Request for information
Who is responsible for processing your personal data?
The data controllers will be all those entities within the EUROPA EDUCATION GROUP that can provide you with information regarding the academic programme you have requested:
- UNIVERSIDAD EUROPEA DE MADRID, S.A.U., with Tax Identification Number (N.I.F.) A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
- UNIVERSIDAD EUROPEA DE VALENCIA, S.L.U., with Tax Identification Number (N.I.F.) B-97934467 and registered office at Paseo de la Alameda 7, 46010 Valencia.
- UNIVERSIDAD EUROPEA DE CANARIAS, S.L.U., with Tax Identification Number B-57257263 and registered office at C/ Inocencio García Feo 1 Casa Salazar, 38300 La Orotava, Santa Cruz de Tenerife.
- INSTITUCION ARTÍSTICA DE ENSEÑANZA IADE, S.L., with Tax Identification Number (N.I.F.) B-06988380 and registered office at C/ Claudio Coello, 48, 28001 Madrid.
- INICIATIVA EDUCATIVA UEA, S.L., with Tax Identification Number (N.I.F.) 86130044 and registered office at C/ Tajo s/n, 28670 Villaviciosa de Odón, Madrid, and owner of the UNIVERSIDAD EUROPEA DE ANDALUCÍA.
- INICIATIVA EDUCATIVA UDDI, S.L., with Andorran tax registration number L-718330-G and registered office at Calle Manel Cerqueda Escalera nº 3-5, Escaldes-Engordany, Principality of Andorra.
hereinafter referred to collectively as the ENTITY or the University.
For all of them, the data processor is UNIVERSIDAD EUROPEA DE MADRID S.A.U., with tax identification number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
The University has formally appointed a Data Protection Officer and has also set up the following communication channels:dpo@universidadeuropea.es anddpo@iade.es , to whom you may, interchangeably, address any queries regarding the processing of your personal data.
How do we obtain your personal data?
To answer this question, a distinction must be made between the sources from which your personal data originates and the types of personal data processed by the University:
A) Sources from which personal data is obtained.
- Provided by you in your dealings with the University.
- The management, maintenance and development of the relationship itself.
B) Types of personal data.
- Identifying data.
- Personal data.
- Data on social circumstances.
What data is processed, for what purpose and on what legal basis?
At the University, we process your personal data to achieve the purposes detailed below:
PURPOSE 1. Sending commercial communications from the ORGANISATION.
- Purpose: Sending advertising, promotional or other information that may be of interest to you regarding our academic programmes via post, email, SMS, messaging apps (WhatsApp, Telegram, Line, etc.) and other electronic communication channels used by the University, concerning the University’s own services;
- Type of data: Identifying data and personal data.
- Legal basis: GDPR - Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes.
PURPOSE 2. Profiling and segmentation for marketing purposes using internal sources.
- Purpose: Profiling through marketing studies and statistical and segmentation techniques and procedures that enable improvements to be made and appropriate product and service offers to be selected in line with the data subject’s characteristics and needs, using internal sources;
- Data categories: Identifying data, personal data and data relating to social circumstances.
- Legal basis: GDPR - Art. 6.1. a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes.
PURPOSE 3. Transfer of data to partner organisations regarding scholarships, grants and discounts.
· Purpose: if you apply for a scholarship, grant or discount having accessed the University’s academic programme through third-party institutions or partner organisations, your data may be transferred to them for statistical purposes, analysis and/or to send communications.
· Type of data: first name, surname, identity document number, email address.
Legal basis: GDPR – Art. 6(a) – express consent of the data subject.
PURPOSE 4. Compliance with applicable regulations.
- Purpose: Compliance with legal obligations imposed on the University by any authority. This may involve, depending on the case, responding to judicial and administrative orders.
- Data categories: Identifying data and personal data.
- Legal basis: GDPR – Article 6(1)(c) Processing necessary for compliance with a legal obligation to which the controller is subject.
To whom will your personal data be disclosed?
The personal data processed by the University to achieve the purposes detailed above will not be disclosed to companies outside the EUROPA EDUCATION GROUP, except to those partner companies and organisations necessary for specific purposes. We inform you that, in accordance with the data controllers identified in this policy, your data may be processed outside the European Economic Area, specifically in the Principality of Andorra. In this regard, your data may be transferred to the company operating in that territory under the protection of Commission Decision 2010/625/EU of 19 October 2010.
How long do we keep your data?
Personal data will be retained provided that you have not exercised your right to erasure, and will be retained in accordance with the applicable legal time limits in each specific case, the type of data and the purpose of the processing.
