1. Who is responsible for the processing of your data?

The Data Controller is the Universidad Francisco de Vitoria (UFV). Contact details: Universidad Francisco de Vitoria. Secretaría General. Ctra. M-515 Pozuelo-Majadahonda Km. 1.800; 28223, Pozuelo de Alarcón (Madrid).

Contact details of the Data Protection Delegate: dpd@ufv.es.

2. For what purposes will we process your personal data?

At UFV we will process your personal data for the following purposes:

The processing of your application for a place is carried out for the purpose of analyzing it and, if you are admitted, for the administrative management and organization of accommodation at the Hall of Residence, as well as the monitoring of your studies through individualized tutorials.
In order to evaluate your application for a place, we require information regarding your academic performance, qualifications, and state of health. This includes a medical certificate and any other relevant details you can provide to assist us in case of an emergency. A medical certificate is required in order to assess your application for a place and anticipate any future food or assistance needs that may arise if you are admitted.
Furthermore, users must consent to additional processing purposes by checking the appropriate boxes in the basic information section.

3. What is the legal basis for the processing of your data?

The legal bases that legitimize the processing are:

– The processing of your application for a place at the Hall of Residence is based on the execution of pre-contractual measures, which are designed to facilitate a thorough study of your application.
– The processing of accommodation requests at the Residence Hall is contingent upon the execution of a contract.
– Other processing operations are contingent upon the data subject’s consent. To indicate your consent, please mark the corresponding boxes provided for this purpose in the basic information.

4. For how long will we keep the personal data?

Personal data will be processed for the following periods:

– During the application review process. Once the process is complete, the applicant will be informed of the period of time allowed for the relevant regulations and any additional timeframes set by the judge or court.
– The following treatments are related to the execution of a contract and will be carried out during the duration of your stay at the Universidad Francisco de Vitoria. Furthermore, the contract will remain in effect until the end of the agreed-upon period, in accordance with the regulations currently in force, and for any additional period that may be required by a judge or court. In the event of outstanding invoices, the Universidad Francisco de Vitoria reserves the right to pursue the outstanding balance.
– Treatments related to the consent of the interested party may be carried out as long as the consent given is not revoked or opposed.

5. To which recipients will your data be communicated?

Financial data will be shared with the State Agency of Tax Administration if necessary. Furthermore, the data may be shared with banks and financial institutions for the purpose of settling outstanding invoices. The Universidad Francisco de Vitoria has a number of suppliers of applications and computer support who may require access to personal data in order to fulfil their contractual obligations. The Universidad Francisco de Vitoria has entered into a data access contract with these providers in accordance with the requirements of Article 28 of the General Data Protection Regulation, which provides sufficient guarantees for the processing carried out by these providers. Some of the providers are outside the European Union, so the Universidad Francisco de Vitoria requests additional guarantees in line with the General Data Protection Regulation’s international transfer regime. This could include contracting providers certified under the EU-US Privacy Shield (www.privacyshield.gov).

6. What are your rights in relation to the processing of data?

Any individual has the right to request information regarding the processing of their data, access their personal data, request the rectification of inaccurate data, or, when applicable, request the deletion of data. This is subject to the condition that the data are no longer necessary for the purposes for which they were collected, or the data subject withdraws the consent previously given. In certain cases, the data subject may request the limitation of the processing of their data. In such instances, we will only retain the data in accordance with the regulations in force. In certain cases, you may exercise your right to data portability. This will be delivered in a structured, commonly used, or machine-readable format to you or the new data controller you designate. You have the right to withdraw your consent for any of the aforementioned processing activities at any time. To exercise your rights, please submit the corresponding written document, signed electronically or accompanied by a photocopy of your ID card. If you are acting through a representative, please include a copy of their ID or an electronic signature. Please submit the relevant documentation in person at the University Registry or by post to the address listed in the “Responsible” section. You have the right to contact our data protection officer regarding all matters relating to the processing of your personal data and the exercise of your rights under this Regulation. Should you consider that the exercise of your rights has not been adequately addressed, you may submit a complaint to the competent supervisory authority. Please note that the maximum period for resolution is one month from receipt of your request, which may be extended for a further two months depending on the complexity of the request or the number of requests received.