Data protection

Privacy policy

The University of Navarra has drawn up this web page to inform you in detail and transparently about the circumstances and conditions of the processing of personal data that it carries out, as well as the rights that you have as a data subject.

You should carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate your understanding and to enable you, where appropriate, to freely and voluntarily determine whether or not you wish to provide your personal data to the University.


Who is responsible for the processing of your data?

Who is the Data Protection Officer?

Basic information.

Additional information about your rights.


Additional information applicable to some treatments.

                        1. Treatments affecting students or prospective students and their parents/guardians

                        2. Donations

                        3. Submissions and forms

                        4. Telephone service

Who is responsible for the processing of your data?

Your data are collected and will be processed by the University of Navarra, an entity registered in the Register of Universities, Centres and Degrees of the Ministry of Education, Culture and Sport of the Spanish Government under No. 031, with CIF R-31/68001-J.

The information on contact from the University of Navarra is as follows:

Registered Office: Campus Universitario, S/N, Central Building. 31080 Pamplona (Navarra, Spain).

Phone number: (+34) 948 42 56 00

Fax: (+34) 948 42 56 16

e-mail for data protection related communications:

Who is the Data Protection Officer?

The University has appointed aData Protection Officer (DPO). The DPO is an independent specialist who ensures that the University's data protection policy rules and regulations is complied with and that the rights and freedoms of individuals in this area are respected. You can contact the DPO at contact with any questions about data protection, to exercise your rights or to pass on your suggestions to the University.

To do so, you can send him an e-mail to the e-mail address or write to him by ordinary mail, to the following address: DPO Office, Amigos Building, Campus Universitario, 31080 Pamplona (Navarra, Spain).

Security measures.

The University of Navarra will treat your data in the strictest confidence and will maintain the mandatory duty of secrecy in accordance with the provisions of the applicable rules and regulations , adopting the necessary technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.

Basic information.

In each form or personal data collection document of the University of Navarra you will find the basic information relating to the specific processing carried out, about:

  • The Purpose (what your personal data is collected or processed for).

  • The period for which such personal data will be kept or, where this cannot be stated precisely, the criteria used to determine this period.

  • The Legitimation or legal basis that allows the data to be processed, which must be one of those permitted by the legislation in force.

  • The Recipients, if any, i.e. entities other than the University of Navarra to which the personal data you have provided or part of it is communicated or transferred in order for them to carry out their own processing, e.g. educational authorities for statistical purposes or to manage official qualifications, etc.

  • The list of your rights and how to exercise them (see below section "Additional information on your rights").

Where applicable, such basic information shall also include:

  • Where have your data been obtained from, and what are those data, if not from you?

  • Whether profiling (automated processing to assess personal aspects or predict your professional performance, personal preferences, interests, behaviour, etc.) or automated decisions affecting you are to be made.

  • If for any reason it is intended to transfer your data to countries outside the European Economic Area for which the European Union Data Protection Authorities have not declared the existence of an adequate level of protection.

We recommend that, before completing any subject of form, in electronic or paper format, you carefully read the content of the data protection information that appears on form itself, as well as on this page.

The data requested in the forms are, in general, obligatory (unless otherwise specified) in order to comply with the purposes established for the processing. 

Therefore, if the necessary data is not provided or is not provided correctly, these purposes cannot be fulfilled, without prejudice to the fact that you may visit us and/or freely view the content of the Website.

Responsibility of Username.

The Username:

- You guarantee that you are over 16 years of age and that the information you provide to the University of Navarra is true, accurate, complete and up to date. To this effect, the Username is responsible for the veracity of all the data provided and will keep the information provided suitably updated, in such a way that it corresponds to his/her real situation.

- In the event that you provide data on other persons, you guarantee that they have been previously informed of the aspects contained in this document, and that you have obtained their authorisation to provide their data to the University of Navarra for the purposes of the specific processing for which you are providing them.

- shall be liable for any false or inaccurate information provided by you through the Website and for any direct or indirect damage caused to the University or to third parties as a result.

Additional information about your rights.

You have the right to:

  • To obtain confirmation as to whether or not personal data concerning him/her are being processed at the University of Navarra, and if so, to know what the data are, what they are used for and where they have been obtained (right of ACCESS).

  • apply for the RECTIFICATION of those that are inaccurate or incomplete. Depending on the case, you will have to provide the necessary documentation to accredit the change you are requesting.

  • Request the CANCELLATION or deletion of your data where legally possible, in particular when they are no longer necessary for the purposes for which they were collected.

  • apply for in the circumstances in which the law permits the LIMITATION of the processing of your data, i.e. marking them in the computer systems to prevent their processing, either temporarily or permanently.

  • In certain circumstances and for reasons related to your particular situation, exercise your right to OPPOSE to the processing of your data. The University will stop processing them, except for compelling legitimate reasons, or the exercise or defence of possible claims.

  • Where applicable, apply for the PORTABILITY of your data.

  • Where your data were obtained for a specific purpose by your CONSENT, withdraw your CONSENT at the time you so wish, without affecting the lawfulness of the processing operations already carried out. Where your data have been obtained for a specific purpose by your CONSENT, you may withdraw your CONSENT at any time, without affecting the lawfulness of the processing operations already carried out.