Subsequently, the data will be blocked for the periods established by law to address any potential liabilities arising from the processing.
What are your rights in relation to the processing of your data?
The University wishes to inform you that you have the right to access your personal data and to obtain confirmation as to how such data is being processed. You also have the right to request the rectification of inaccurate data or, where appropriate, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected by the University.
In certain circumstances, you may request the restriction of the processing of your data, in which case the University will only retain it for the purpose of exercising or defending any potential claims.
You may also object to the processing of your personal data for the purpose stated by the University. In that case, the University will cease processing your personal data, unless there are legitimate grounds for doing so, or to ensure the exercise or defence of potential claims.
Finally, you may request the right to data portability and obtain, for yourself or for another service provider, certain information derived from the contractual relationship entered into with the University.
You may exercise these rights, as you wish, by:
A written request addressed to UNIVERSIDAD EUROPEA DE MADRID S.A.U. at its registered office, located at Calle Tajo s/n, 28670 Villaviciosa de Odón (Madrid).
An email sent to the address dpo@universidadeuropea.es
Email sent to the address dpo@iade.es
In any of these cases, it is necessary to provide reliable proof of the identity of the person exercising their rights.
The University will provide the requested information within a maximum of one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.
You may withdraw your consent at any time, should you have given consent for a specific purpose, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
You may lodge a complaint with the competent data protection supervisory authority. However, in the first instance, you may lodge a complaint with the Data Protection Officer, who will deal with the complaint within a maximum of two months.
Enrolment application
Who is the data controller for your personal data?
The data controller will be the entity within the EUROPA EDUCATION GROUP where you have completed your enrolment:
- UNIVERSIDAD EUROPEA DE MADRID, S.A.U., with Tax Identification Number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
- UNIVERSIDAD EUROPEA DE VALENCIA, S.L.U., with Tax Identification Number (N.I.F.) B-97934467 and registered office at Paseo de la Alameda 7, 46010 Valencia.
- UNIVERSIDAD EUROPEA DE CANARIAS, S.L.U., with Tax Identification Number B-57257263 and registered office at C/ Inocencio García Feo 1 Casa Salazar, 38300 La Orotava, Santa Cruz de Tenerife.
- INSTITUCION ARTÍSTICA DE ENSEÑANZA IADE, S.L., with Tax Identification Number (N.I.F.) B-06988380 and registered office at C/ Claudio Coello, 48, 28001 Madrid.
- INICIATIVA EDUCATIVA UEA, S.L., Tax Identification Number (N.I.F.) 86130044, with registered office at C/ Tajo s/n, 28670 Villaviciosa de Odón, Madrid, and owner of the UNIVERSIDAD EUROPEA DE ANDALUCÍA.
- INICIATIVA EDUCATIVA UDDI, S.L., with Andorran tax registration number L-718330-G and registered office at Calle Manel Cerqueda Escalera nº 3-5, Escaldes-Engordany, Principality of Andorra.
hereinafter referred to collectively as the ENTITY or the University.
The data controller will act individually and exclusively, depending on the University you choose.
For all of them, the data processor is UNIVERSIDAD EUROPEA DE MADRID S.A.U., with tax identification number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
The University has formally appointed a Data Protection Officer and has also set up the following communication channels:dpo@universidadeuropea.es ordpo@iade.es , to whom you may, interchangeably, address any queries regarding the processing of your personal data.
How do we obtain your personal data?
To answer this question, a distinction must be made between the sources from which your personal data originates and the types of personal data processed by the ENTITY:
A) Sources from which personal data is obtained.
- Provided by you in the course of your dealings with the ENTITY.
- The management, maintenance and development of the relationship itself.
B) Types of personal data.
- Identifying data.
- Personal data
- Social circumstances data.
- Academic data
- Economic and financial data
What data is processed, for what purpose and on what legal basis?
At the ORGANISATION, we process your personal data to achieve the purposes detailed below:
PURPOSE 1. Management of the relationship between you and the ENTITY.
- Purpose: To process, maintain, develop, manage and monitor the existing relationship between you and the ENTITY:
- Academic management of students.
- Management of student admissions.
- Management of student records.
- Student ID cards.
- Management of the University’s mobile app.
- Supervision of online exams using technological proctoring tools.
- Types of data: Identifying data, personal data, social circumstances data, academic data, and economic and financial data.
- Legal basis: GDPR - Art. 6.1.b) Processing necessary for the performance of the contract with you.
PURPOSE 2. Management of activities organised by the University.
