Expanded Reason Awards Personal Data Protection

The data controller is Universidad Francisco de Vitoria.

Contact details: Universidad Francisco de Vitoria. Secretaría General. Ctra. M-515 Pozuelo-Majadahonda, km 1,800; 28223, Pozuelo de Alarcón (Madrid).

 Data protection officer’s contact details: dpd@ufv.es

Universidad Francisco de Vitoria will process personal data for the following purposes:

To manage your application for the Expanded Reason Awards.

To invite you to future activities organised by Universidad Francisco de Vitoria and send you information that may be of your interest, as well as to post videos and images on the university’s websites and social media, in which you may appear as a result of your participation in the university’s activities (events related to the awards, classes, conferences, etc.). The invitations and information may also be sent by electronic means (SMS, email, student portal and social media).

The legitimate basis for processing the data is the data subject’s consent, to which end such party must check the boxes created in the application form for this purpose.

The personal data will be processed during the following periods:

Until the consent granted is revoked or the data subject objects to the processing.

The data of the participants and works submitted for the awards shall be processed perpetually.

Universidad Francisco de Vitoria relies on diverse application and IT support suppliers that have access to personal data during contract performance. Universidad Francisco de Vitoria shall, at all times, have a signed data access contract in place with such parties in accordance with the requirements of Article 28 of the General Data Protection Regulation, which provides sufficient guarantees in the processing performed by these providers. Some of these providers are located outside the European Union, in which case Universidad Francisco de Vitoria requests additional guarantees, in accordance with the system established for international transfers in the General Data Protection Regulation, such as hiring providers that are certified under the European Union-United States framework agreement known as Privacy Shield (www.privacyshield.gov).

Anyone is entitled to receive information about whether their data are processed, to access their personal data, to request the rectification of any inaccurate data and, where applicable, to request the erasure of their data when, among other reasons, the data are no longer needed for the purposes for which they were gathered or if the data subject withdraws the consent granted.

In certain cases, data subjects may request that the processing of their data be restricted, in which case we shall only store them in accordance with the regulations in force.

In certain cases, data subjects may exercise the right to data portability, in which case the data will be furnished in a structured, commonly used and machine-readable format to you or to a new data controller of your choice.

You have the right to withdraw the consent granted for any of the processing at any time.

To exercise your rights, you must send a written statement in this regard, signed electronically or accompanied by a photocopy of your ID document. If you are acting through a proxy, the statement must be accompanied by a sufficient power of attorney and a copy of that person’s ID document or electronic signature.

Statements must be submitted in person at the university registration office or sent by post to the address appearing in the “Contact” section of the website.

You have the right to contact our data protection officer to discuss any matters related to the processing of your personal data or the exercise of your rights pursuant to these regulations, and to file a complaint before the competent supervisory authority if you feel that you have been unable to exercise your rights in a suitable manner.

The resolution deadline is one month after receipt of your request. It may be extended two further months in light of the complexity of the request or the number of requests received.

If any of your data change, we would kindly ask you to notify us of this in writing, so that we can update your details.