You may exercise your rights through the Data Protection Officer (DPO), by email or post at the addresses indicated on the corresponding section , indicating the situation in which the processing of your data takes place, the right you wish to exercise and any information or documentation you consider relevant. The University invites you to lodge a complaint with the DPO if you believe that your personal data has been improperly processed, who will investigate it confidentially.

Furthermore, should you consider that any of your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6, 28001-Madrid or through the AEPD's electronic headquarters:    


When so indicated on the forms, the University of Navarra may transfer your data from contact to the following entities, which collaborate in the development of its activities: Asociación de Amigos de la Universidad de Navarra, Fundación Universitaria de Navarra, Fundación para la Investigación Médica Aplicada, Fundación business-Universidad de Navarra and Asociación Centro Tecnológico Ceit-IK4. If you wish, you can consult the activities carried out by each of them on the University's website.

Additional information applicable to some data processing.

1. Treatments affecting students or prospective students and their parents or guardians 2.

During the admission process and, if you decide to study with us, during your stay at the University of Navarra, we will ask you for your personal data on different occasions (for admission, for enrollment, and the subsequent development of the activity professor, for your participation in different activities, etc.).

We process your data for the main purpose of managing your studies at our University. This processing is legitimised by the legal relationship you have with us.

We also want to keep you informed of our activities, so that you can participate or collaborate in those that interest you. In order to send you information about our activities, we need your consent.

Likewise, we would like to keep contact with you once you have finished your stay at the University of Navarra. In this sense, we would like you to authorise us to process your data for activities of the Alumni Association and alumni , as well as to share your data with the entities listed in section Cesiones.

Why do we need the details of your parents and/or guardians?

During the admission processes and enrollment, we will ask you to answer some questions about your family background that are required by the Ministry of Education, Culture and Sport for statistical purposes. This information must be provided on a compulsory basis.

We also need to know the personal details of your parents or guardians in order to manage your enrollment (e.g. to proceed to the collection of the fees fees) and to contact them in case of emergency.

Optionally, we will also ask you to let us know if you are interested in receiving information, participating or collaborating in the activities of the institutions around the University mentioned in section above.

Who can access your data?

In addition to you, of course, your teachers and some University employees (e.g. academic administrators, Career Services staff, etc.) will have access to your data at development in the course of their duties.

The University of Navarra notifies academic grades exclusively to students, to their parents or guardians, when requested for the purposes of processing the payment of the enrollment and academic follow-up, and to public administrations and authorised educational centres (for example, in the event that you request a transfer from transcript academic).

Communications of data to other entities

In compliance with the rules and regulations in force, we must communicate your data to different Public Administrations (mainly to the Ministry of Education, Culture and Sport).

In addition, during your time at the University, we may transfer some of your data information to other university or educational institutions or entities that collaborate with us (for example, in order to manage internship programs or academic or extracurricular activities, student exchange programs, or, in the case of the Colegios Mayores, so that they can provide you with better services). In some cases, these may be universities or other entities located in countries that, in the opinion of the European Commission, do not have an adequate level of protection of subject personal data .

Likewise, the University may notify your personal details to the Social Security in order to manage the School Insurance. In the event of an accident during an activity organised by the University of Navarra, we will also provide your details for the management and processing of your health insurance attendance .

In the event that you register for an event in which third parties are involved as organisers and/or sponsors, the data may be processed by these entities for the management of the event and, on occasions, additionally, for other purposes determined by these entities. The University of Navarra will not be responsible for those purposes additional to the organisation of the event, outside its own activity. 

2. Donations

Those who collaborate with the University of Navarra by making a donation agree to the processing of their personal data for the purpose of managing their donation. The legitimacy for the processing is based on the execution of your request. Likewise, with your consent, we will keep you informed of the activities of the University and those of the institutions around you, which are listed at section Cesiones. The data will be kept for the time necessary to fulfil the purpose for which they were collected and to determine possible liabilities arising from the processing. You can exercise your rights by contacting the Data Protection Delegate.

3. Submissions and forms

Those who fill out any form or subscribe to any newsletter are informed that the University of Navarra has contracted the Mailchimp application for the management of most of these electronic mailings and forms, which is offered as a service by business The Rocket Science Group, LLC, based in Atlanta, Georgia, United States. This means that the information provided when filling out the forms may be processed and stored on business servers located in the United States. The Rocket Science Group LLC is subject to the obligations on subject for the protection of personal data under the "Privacy Shield" between the European Union and the United States(see The Rocket Sciencie in Privacy Shield list). In addition to the information provided by Username itself, information is stored which the University uses to track the performance of mailing campaigns, such as which users have opened e-mail messages or clicked on links. As with any other personal data, individuals can exercise their rights of access, rectification, deletion, etc., as listed in the previous sections. More information is available at: Mailchimp Privacy Policy

4. Call Center

The University of Navarra may record conversations with the people who answer the call center in order to detect deficiencies and opportunities for improvement, based on the legitimate interest of improving the quality of the attention provided by this means. The recordings will be kept for a maximum of 6 months and will be deleted. The users of this service can exercise the rights mentioned in the previous sections by sending a message to the Delegate of Protection of data, indicating in the degree scroll of the same "Telephone Attention".