- Purpose: Management of activities by the University (volunteering, sports, Student Ombudsman, Careers Department, etc.).
- Types of data: Identifying data, personal data, social circumstances data, academic data, and economic and financial data.
- Legal basis: GDPR - Art. 6.1.b) Processing necessary for the performance of the contract with you.
PURPOSE 3. Video recording during virtual campus work sessions.
- Purpose: Video recording during virtual campus work sessions for teaching purposes, provided you have given your consent.
- Data categories: Identifying data and personal data.
- Legal basis: GDPR – Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes.
PURPOSE 4. Sending commercial communications from the ENTITY based on the assessment of your profile through internal sources.
- Purpose: Sending advertising, promotional or other information that may be of interest to you via post, email, SMS, messaging apps (WhatsApp, Telegram, Line, etc.) and other electronic communication channels of the ENTITY, regarding its own services. All of this is based on profiling through marketing studies and statistical and segmentation techniques and procedures that enable improvements to be made and appropriate product and service offers to be selected according to your characteristics and needs, using internal sources;
- Type of data: Identifying data and personal data.
- Legal basis: GDPR – Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes. GDPR – Art. 6.1.f) Processing is necessary for the purposes of the legitimate interests pursued by the controller.
PURPOSE 5. Sending commercial communications from the ENTITY once the relationship with it has ended.
- Purpose: Sending advertising, promotional or other information that may be of interest to you via post, email, SMS and other electronic means of communication from the ENTITY, once your relationship as a student with the University has ended, provided you have given your consent.
- Type of data: Identifying data and personal data.
- Legal basis: GDPR - Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes.
PURPOSE 6. Compliance with applicable regulations.
- Purpose: Compliance with legal obligations imposed on the University by any authority. This may involve, depending on the case, responding to judicial and administrative orders.
- Type of data: Identifying data and personal data.
- Legal basis: GDPR - 6.1.c) Processing necessary for compliance with a legal obligation to which the controller is subject.
PURPOSE 7. Conducting surveys
- Purpose: To conduct surveys, either independently or in collaboration with third parties, relating to the academic and service activities of the EUROPA EDUCATION GROUP, with the aim of evaluating and improving the quality of the educational experience and the services provided.
- Type of data: Identifying data and personal data.
- Legal basis: GDPR – Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for this specific purpose. GDPR – Art. 6.1.f) The University’s legitimate interest in knowing the views of its students and graduates for the continuous improvement of its programmes and services.
To whom will your personal data be disclosed?
The personal data processed by the ENTITY to achieve the purposes detailed above may be disclosed to the following recipients depending on the legal basis for the disclosure.
In light of the above, the following data disclosures aim to ensure the proper performance of the contractual relationship, as well as to comply with legal obligations requiring such disclosures:
- Regional, national, European or international public bodies and administrations.
- Financial institutions, information regarding academic results, where consent has been given.
- The institution awarding the university degree.
How long do we keep your data?
Personal data will be retained for the duration of the contract and, thereafter, provided you have not exercised your right to erasure, will be retained in accordance with the applicable legal time limits in each specific case, the type of data and the purpose of the processing.
Subsequently, the data will be blocked for the periods established by law to address any potential liabilities arising from the processing.
What are your rights regarding the processing of your data?
The ENTITY informs you that you have the right to access your personal data and to obtain confirmation as to how such data is being processed. You also have the right to request the rectification of inaccurate data or, where applicable, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected by the ENTITY.
In certain circumstances, you may request the restriction of the processing of your data, in which case the ENTITY will only retain them for the exercise or defence of potential claims.
Furthermore, in certain circumstances, you may object to the processing of your personal data for the purpose stated by the ENTITY. In that case, the ENTITY will cease processing your personal data, unless there are legitimate grounds for doing so, or to ensure the exercise or defence of potential claims.
Finally, you may exercise the right to data portability and obtain, for yourself or for another service provider, certain information derived from the contractual relationship entered into with the ENTITY.
You may exercise these rights by:
- A written request addressed to UNIVERSIDAD EUROPEA DE MADRID S.A.U. at its registered office, located at Calle Tajo s/n, 28670 Villaviciosa de Odón (Madrid).
- An email sent to the address dpo@universidadeuropea.es
- Email sent to the address dpo@iade.es
In any of these cases, it is necessary to provide reliable proof of the identity of the person exercising their rights.
The ORGANISATION will provide the requested information within a maximum of one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.
You may withdraw your consent at any time, should you have given consent for a specific purpose, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
You may lodge a complaint with the competent data protection supervisory authority. However, in the first instance, you may lodge a complaint with the Data Protection Officer, who will resolve the complaint within a maximum of two months.
