is an independent specialist who ensures that the University's data protection policy rules and regulations is complied with and that the rights and freedoms of individuals in this area are respected. You can contact the DPO at contact with any questions about data protection, to exercise your rights or to pass on your suggestions to the University.
To do so, you can send him an e-mail to the e-mail address dpo@unav.es or write to him by ordinary mail, to the following address: DPO Office, Amigos Building, Campus Universitario, 31080 Pamplona (Navarra, Spain).
Security measures.
The University of Navarra will treat your data in the strictest confidence and will maintain the mandatory duty of secrecy in accordance with the provisions of the applicable rules and regulations , adopting the necessary technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.
In each form or personal data collection document of the University of Navarra you will find the basic information relating to the specific processing carried out, about:
-
The Purpose (what your personal data is collected or processed for).
-
The period for which such personal data will be kept or, where this cannot be stated precisely, the criteria used to determine this period.
-
The Legitimation or legal basis that allows the data to be processed, which must be one of those permitted by the legislation in force.
-
The Recipients, if any, i.e. entities other than the University of Navarra to which the personal data you have provided or part of it is communicated or transferred in order for them to carry out their own processing, e.g. educational authorities for statistical purposes or to manage official qualifications, etc.
-
The list of your rights and how to exercise them (see below section "Additional information on your rights").
Where applicable, such basic information shall also include:
-
Where have your data been obtained from, and what are those data, if not from you?
-
Whether profiling (automated processing to assess personal aspects or predict your professional performance, personal preferences, interests, behaviour, etc.) or automated decisions affecting you are to be made.
-
If for any reason it is intended to transfer your data to countries outside the European Economic Area for which the European Union Data Protection Authorities have not declared the existence of an adequate level of protection.
We recommend that, before completing any subject of form, in electronic or paper format, you carefully read the content of the data protection information that appears on form itself, as well as on this page.
The data requested in the forms are, in general, mandatory (unless otherwise specified) to fulfill the purposes established for the treatment. If the necessary data is not provided or is not provided correctly, these purposes cannot be fulfilled.
Responsibility of Username.
The Username:
- You guarantee that you are over 16 years of age and that the information you provide to the University of Navarra is true, accurate, complete and up to date. To this effect, the Username is responsible for the veracity of all the data provided and will keep the information provided suitably updated, in such a way that it corresponds to his/her real situation.
- In the event that you provide data of other persons, you guarantee that they have been previously informed of the aspects contained in this document, and that you have obtained their authorization to communicate their personal data to the University of Navarra, so that they may be processed for the specific purposes for which they have been provided.
- shall be liable for any false or inaccurate information provided by you through the Website and for any direct or indirect damage caused to the University or to third parties as a result.
Information about your rights and how to exercise them.
You have the right to:
-
To obtain confirmation as to whether or not personal data concerning him/her are being processed at the University of Navarra, and if so, to know what the data are, what they are used for and where they have been obtained (right of ACCESS).
-
apply for the RECTIFICATION of those that are inaccurate or incomplete. Depending on the case, you will have to provide the necessary documentation to accredit the change you are requesting.
-
Request the CANCELLATION or deletion of your data where legally possible, in particular when they are no longer necessary for the purposes for which they were collected.
-
apply for in the circumstances in which the law permits the LIMITATION of the processing of your data, i.e. marking them in the computer systems to prevent their processing, either temporarily or permanently.
-
In certain circumstances and for reasons related to your particular situation, exercise your right to OPPOSE to the processing of your data. The University will stop processing them, except for compelling legitimate reasons, or the exercise or defence of possible claims.
-
Where applicable, apply for the PORTABILITY of your data.
-
Where your data were obtained for a specific purpose by your CONSENT, withdraw your CONSENT at the time you so wish, without affecting the lawfulness of the processing operations already carried out. Where your data have been obtained for a specific purpose by your CONSENT, you may withdraw your CONSENT at any time, without affecting the lawfulness of the processing operations already carried out.
