At UNIVERSIDAD FRANCISCO DE VITORIA (UFV), we take the protection of personal data very seriously. This Privacy Policy (or Data Protection Policy) sets out how we use any personal data collected on our website, www.ufv.es. It is our intention that you should be fully informed about how we use your data and that you can decide, freely and voluntarily, whether you wish to provide the information requested.

UNIVERSIDAD FRANCISCO DE VITORIA reserves the right to modify this policy in order to adapt it to new legislation, jurisprudence, industry practices, or the interests of the organization. Any modifications will be duly announced in advance, ensuring that you are fully informed of their content.

Universidad Francisco de Vitoria is responsible for data processing. Contact details: Universidad Francisco de Vitoria. Secretaría General. Ctra. M-515 Pozuelo-Majadahonda Km. 1,800; 28223, Pozuelo de Alarcón (Madrid). Contact details of the Data Protection Delegate: dpd@ufv.es.

The collection and processing of personal data through the various forms owned by UNIVERSIDAD FRANCISCO DE VITORIA and made available to users is carried out for the purpose of managing and responding to requests for information, questions, complaints, compliments, or suggestions for publications or any services or activities, events, or events provided, organized, sponsored, and/or sponsored by UNIVERSIDAD FRANCISCO DE VITORIA. Specifically, data is processed on the www.ufv.es website for the following purposes:

– Information about undergraduate, postgraduate, vocational training, and other programs and courses offered by the UFV. It includes details of workshops and open days, as well as days organized for high school students to familiarize themselves with university life.

– Application for admission to the various undergraduate, graduate, and professional training programs, as well as other training and courses offered by UFV.

– Student enrollment and information on procedures.

– Teaching and academic organization through the student portal.

– Information and processing of scholarship applications, both from UFV’and from third parties.

– Participation in surveys and research projects, in which health data may be processed, always for scientific research purposes and with the prior explicit consent of the interested party.

– To know the opinion of users through quality and satisfaction surveys.

– Manage job applications, by collecting resumes, to contact the person concerned and carry out a selection process.

– Organization of volunteer activities related to the aims and ideology of the UFV.

– Organization of sports, recreational and extracurricular activities for students and their families.

– Organization of activities for alumni, as well as the management of the alumni employment exchange.

– Sponsorship of activities organized or sponsored by UFV consisting of the publication of images and videos of the same on UFV websites and social networks.

– Sending UFV electronic bulletins and newsletters about activities, courses, prizes and competitions organized by UFV, among others.

– Process and manage your donations and/or payments for goods and services offered by the university.

– Occupational risk prevention and coordination of business activities.

– Management of sales and auctions organized by the UFV Store.

– Provision of services offered by the different departments, centers, institutes, etc. of the university.

Depending on the processing carried out, UFV has different data retention periods:

– The personal data provided will be kept for the corresponding period of time to comply with legal obligations, if any, or for the period of time in which a judge or court may require them.

– Consent-based data will be kept as long as you do not revoke consent or object to the processing.

– Personal data obtained from high school students will be kept for up to three years after they have provided their data.

– Data obtained in connection with the processing of scholarships will be kept for up to one year after completion of studies.

– Data obtained from requests for information on undergraduate, graduate or vocational training programs will be maintained for a period of three years from the submission of the request.

– All data included in the academic record will be kept indefinitely. The interested party may always request certification of his or her studies and degrees obtained.

– The data of students’ relatives will be kept until one year after the end of the studies.

– Data obtained in connection with research projects will be kept as long as it is necessary for the scientific research purposes pursued by the corresponding project and, once the research project is completed, the data may be anonymized due to the scientific interest of the study.

The UNIVERSIDAD FRANCISCO DE VITORIA is legitimized for the processing of personal data, based on:

– The data subject’s consent for one or more specific purposes is granted by filling in the forms and ticking the box provided for this purpose, as stated in Article 6.1.a) of the General Regulation on the Protection of Personal Data. In the case of processing special categories of personal data, such as health data, religion, or sex life, the legitimate basis will be your explicit consent, provided that none of the other circumstances set forth in Article 9.2 of the General Regulation on the Protection of Personal Data apply. Please refer to Article 9.2 of the General Regulation on the Protection of Personal Data.

– The execution of a contract for undergraduate, postgraduate or professional training studies, as well as the academic and teaching management derived from the same.

– Fulfillment of a legal obligation. The processing of data for the purposes of academic and teaching management, as well as those related to the academic record, is carried out in accordance with the provisions set forth in Organic Law 2/2023, of March 22nd, of the University System.

In accordance with the autonomy of the university recognized in Article 27 of the Spanish Constitution and in the Organic Law 2/2023, of March 22, of the University System, as well as the criteria of transparency, objectivity, and fairness, the consent of the students will not be required for the publication of the results of the tests related to the evaluation of their knowledge and skills, nor of the acts that are necessary for the proper conduct and monitoring of such evaluation.

– The legitimate interest of the data controller.

Conversely, to guarantee that the data in our computer and/or paper files align with reality, we will endeavor to maintain them in a current and accurate state. To this end, users are required to make changes directly when authorized to do so, or by communicating them via a reliable channel to the corresponding area or department of UNIVERSIDAD FRANCISCO DE VITORIA.

The academic record data will be shared with the Ministry of Education/Ministry of Education of the Community of Madrid and other relevant public authorities. The data may also be shared with banks and financial institutions for the purpose of paying outstanding bills, with companies that the university has engaged to handle the collection of such receipts, or with public or private entities to which students are sent for internships. Additionally, the data may be disclosed to travel agencies and other entities that are necessary for the provision of higher education services.

Should additional data transfers be anticipated, these will be outlined in the relevant basic information. Universidad Francisco de Vitoria has a number of application and computer support providers who may require access to personal data in order to fulfill the terms of their contract. Universidad Francisco de Vitoria will always have a data access contract signed with these providers in accordance with the requirements of Article 28 of the General Data Protection Regulation, which will provide sufficient guarantees for the processing carried out by these providers. Some of the providers are located outside the European Union, so the Universidad Francisco de Vitoria requests additional guarantees

in accordance with the General Data Protection Regulation’s international transfer regime.

The individual in possession of the personal data may, at any time, exercise the rights afforded to them by the General Data Protection Regulation. These rights are as follows:

– Right to request access to personal data relating to the data subject.

– Right to request its rectification or erasure.

– Right to request the limitation of its processing.

– The right to object to the processing.

– Right to data portability. To exercise your rights, please send the corresponding email to dpd@ufv.es or submit a written request, signed manually or electronically. In the event that the university has any doubts regarding your identity, you may be requested to provide a copy of your ID card. If you are acting through a representative, in addition to submitting a manually or electronically signed document, you must provide proof of such representation. Please submit the relevant documentation in person at the University Registry or by post to the address listed in the “Responsible” section. You have the right to contact our data protection officer regarding all matters relating to the processing of your personal data and the exercise of your rights under this Regulation. Should you consider that the exercise of your rights has not been adequately addressed, you may lodge a complaint with the competent supervisory authority. Please note that the maximum term to resolve your request is one month from the receipt of your request, which may be extended for a further two months depending on the complexity of the request or the number of requests received.

We would like to inform you that UNIVERSIDAD FRANCISCO DE VITORIA will implement the necessary technical and organizational measures in its information system to ensure the security and confidentiality of stored data. This will prevent any alteration, loss, treatment, or unauthorized access. We will consider the state of the art, the costs of application, the nature, scope, context, and purposes of the treatment, as well as the risks of variable probability and severity associated with each treatment.

If you have any questions about this Privacy Policy, please contact us by sending an email to dpd@ufv.es.