The data controller is the Universidad Francisco de Vitoria (UFV).

Contact details: Universidad Francisco de Vitoria. Secretaría General. Ctra. M-515 Pozuelo-Majadahonda Km. 1,800; 28223, Pozuelo de Alarcón (Madrid).

Contact details of the data protection officer: dpd@ufv.es

The Universidad Francisco de Vitoria will process personal data for the following purposes:

• To manage your registration for the Open Reason Awards.
• To invite you to future activities organised by the Universidad Francisco de Vitoria and to send you information that may be of interest to you. To publish videos and images on the university’s different websites and social media where you may appear as a result of your participation in the university’s various activities (events related to awards, classes, conferences, etc.). Announcements and information may also be sent by electronic means (SMS, email, student portal and social media).

The legal basis for the processing is the consent of the data subject, which requires that the relevant boxes on the registration form be marked for this to take place.

Personal data will be processed for the following periods:

• For as long as the consent granted is not revoked or the processing carried out is not opposed.
• In relation to participants and works submitted for the awards, they will be kept indefinitely.

The Universidad Francisco de Vitoria has a number of application and computer support providers who may have access to personal data in the course of performing their duties under this contract. The Universidad Francisco de Vitoria will always have a data access contract signed with the aforementioned providers, in accordance with the requirements of Article 28 of the General Data Protection Regulation. This will provide sufficient guarantees in the processing carried out by these providers. Some of the providers are based outside the European Union. In light of this, the Universidad Francisco de Vitoria requests additional guarantees in line with the international transfer provisions set out in the General Data Protection Regulation, Privacy Shield www.privacyshield.gov.

Any individual has the right to request information regarding the processing of their data, access their personal data, request the rectification of inaccurate data, or, when applicable, request deletion. This right is exercised when the data are no longer necessary for the purposes for which they were collected or when the data subject withdraws their consent.

In certain cases, the data subject may request the limitation of the processing of their data. In such instances, we will only retain the data in accordance with the applicable regulations.

In certain cases, you may exercise your right to data portability. This will be provided in a structured, commonly used, or machine-readable format to you or the new data controller you designate.

You have the right to withdraw your consent at any time for any of the processing activities for which you have provided consent.

To exercise your rights, you must send a letter signed electronically or accompanied by a photocopy of your ID card. If you are acting through a representative, this letter must be accompanied by sufficient power of attorney, as well as a copy of your ID card or signed electronically.

These letters must be submitted in person at the University Registry or sent by mail to the address listed in the “Contact” section of the website.

You have the right to contact our data protection officer regarding all matters relating to the processing of your personal data and the exercise of your rights under this regulation, and to lodge a complaint with the competent supervisory authority if you consider that the exercise of your rights has not been adequately addressed.

The maximum term for resolution is one month from the receipt of your request. This may be extended by two months depending on the complexity of the request or the number of requests received.

Should any changes occur to your data, we kindly request that you inform us in writing so that we can ensure your information is kept up to date.