Who is responsible for the processing of your data?
The data controller is the Universidad Francisco de Vitoria (UFV).
Contact details: Universidad Francisco de Vitoria. Secretaría General. Ctra. M-515 Pozuelo-Majadahonda Km. 1.800; 28223, Pozuelo de Alarcón (Madrid).
Contact details of the Data Protection Delegate: dpd@ufv.es.

For what purposes will we process your personal data?
At UFV we will process your personal data for the following purposes:

• This is to inform you, by any means, including electronic means (SMS, WhatsApp, email, and social networks), about current or future degree programs, postgraduate programs, higher degree training cycles, or any course or program of the Universidad Francisco de Vitoria. This also includes calls to open days, orientation workshops to help you make a decision about the studies you want to pursue, information sessions, and reminders of the same.
• Perform the corresponding analysis and segmentation of your data in relation to educational preferences.
• You can manage your registration for activities organized by UFV, as well as opt in to receive communications related to these activities via any available channel, including electronic (SMS, WhatsApp, email).

What is the legitimacy for the processing of your data?
The legal basis for processing your data, including analysis and segmentation related to educational preferences and sending electronic communications, is your consent, which you provide by ticking the relevant boxes included in the basic information.

For how long will we keep personal data?
Personal data will be retained for up to three years from the date of collection. In the event that you apply for admission or enroll in any of our training programs, a new processing cycle will be initiated. The data protection information for this new cycle will be provided to you during the admission or enrollment process. If the purpose of the processing is solely to manage your registration for an UFV-organized activity, your data will be retained for as long as is necessary to complete all related organizational procedures.

To which recipients will your data be communicated?
The Universidad Francisco de Vitoria has a number of suppliers of applications and computer support that may require access to personal data in order to fulfil the terms of this contract. The Universidad Francisco de Vitoria will always have a data access contract signed with the relevant third parties in accordance with the requirements of Article 28 of the General Data Protection Regulation. This will provide sufficient guarantees in respect of the processing carried out by these providers. In the event of international data transfers to entities or providers outside the European Union, Universidad Francisco de Vitoria will require additional guarantees in accordance with the international transfer provisions set forth in the General Data Protection Regulation.

What are your rights in relation to data processing?
Any individual has the right to request information regarding the processing of their data, access their personal data, request the rectification of inaccurate data, or, when applicable, request deletion. This right is exercised when the data are no longer necessary for the purposes for which they were collected or when the data subject withdraws their consent.
In certain cases, the interested party may request the limitation of the processing of their data. In such instances, we will only retain the data in accordance with the applicable regulations.
In certain cases, you may exercise your right to data portability. This will be provided in a structured, commonly used, or machine-readable format to you or the new data controller you designate.
You have the right to withdraw your consent at any time for any of the processing activities for which you have provided consent.
To exercise your rights, please send an email to dpd@ufv.es or submit a written document signed manually or electronically. If you are acting through a representative, in addition to submitting a written document signed manually or electronically, you must provide proof of such representation.
Written submissions must be submitted in person at the University Registry or send them by mail to the address listed in the “Responsible” section.
As a data subject, you have the right to contact our data protection officer regarding all matters relating to the processing of your personal data and the exercise of your rights under the General Data Protection Regulation of the European Union 2016/679 of 27 April 2016. Should you consider that the exercise of your rights has not been adequately addressed, you may lodge a complaint with the competent supervisory authority.

The maximum term for resolution is one month from the receipt of your request. In the event that the complexity of the request or the number of requests received necessitates an extension, the period may be extended for a further two months.
Should any changes be made to your data, we kindly request that you inform us in writing so that we can ensure your information is kept up to date.