The UNIVERSIDAD FRANCISCO DE VITORIA is especially sensitive to the protection of personal data of its website users. Through this Privacy Policy (or Data Protection Policy), UNIVERSIDAD FRANCISCO DE VITORIA informs the USERS of the website www.ufv.es, of the uses to which the personal data collected on the site is subjected, so that they can decide, freely and voluntarily, if they wish to provide the information requested. UNIVERSIDAD FRANCISCO DE VITORIA reserves the right to modify this Policy in order to adapt it to new legislation, jurisprudential criteria, industry practices, or the interests of the organization. Any modification in it will be announced with due notice, so that you are perfectly aware of its content.

1. RESPONSIBLE

The Responsible for the processing of personal data is the Fundación Universidad Francisco de Vitoria (hereinafter, “UFV”). The contact details of the UFV are as follows:

• Postal address: Ctra. M-515 Pozuelo-Majadahonda Km. 1.800, 28223 Pozuelo de Alarcón, Madrid.
• E-mail address of the UFV Data Protection Delegate’s Office: dpd@ufv.es
• Telephone: 917091400.

2. PURPOSE OF THE PROCESSING

The purpose of the collection and processing of personal data, through the different forms owned by UFV and made available to Users, is to manage and respond to requests for information, doubts, complaints, congratulations or suggestions regarding publications or any services or activities, acts or events provided, organized, sponsored and/or sponsored by UFV, as the case may be. Specifically, at www.ufv.es we process the data for the following purposes:

• Information on undergraduate, postgraduate, professional training and other training programs and courses offered by UFV, including the convening of workshops and/or open days, as well as days organized for high school students to familiarize them with university life.
• Application for admission to the different undergraduate, postgraduate and professional training programs, as well as other training and courses offered by UFV.
• Student registration and information on procedures.
• Teaching and academic organization through the student portal.
• Information and processing of grant applications, both UFV’s own and from third parties.
• Participation in surveys and research projects, in which health data may be processed, always for scientific research purposes and with the explicit consent of the interested party.
• Know the opinion of users through quality and satisfaction surveys.
• Manage job applications, through the collection of curricula, in order to be able to contact the interested party and carry out a selection process.
• Organization of volunteer activities related to the aims and ideology of UFV.
• Organization of sports, recreational and extracurricular activities for students and their families.
• Organization of activities for alumni, as well as management of the alumni employment exchange.
• Sponsorship of activities organized or sponsored by UFV consisting of the publication of images and videos of the same on UFV websites and social networks.
• Sending UFV electronic bulletins and newsletters on activities, courses, prizes and competitions organized by UFV, among others.
• Process and manage your donations and/or payments for goods and services offered by the university.
• Prevention of occupational risks and coordination of business activities.
• Management of sales and auctions organized by the UFV Shop.
• Provision of services offered by the different departments, centers, institutes, etc. of the university.
• Know the evolution and use of the students’ studies, as well as their follow-up, through participation in surveys, which can lead to a student profile.

3. CONSERVATION PERIOD

Depending on the processing carried out, UFV has different data conservation periods:

• Personal data provided will be retained for the relevant period to comply with legal obligations, if any, or for as long as a judge or court may require it.
• Consent-based data will be retained as long as you do not revoke consent or object to the processing.
• Personal data obtained from high school students will be retained for up to three years from the time they have provided their data.
• Data obtained in connection with the processing of scholarships will be kept for up to one year after completion of studies.
• Data obtained from requests for information on undergraduate, postgraduate or vocational training programs will be kept for a period of three years from the submission of the request.
• All data that is incorporated into the academic record will be kept indefinitely. The interested party may always request certification of their studies and degrees obtained.
• Data of family members of students will be kept for up to one year after completion of studies.
• Data obtained in connection with research projects will be kept as long as necessary for the scientific research purposes pursued by the corresponding project and, once the research project is completed, the data may be anonymized due to the scientific interest of the study.

