who is responsible for the processing of your data?
The data controller is the Universidad Francisco de Vitoria (UFV).
Contact details: Universidad Francisco de Vitoria. Secretaría General. Ctra. M-515 Pozuelo-Majadahonda Km. 1.800; 28223, Pozuelo de Alarcón (Madrid).
Contact details of the Data Protection Delegate: dpd@ufv.es.

For what purposes will we process your personal data?
At UFV we will process your personal data for the following purposes:

• This is to inform you, by any means, including electronic means (SMS, WhatsApp, email, and social networks), about undergraduate and postgraduate programs or any current or future course or program of the Universidad Francisco de Vitoria. This also includes calls to open days, orientation workshops to help you make a decision about the studies you want to pursue, information sessions, and reminders of the same.
• Please perform the corresponding analysis and segmentation of your data in relation to educational preferences.

What is the legal basis for the processing of your data?
The legal basis for the processing of data and the sending of electronic communications is the consent of the data subject by ticking the appropriate boxes included in the basic information.

How long will we keep the personal data?
Personal data will be kept for up to three years after collection. In the case of enrollment in any of our training programs, a new processing will be initiated and the data protection information will be provided on the enrollment form.

To which recipients will your data be communicated?
Any information provided will not be shared with third parties, except with service providers who require access to data. The Universidad Francisco de Vitoria employs a number of providers of applications and computer support, who are able to access personal data in the course of carrying out the terms of their contract. Universidad Francisco de Vitoria will always have a data access contract signed with these providers in accordance with the requirements of Article 28 of the General Data Protection Regulation. This will provide sufficient guarantees for the processing carried out by these providers. Some of the providers are based outside the European Union. In line with the international transfer provisions set out in the General Data Protection Regulation, the Universidad Francisco de Vitoria requests additional guarantees.

What are your rights in relation to data processing?
Any individual has the right to request information regarding the processing of their data, access their personal data, request the rectification of inaccurate data, or, when applicable, request deletion. This right is exercised when the data are no longer necessary for the purposes for which they were collected or when the data subject withdraws their consent.
In certain cases, the interested party may request the limitation of the processing of their data. In such instances, we will only retain the data in accordance with the applicable regulations.
In certain cases, you may exercise your right to data portability. This will be provided in a structured, commonly used, or machine-readable format to you or the new data controller you designate.
You have the right to withdraw your consent at any time for any of the processing activities for which you have provided consent.
To exercise your rights, you must submit the appropriate written document, signed electronically or accompanied by a photocopy of your ID card. If you are acting through a representative, the letter must be accompanied by a duly executed power of attorney, as well as a copy of your ID card or an electronically signed document.
All written materials must be submitted in person at the University Registry or via mail to the address listed in the “Responsible” section.
As a data subject, you have the right to contact our data protection officer regarding all matters relating to the processing of your personal data and the exercise of your rights under the General Data Protection Regulation of the European Union 2016/679 of 27 April 2016. Should you consider that the exercise of your rights has not been adequately addressed, you may lodge a complaint with the competent supervisory authority.
The maximum term for resolution is one month from the receipt of your request. In the event that the complexity of the request or the number of requests received necessitates an extension, the period may be extended for a further two months.
Should any changes be made to your data, we kindly request that you inform us in writing so that we can ensure your data is kept up to date.