Privacy policy. Legal information. UNAV
Privacy policy
The University of Navarra has drawn up this web page to inform you in detail and transparently about the circumstances and conditions of the processing of personal data that it carries out, as well as the rights that you have as a data subject.
You should carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate your understanding and to enable you, where appropriate, to freely and voluntarily determine whether or not you wish to provide your personal data to the University.
Content:
Who is responsible for the processing of your data?
Who is the Data Protection Officer?
Information about your rights and how to exercise them.
Additional information applicable to some treatments.
1. Treatments affecting students or prospective students and their parents/guardians
2. Donations
Who is responsible for the processing of your data?
Your data are collected and will be processed by the University of Navarra, an entity registered in the Register of Universities, Centres and Degrees of the Ministry of Education, Culture and Sport of the Spanish Government under No. 031, with CIF R-31/68001-J.
The information on contact from the University of Navarra is as follows:
Registered Office: Campus Universitario, S/N, Central Building. 31080 Pamplona (Navarra, Spain).
Phone number: (+34) 948 42 56 00
Fax: (+34) 948 42 56 16
e-mail for data protection related communications: dpo@unav.es
Who is the Data Protection Officer?
The University has appointed aData Protection Officer (DPO). The DPO is an independent specialist who ensures that the University's data protection policy rules and regulations is complied with and that the rights and freedoms of individuals in this area are respected. You can contact the DPO at contact with any questions about data protection, to exercise your rights or to pass on your suggestions to the University.
To do so, you can send him an e-mail to the e-mail address dpo@unav.es or write to him by ordinary mail, to the following address: DPO Office, Amigos Building, Campus Universitario, 31080 Pamplona (Navarra, Spain).
Security measures.
The University of Navarra will treat your data in the strictest confidence and will maintain the mandatory duty of secrecy in accordance with the provisions of the applicable rules and regulations , adopting the necessary technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.
In each form or personal data collection document of the University of Navarra you will find the basic information relating to the specific processing carried out, about:
-
The Purpose (what your personal data is collected or processed for).
-
The period for which such personal data will be kept or, where this cannot be stated precisely, the criteria used to determine this period.
-
The Legitimation or legal basis that allows the data to be processed, which must be one of those permitted by the legislation in force.
-
The Recipients, if any, i.e. entities other than the University of Navarra to which the personal data you have provided or part of it is communicated or transferred in order for them to carry out their own processing, e.g. educational authorities for statistical purposes or to manage official qualifications, etc.
-
The list of your rights and how to exercise them (see below section "Additional information on your rights").
Where applicable, such basic information shall also include:
-
Where have your data been obtained from, and what are those data, if not from you?
-
Whether profiling (automated processing to assess personal aspects or predict your professional performance, personal preferences, interests, behaviour, etc.) or automated decisions affecting you are to be made.
-
If for any reason it is intended to transfer your data to countries outside the European Economic Area for which the European Union Data Protection Authorities have not declared the existence of an adequate level of protection.
We recommend that, before completing any subject of form, in electronic or paper format, you carefully read the content of the data protection information that appears on form itself, as well as on this page.
The data requested in the forms are, in general, obligatory (unless otherwise specified) in order to comply with the purposes established for the processing.
Therefore, if the necessary data is not provided or is not provided correctly, these purposes cannot be fulfilled, without prejudice to the fact that you may visit us and/or freely view the content of the Website.
Responsibility of Username.
The Username:
- You guarantee that you are over 16 years of age and that the information you provide to the University of Navarra is true, accurate, complete and up to date. To this effect, the Username is responsible for the veracity of all the data provided and will keep the information provided suitably updated, in such a way that it corresponds to his/her real situation.
- In the event that you provide data on other persons, you guarantee that they have been previously informed of the aspects contained in this document, and that you have obtained their authorisation to provide their data to the University of Navarra for the purposes of the specific processing for which you are providing them.
- shall be liable for any false or inaccurate information provided by you through the Website and for any direct or indirect damage caused to the University or to third parties as a result.
Information about your rights and how to exercise them.
You have the right to:
-
To obtain confirmation as to whether or not personal data concerning him/her are being processed at the University of Navarra, and if so, to know what the data are, what they are used for and where they have been obtained (right of ACCESS).
-
apply for the RECTIFICATION of those that are inaccurate or incomplete. Depending on the case, you will have to provide the necessary documentation to accredit the change you are requesting.
-
Request the CANCELLATION or deletion of your data where legally possible, in particular when they are no longer necessary for the purposes for which they were collected.
-
apply for in the circumstances in which the law permits the LIMITATION of the processing of your data, i.e. marking them in the computer systems to prevent their processing, either temporarily or permanently.
-
In certain circumstances and for reasons related to your particular situation, exercise your right to OPPOSE to the processing of your data. The University will stop processing them, except for compelling legitimate reasons, or the exercise or defence of possible claims.
-
Where applicable, apply for the PORTABILITY of your data.
-
Where your data were obtained for a specific purpose by your CONSENT, withdraw your CONSENT at the time you so wish, without affecting the lawfulness of the processing operations already carried out. Where your data have been obtained for a specific purpose by your CONSENT, you may withdraw your CONSENT at any time, without affecting the lawfulness of the processing operations already carried out.
You may exercise your rights through the Data Protection Officer (DPO), by email or post at the addresses indicated on the corresponding section , indicating the situation in which the processing of your data takes place, the right you wish to exercise and any information or documentation you consider relevant. The University invites you to lodge a complaint with the DPO if you believe that your personal data has been improperly processed, who will investigate it confidentially.