You may exercise your rights through the Data Protection Officer (DPO), by email or post at the addresses indicated on the corresponding section , indicating the situation in which the processing of your data takes place, the right you wish to exercise and any information or documentation you consider relevant. The University invites you to lodge a complaint with the DPO if you believe that your personal data has been improperly processed, who will investigate it confidentially.
Furthermore, should you consider that any of your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6, 28001-Madrid or through the AEPD's electronic headquarters: https://sedeagpd.gob.es/sede-electronica-web/.
financial aid for the exercise of rights:
-
PDF template to exercise the right of access (to be filled in and sent to dpo@unav.es)
-
PDF template to exercise the right of rectification (to be filled in and sent to dpo@unav.es)
-
PDF template to exercise the right of civil service examination (to be filled in and sent to dpo@unav.es)
-
Cancellation of consent and right of suppression: by means of the links included in the communications or by e-mail to dpo@unav.es.
-
Other rights: e-mail to dpo@unav.es
When indicated on the forms, the University of Navarra may transfer its contact data to the following entities, which collaborate in the development of its activities: association of Friends of the University of Navarra, Fundación Universitaria de Navarra, Fundación para la research Médica Aplicada, Fundación business de Navarra and association Centro Tecnológico Ceit. If you wish, please consult the University's website for the activities carried out by each of them.
Additional information applicable to some data processing.
1. Treatments affecting students or prospective students and their parents or guardians 2.
In the admissions process and, if you decide to study with us, during your stay at the University of Navarra, we will ask you for personal data on different occasions (at the time of admission, during enrollment, and in the subsequent development of the professor activity, when you participate in activities, exchange programs, employment or internship applications, etc.).
We process your data for the following purposes: management of enrollment, registration, administration and custody of the academic transcript , including the application and processing of diplomas; management and development of professor and extracurricular activities, including verification of students' compliance with academic and coexistence obligations; management of national and international student mobility ; management of internships; management of electronic services; audio, video and/or photographic recordings that may be made during the development of academic activities.
These processing operations are legitimized by the legal relationship with the University under the enrollment contract (art. 6.1. b of the General data Protection Regulation), and, in some cases, by the legal obligation of the University of Navarra to carry out the processing (art. 6.1. c of the General data Protection Regulation).
In case of not providing any of the requested data we would not be able to carry out the management of the purposes linked to those data.
In addition, if you have selected the corresponding option when enrollment, you give your consent to the University of Navarra to send you by postal or electronic means communications related to its activities and those of some entities that collaborate with it, which are listed in the section Transfers (art 6.1.a of the General data Protection Regulation).
The University of Navarra will communicate part of your personal data to the competent Public Administrations in the cases established by law; to your parents or guardians for the elaboration, sending and collection of fees and enrollment amounts, if applicable, and so that they can carry out an academic follow-up; to the Colegios Mayores under the conditions and for the purposes foreseen in the authorization of transfer, if you request information about them; and to the entities that collaborate with the University so that they can send, if applicable, the aforementioned information.
Likewise, if you request to participate in exchange programs, internships in other entities, or similar situations, your personal data data identification and contactdata , academic data and curriculum vitae) will be communicated to the institutions or entities in which you apply for a place, based on the legitimate need of the processing for the performance of the requested service (art. 6.1. b of the General data Protection Regulation). When the communication involves an international transfer of personal data to a country which, in the opinion of the European Commission, does not have an adequate level of data protection equivalent to that of the European Union, additional safeguards will be applied, such as subject contractual clauses approved by the European Commission. When this is not possible, the exception of art 49.1.c of the General data Protection Regulation will be applied, on the understanding that the transfer is necessary for the conclusion or performance of a contract, in the interest of the student, between the manager of the processing and another natural or legal person.
You have the right to withdraw your consent, when it is the legal basis for the processing, as well as to exercise the rights listed above on this page. If you would like any clarification or to exercise your rights, please contact dpo@unav.es indicating in the degree scroll of the messagedata students".
Why do we need data from their parents and/or guardians?