Direct debit request
Who is the data controller for your personal data?
The data controller will be the entity within the EUROPA EDUCATION GROUP where you have enrolled:
- UNIVERSIDAD EUROPEA DE MADRID, S.A.U., with Tax Identification Number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
- UNIVERSIDAD EUROPEA DE VALENCIA, S.L.U., with tax identification number B-97934467 and registered office at Paseo de la Alameda 7, 46010 Valencia.
- UNIVERSIDAD EUROPEA DE CANARIAS, S.L.U., with Tax Identification Number B-57257263 and registered office at C/ Inocencio García Feo 1 Casa Salazar, 38300 La Orotava, Santa Cruz de Tenerife.
- INSTITUCION ARTÍSTICA DE ENSEÑANZA IADE, S.L., with Tax Identification Number (N.I.F.) B-06988380 and registered office at C/ Claudio Collo, 48, 28001 Madrid.
- INICIATIVA EDUCATIVA UEA, S.L., with Tax Identification Number (N.I.F.) 86130044 and registered office at C/ Tajo s/n, 28670 Villaviciosa de Odón, Madrid, and owner of the UNIVERSIDAD EUROPEA DE ANDALUCÍA.
- INICIATIVA EDUCATIVA UDDI, S.L., with Andorran tax registration number L-718330-G and registered office at Calle Manel Cerqueda Escalera nº 3-5, Escaldes-Engordany, Principality of Andorra.
hereinafter referred to collectively as the ENTITY or the University.
The data controller will act individually and exclusively, depending on the University you choose.
For all of them, the data processor is UNIVERSIDAD EUROPEA DE MADRID S.A.U., with tax identification number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
The data controller will act individually and exclusively, depending on the University you choose.
For all of them, the data processor is UNIVERSIDAD EUROPEA DE MADRID S.A.U., with tax identification number A-79122305 and registered office at C/ Tajo s/n, 28670 Villaviciosa de Odón, Madrid
The University has formally appointed a Data Protection Officer and has also set up the following communication channels:dpo@universidadeuropea.es anddpo@iade.es , to whom you may, interchangeably, address any queries regarding the processing of your personal data.
How do we obtain your personal data?
To answer this question, a distinction must be made between the sources from which your personal data originates and the types of personal data processed by the ENTITY:
A) Sources from which personal data is obtained.
- Provided by you in the course of your dealings with the ENTITY.
- The management, maintenance and development of the relationship itself.
A) Types of personal data.
- Identifying data.
- Personal data
- Economic and financial data.
What data is processed, for what purpose and on what legal basis?
At the ENTITY, we process your personal data to achieve the purposes detailed below:
PURPOSE 1. Management of payments arising from the relationship between you and the ENTITY.
- Purpose: To process, maintain, develop, manage and monitor the existing relationship between you and the ENTITY, specifically the management of payments.
- Types of data: Identifying data, personal data, social circumstances data, academic data, and economic and financial data.
- Legal basis: GDPR - Art. 6.1.b) Processing necessary for the performance of the contract entered into with you.
PURPOSE 2. Sending the ENTITY’s own commercial communications based on the assessment of your profile through internal sources.
- Purpose: Sending advertising or promotional information, or information that may be of interest to you, via post, email, SMS, messaging apps (WhatsApp, Telegram, Line, etc.) and other electronic communication channels of the ENTITY, regarding its own services. All of this is based on profiling through marketing studies and statistical and segmentation techniques and procedures that enable us to make improvements and select product and service offers suited to your characteristics and needs, using internal sources;
- Type of data: Identifying data and personal data.
- Legal basis: GDPR – Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes. GDPR – Art. 6.1.f) Processing is necessary for the purposes of the legitimate interests pursued by the controller.
PURPOSE 3. Compliance with applicable regulations.
- Purpose: Compliance with legal obligations imposed on the University by any authority. This may involve, depending on the case, responding to judicial and administrative orders.
- Type of data: Identifying data and personal data.
- Legal basis: GDPR – 6.1.c) Processing necessary for compliance with a legal obligation to which the controller is subject.
To whom will your personal data be disclosed?
The personal data processed by the ENTITY to achieve the purposes detailed above may be disclosed to the following recipients depending on the legal basis for the disclosure.
- Regional, national, European or international public bodies and administrations.
- Financial institutions for the management of collections and payments.
In light of the above, the following data disclosures are intended to ensure the proper performance of the contractual relationship, as well as to comply with legal obligations requiring such disclosures.