4. LEGITIMACY

The UNIVERSIDAD FRANCISCO DE VITORIA is legitimized for the processing of personal data, based on:

• The consent given by the data subject for one or more specific purposes, as stated in Article 6.1. a) of the General Regulation on the Protection of Personal Data, by completing the forms and ticking the box provided for this purpose. In the case of processing of special categories of personal data, such as health data, religion, sex life, etc., the legitimate basis will be your explicit consent when none of the other circumstances provided for in art. 9.2 of the General Personal Data Protection Regulation apply.
• The execution of a contract for undergraduate, postgraduate or vocational training studies, as well as the academic and teaching management derived from the same.
• Compliance with a legal obligation. The processing carried out for the purpose of academic and teaching management, as well as those related to the academic record, are based, in particular, on the Organic Law 2/2023, of March 22nd, of the University System.

By virtue of the university autonomy recognized in Article 27 of the Spanish Constitution and in Organic Law 2/2023, of March 22, of the University System and criteria of transparency, objectivity and fairness, the consent of the students will not be required for the publication of the results of the tests related to the evaluation of their knowledge and skills or of the acts that are necessary for the proper conduct and monitoring of such evaluation.

The legitimate interest of the data controller.

5. DATA ACCURACY

On the other hand, in order to ensure that the data contained in our computer and/or paper files always correspond to reality, we will try to keep them updated. To this end, the User must make the changes, directly, when so enabled, or by communicating them, by reliable means, to the corresponding area or department of UFV.

6. TARGET

The data of the academic record will be communicated to the Ministry of Education / Ministry of Education of the Community of Madrid and other competent Public Administrations. The data may also be communicated to banks and financial institutions for the payment of bills pending payment, to companies to which the university entrusts the appropriate steps and actions for the collection of such bills, or to public or private entities to which students go for internships, as well as to travel agencies and those other entities that are necessary for the provision of higher education services.

In case other data transfers are foreseen, they will be detailed in the corresponding basic information. The Universidad Francisco de Vitoria has several providers of applications and computer support that may access personal data when executing such contract. The UFV will always have a data access contract signed with them in accordance with the requirements of Article 28 of the General Data Protection Regulation, which will provide sufficient guarantees in the processing carried out by these providers. Some of the providers are located outside the territory of the European Union, so UFV requests additional guarantees, according to the regime foreseen for international transfers in the General Data Protection Regulation.

7. USERS’ RIGHTS

USERS may exercise their rights of access, rectification, erasure, opposition, limitation of processing, portability and not to be subject to a decision based solely on automated processing, including profiling.

Likewise, USERS may withdraw the consent granted to the processing without affecting the lawfulness of the processing based on the consent prior to its withdrawal with respect to all those authorized and consented processing by ticking the box on the corresponding forms.

To exercise these rights, USERS may send a letter to UFV indicating the right being exercised to any of the following addresses:

Postal address: Ctra. M-515 Pozuelo-Majadahonda Km. 1.800, 28223 Pozuelo de Alarcón, Madrid. E-mail address: dpd@ufv.es

In addition, in particular, USERS who receive communications related to UFV activities via WhatsApp and/or email, may request to unsubscribe or cease sending these by sending their request to the sender.

USERS have the right to file a complaint with the Supervisory Authority Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es, telephone: 900 293 183, in particular, when they consider that the exercise of any of their rights has not been satisfied. Prior to any claim and on a voluntary basis, the Interested Parties may contact the Office of the Data Protection Delegate of the UFV at the following e-mail address: dpd@ufv.es

8. SECURITY MEASURES

Finally, we inform you that UNIVERSIDAD FRANCISCO DE VITORIA will adopt appropriate technical and organizational measures in its information system in order to guarantee the security and confidentiality of the data stored, thus avoiding its alteration, loss, treatment or unauthorized access; taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the treatment, as well as risks of varying probability and severity associated with each of the treatments.

If you have any questions about this Privacy Policy, please contact us by sending an email to dpd@ufv.es.

9. UPDATING OF THIS POLICY

UFV reserves the right to modify this Policy unilaterally, in whole or in part, in order to adapt it to new legislation, jurisprudential criteria, good practices in the sector, or changes in the processing of data, recommending that interested parties access the policy and read it periodically and in any case, having to do so each time they provide their personal data related to or in the context of the activities of UFV, and in any case may send any questions to UFV through dpd@ufv.es