During the admission and enrollment processes, we will ask you to answer some questions about your family environment that are required by the Ministry of Science, Innovation and Universities for statistical purposes. This information must be provided on a mandatory basis. We also need the contact data of your parents or guardians in order to properly manage your enrollment when necessary (e.g. to proceed with the collection of tuition fees ) and to contact them in case of emergency. Optionally, we will also ask you to let us know if you are interested in receiving information, participating or collaborating in the activities of the University's institutions mentioned above. If you are the one who includes your data in the forms, you must inform them of these data protection clauses and, where applicable, obtain their consent.
The registration in Own Teachings can be done through two processes:
Option 1: With biometrics: The interested party grants express consent to the University of Navarra to process personal data in order to verify that his or her identity is authentic and to fill in the registration automatically. This processing includes the use of biometric techniques to compare a facial image (selfie) of the data subject with his or her identity document, check the validity of this document, and obtain from this document the basic identification data through optical character recognition. The processing is carried out on the basis of the data subject's express consent to the processing of special categories of data (art. 6.1.a and 9.2.a of the GDPR). The biometric data will be used exclusively at the time of comparison, without being stored.
Option 2: By guide: The interested party gives his express consent to the University of Navarra to process his personal data in order to verify his identity and fill in registration form by guide. You must upload to the server an image of your ID card and a photograph, as well as enter your data using a form. A person will manually check the data later and verify the validity of the identification document. The processing is carried out on the basis of the data subject's express consent to the processing of his/her data (art. 6.1.a of the RGPD).
In both cases, the interested party may withdraw his/her consent at any time, as well as exercise the rights indicated in the corresponding section of this policy. The image of your National Identity Card, the photograph of the person concerned and your identification data will be kept until the person concerned completes the programs of study, plus the time required by law. Some data will be kept indefinitely, unless otherwise indicated by the interested party, are the following: identification and academic data , in order to issue certificates of the programs of study carried out; identification and contact data , in order to keep the interested party informed about similar products or services.
In the event that the enrollment is not completed, the images of the identity document and the photograph of the interested party will be deleted within a maximum period of 1 year.
Individuals who collaborate with the University of Navarra by making a donation agree to the processing of their personal data for the purpose of managing their donation. The legitimacy for the treatment is based on the necessity of the same for the execution of its application. Also, with your consent we will keep you informed of the activities of the University and those of institutions in your environment that are listed in the section Transfers. The data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine possible responsibilities derived from the processing. You can exercise your rights by contacting the Delegate for the Protection of data.
Those who fill out a form or subscribe to a bulletin are informed that the University of Navarra has contracted the Mailchimp application for the management of most of these electronic mailings and forms, which is offered as a service by the business Intuit Inc. based in Mountain View, California. This means that the information provided when filling out the forms may be processed and stored on servers of this business located in the United States. Intuit Inc. is subject to European data protection obligations through subject Contract Clauses approved by the European Commission. In addition to the information provided by the Username itself, information is stored that the University uses to track the performance of mailing campaigns, such as which users have opened e-mail messages or clicked on links provided. As with any other staff data, individuals may exercise the rights of access, rectification, deletion, etc., listed in the previous sections before the data Protection Delegate of the University, dpo@unav.es. More information can be found at: Intuit Inc. Privacy Policy.
The University of Navarra makes available to the academic community and researchers various personal collections that it has received or has custody of, of different origins, chronologies and themes. In order to facilitate their dissemination, many of them have been digitized or are in the process of being digitized, and have been provided with description tools that can be accessed through the Personal Collections web page. When the publication involves the processing of personal data , this is done for the purposes of file in the public interest, scientific or historical research or statistical purposes, in accordance with article 89 of the European data Protection Regulation. Data subjects may exercise their right to object to the processing or to limit its purpose by sending an e-mail to dpo@unav.es.
The University of Navarra may record conversations with the people who answer the call center in order to detect deficiencies and opportunities for improvement, based on the legitimate interest of improving the quality of care provided by this means. The recordings will be kept for a maximum of 6 months and will be deleted. The users of this service can exercise the rights mentioned in the previous sections by sending a message to the data Protection Delegate, dpo@unav.es indicating in the degree scroll of the same "Telephone Attention".