Furthermore, should you consider that any of your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6, 28001-Madrid or through the AEPD's electronic headquarters: https://sedeagpd.gob.es/sede-electronica-web/.
financial aid for the exercise of rights:
-
PDF template to exercise the right of access (to be filled in and sent to dpo@unav.es)
-
PDF template to exercise the right of rectification (to be filled in and sent to dpo@unav.es)
-
PDF template to exercise the right of civil service examination (to be filled in and sent to dpo@unav.es)
-
Cancellation of consent and right of suppression: by means of the links included in the communications or by e-mail to dpo@unav.es.
-
Other rights: e-mail to dpo@unav.es
When so indicated on the forms, the University of Navarra may transfer your data from contact to the following entities, which collaborate in the development of its activities: Asociación de Amigos de la Universidad de Navarra, Fundación Universitaria de Navarra, Fundación para la Investigación Médica Aplicada, Fundación business-Universidad de Navarra and Asociación Centro Tecnológico Ceit-IK4. If you wish, you can consult the activities carried out by each of them on the University's website.
Additional information applicable to some data processing.
1. Treatments affecting students or prospective students and their parents or guardians 2.
In the process of Admissions Office and, if you decide to study with us, during your stay at the University of Navarra, we will ask you for personal data in different occasions (in the same Admissions Office, during the enrollment, and in the subsequent development of the activity professor, when you participate in different activities, etc.).
We process your data for the purposes indicated below: management for the processes of enrollment, registration, administration and custody of the academic transcript , including the application and processing of degrees; management and development of the activity professor and extracurricular activities, including verification of compliance with academic and coexistence obligations by students; management of the national and international mobility of students; management of internships; management of electronic services; audio, video and/or photographic recordings that may eventually be made in the development of academic activities.
These processing operations are legitimized by the legal relationship that you have with the University under the contract of enrollment (art 6.1. b of the General Data Protection Regulation data), and, in some cases, by the legal obligation of the University of Navarra to carry out the processing (art 6.1. c of the General Data Protection Regulation data).
In case of not providing any of the requested data we would not be able to carry out the management of the purposes linked to those data.
In addition, if you have selected the corresponding option at enrollment, you give your consent to the University of Navarra to send you by postal or electronic means communications related to its activities and those of some entities that collaborate with it, which are listed in the section Cesiones (art 6.1.a of the General Regulation on the Protection of Privacy data).
The University of Navarra will communicate part of your personal data to the competent Public Administrations in the cases established by law; to your parents or guardians for the elaboration, sending and collection of the fees and amounts of enrollment, if it is the case, and so that they can carry out an academic follow-up; to the Colegios Mayores in the conditions and for the purposes foreseen in the current legislation; and to the entities that collaborate with the University so that they make, in its case, the mentioned sending.
Likewise, if you request to participate in exchange programs or internships in other entities, your personal data (data identification and contact, data academic and curriculum vitae) will be communicated to the institutions or entities in which you request place, with legitimate basis in the necessity of the treatment for the performance of the requested service (art 6.1. b of the General Regulation of Protection of data).
In the event that the communication involves an international transfer of data personal data to a country that, in the opinion of the European Commission, does not have an adequate level of protection of data, equivalent to that of the European Union, additional safeguards will be applied, such as Contractual Clauses subject approved by the European Commission. Where this is not possible, the exception of art 49.1.c of the General Data Protection Regulation data will apply, on the understanding that the transfer is necessary for the conclusion or performance of a contract, in the interest of the student, between the manager of the processing and another natural or legal person.
You have the right to withdraw your consent, when it is the legal basis for the processing, as well as to exercise the rights listed above on this page. If you have any questions or wish to exercise your rights, please contact dpo@unav.es indicating in the message degree scroll "data students".
Why do we need the details of your parents and/or guardians?
During the processes of Admissions Office and enrollment, we will ask you to answer some questions about your family environment that are required by the Ministry of Education, Culture and Sport for statistical purposes. This information must be provided on a mandatory basis. We also need the data of contact of your parents or guardians to properly manage your enrollment when applicable (for example, to proceed to the collection of the fees academic fees) and to contact them in case of emergency. Optionally, we will also ask you to let us know if you are interested in receiving information, participating or collaborating in the activities of the institutions around the University mentioned above. If you are the one who includes their data in the forms, you must inform them of these clauses of protection of data and, where appropriate, to obtain their consent.
Individuals who collaborate with the University of Navarra by making a donation agree to the processing of their personal data for the purpose of managing their donation. The legitimacy for the treatment is based on the necessity of the same for the execution of its application. Also, with your consent we will keep you informed of the activities of the University and those of institutions in your environment that are listed in the section Transfers. The data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine possible responsibilities derived from the processing. You can exercise your rights by contacting the Delegate for the Protection of data.
Those who fill out any form or subscribe to any information bulletin are informed that the University of Navarra has contracted for the management of most of these mailings and electronic forms the Mailchimp application, offered as a service by business Intuit Inc., based in Mountain View, California. This means that the information provided when filling out the forms may be processed and stored on business servers located in the United States. Intuit Inc. is subject to the obligations on subject for the protection of European personal data by means of Contractual Clauses subject approved by the European Commission. In addition to the information provided by Username itself, information is stored that the University uses to track the performance of mailing campaigns, such as which users have opened e-mail messages or clicked on links they provide. As with any other data staff, individuals may exercise the rights of access, rectification, deletion, etc., listed in the previous sections before the University's Delegate for the Protection of data , dpo@unav.es. More information can be found at: Intuit Inc. Privacy Policy
The University of Navarra may record conversations with the people who answer the call center in order to detect deficiencies and opportunities for improvement, based on the legitimate interest of improving the quality of the attention provided by this means. The recordings will be kept for a maximum of 6 months and will be deleted. The users of this service can exercise the rights mentioned in the previous sections by sending a message to the Delegate of Protection of data, indicating in the degree scroll of the same "Telephone Attention".