Personal data will be processed for the following periods:
- Academic Records: Indefinitely. The individual may request certification of their studies and degrees at any time.
- Processing related to the performance of a contract: for the duration of your studies at Francisco de Vitoria University. Upon completion of your studies, for the periods specified in current regulations and for as long as a judge or court may require it. In the event of unpaid bills, for as long as Francisco de Vitoria University may pursue collection of that debt.
- Processing based on the data subject’s consent: for as long as necessary to fulfill the intended purpose and as long as the data subject does not revoke the consent granted or object to the processing. In the case of the process aimed at improving student learning, data will be processed exclusively while the student is enrolled at UFV.
- Processing based on the data controller's legitimate interest: for as long as necessary to achieve the intended purpose and as long as the data subject does not object to the processing.
- Processing based on vital interest: for the periods specified in current regulations and for as long as a judge or court may require it.
Who will receive your data?
Your information may be shared with the ministries or departments of the Community of Madrid with jurisdiction over this matter, as well as other relevant public authorities.
The data may also be disclosed to banks and financial institutions for the payment of outstanding bills, or to companies commissioned by the university to take the necessary steps to collect such bills; to public or private entities where students undertake internships, volunteer work, or part of their training, or with which the university jointly manages the training; or, where applicable, to their parents or legal guardians.
In the event of an emergency or extreme necessity, your health information may be shared with public or private healthcare institutions, as well as with members of your family.
Francisco de Vitoria University works with various application and IT support providers who may access personal data in the course of performing their contracts. Francisco de Vitoria University will always have a data access agreement in place with these providers, in accordance with the requirements of Article 28 of the General Data Protection Regulation, which will provide sufficient safeguards for the processing carried out by these providers. Some of these service providers are located outside the European Union; therefore, Francisco de Vitoria University requires additional safeguards, in accordance with the provisions governing international transfers under the General Data Protection Regulation.
What are your rights regarding data processing?
Any person has the right to obtain information regarding the processing of their data, to access their personal data, to request the correction of any inaccurate data, or, where applicable, to request the deletion of such data when, among other reasons, the data is no longer necessary for the purposes for which it was collected or the data subject withdraws their consent.
In certain cases, the data subject may request the restriction of processing of their data, in which case we will retain it only in accordance with applicable law.
In certain cases, you may exercise your right to data portability, and the data will be provided to you or to the new data controller you designate in a structured, commonly used, and machine-readable format.
You have the right to withdraw your consent at any time for any of the processing activities for which you have given your consent.
To exercise your rights of access, rectification, erasure, objection, restriction of processing, data portability, and not to be subject to a decision based solely on automated processing, including profiling. In addition, please note that, in particular, data subjects whose images appear in photos and videos published on the University’s various websites and social media platforms may object to this processing by submitting a request via dpd@ufv.es.
Likewise, Data Subjects may withdraw the consent they have given for data processing without this affecting the lawfulness of the processing based on consent prior to its withdrawal with respect to all processing activities authorized and consented to by checking the box on this form.
To exercise these rights, you may send a written request to the UFV, specifying the right you wish to exercise, to any of the following addresses:
- Mailing Address: M-515 Pozuelo-Majadahonda Highway, Km 1.800, 28223 Pozuelo de Alarcón, Madrid.
In addition, specifically, interested parties who receive communications related to UFV’s activities via WhatsApp and/or email may request to be removed from the mailing list or to stop receiving such communications by sending their request to the sender.
Data subjects have the right to file a complaint with the supervisory authority, the Spanish Data Protection Agency, Edificio Cuzco IV, Paseo de la Castellana, 141, 9th floor, 28046 Madrid, www.aepd.es, phone: 900 293 183, particularly when they believe that the exercise of any of their rights has not been adequately addressed.
Prior to filing any complaint and on a voluntary basis, Data Subjects may contact the Office of the UFV Data Protection Officer at the following email address: dpd@ufv.es
Update to This Policy
UFV reserves the right to modify this Policy unilaterally, in whole or in part, in order to adapt it to new legislation, case law, industry best practices, or changes in data processing, and recommends that data subjects access and review the policy periodically and, in any case, do so each time they provide their personal data in connection with or in the context of UFV’s activities. Any questions may be directed to UFV via dpd@ufv.es.