We inform you that, in accordance with the data controllers identified in this policy, your data may be processed outside the European Economic Area, specifically in the Principality of Andorra. In this regard, your data may be transferred to the company operating in that territory under the protection of Commission Decision 2010/625/EU of 19 October 2010.
How long do we keep your data?
Personal data will be retained for the duration of the contract and, thereafter, provided you have not exercised your right to erasure, will be retained in accordance with the applicable legal time limits in each specific case, the type of data and the purpose of the processing.
Subsequently, the data will be blocked for the periods established by law to address any potential liabilities arising from the processing.
What are your rights regarding the processing of your data?
The ENTITY informs you that you have the right to access your personal data and to obtain confirmation as to how such data is being processed. You also have the right to request the rectification of inaccurate data or, where applicable, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected by the ENTITY.
In certain circumstances, you may request the restriction of the processing of your data, in which case the ENTITY will only retain them for the exercise or defence of potential claims.
Furthermore, in certain circumstances, you may object to the processing of your personal data for the purpose stated by the ENTITY. In that case, the ENTITY will cease processing your personal data, unless there are legitimate grounds for doing so, or to ensure the exercise or defence of potential claims.
Finally, you may exercise your right to data portability and obtain, for yourself or for another service provider, certain information arising from the contractual relationship entered into with the Organisation.
You may exercise these rights by:
- A written request addressed to UNIVERSIDAD EUROPEA DE MADRID S.A.U. at its registered office, located at Calle Tajo s/n, 28670 Villaviciosa de Odón (Madrid).
- An email sent to the address dpo@universidadeuropea.es
- Email sent to the address dpo@iade.es
In any of these cases, it is necessary to provide reliable proof of the identity of the person exercising their rights.
The ORGANISATION will provide the requested information within a maximum of one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.
You may withdraw your consent at any time, should you have given consent for a specific purpose, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
You may lodge a complaint with the competent data protection supervisory authority. However, in the first instance, you may lodge a complaint with the Data Protection Officer, who will resolve the complaint within a maximum of two months.
Application for admission
Who is the data controller for your personal data?
The data controller will be the entity within the EUROPA EDUCATION GROUP to which you have submitted your application for admission:
- UNIVERSIDAD EUROPEA DE MADRID, S.A.U., with Tax Identification Number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
- UNIVERSIDAD EUROPEA DE VALENCIA, S.L.U., with Tax Identification Number (N.I.F.) B-97934467 and registered office at Paseo de la Alameda 7, 46010 Valencia.
- UNIVERSIDAD EUROPEA DE CANARIAS, S.L.U., with Tax Identification Number B-57257263 and registered office at C/ Inocencio García Feo 1 Casa Salazar, 38300 La Orotava, Santa Cruz de Tenerife.
- INSTITUCION ARTÍSTICA DE ENSEÑANZA IADE, S.L., with Tax Identification Number (N.I.F.) B-06988380 and registered office at C/ Claudio Coello, 48, 28001 Madrid.
- INICIATIVA EDUCATIVA UEA, S.L., with Tax Identification Number (N.I.F.) 86130044 and registered office at C/ Tajo s/n, 28670 Villaviciosa de Odón, Madrid, and owner of the UNIVERSIDAD EUROPEA DE ANDALUCÍA.
- INICIATIVA EDUCATIVA UDDI, S.L., with Andorran tax registration number L-718330-G and registered office at Calle Manel Cerqueda Escalera nº 3-5, Escaldes-Engordany, Principality of Andorra.
hereinafter and collectively referred to as the ENTITY or the University.
The data controller will act individually and exclusively, depending on the University you choose.
For all of them, the data processor is UNIVERSIDAD EUROPEA DE MADRID S.A.U., with tax identification number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid
The University has formally appointed a Data Protection Officer and has also set up the following communication channels:dpo@universidadeuropea.es anddpo@iade.es , to whom you may, interchangeably, address any queries regarding the processing of your personal data.
How do we obtain your personal data?
To answer this question, a distinction must be made between the sources from which your personal data originates and the types of personal data processed by the ENTITY:
A) Sources from which personal data is obtained.
- Provided by you in the course of your dealings with the ENTITY.
- The management, maintenance and development of the relationship itself.
B) Types of personal data.
- Identifying data.
- Personal data
- Social circumstances data.
- Academic data
What data is processed, for what purpose and on what legal basis?
At the ORGANISATION, we process your personal data to achieve the purposes detailed below:
PURPOSE 1. Processing of the application for membership.
- Purpose: To process, maintain, develop, manage and monitor the existing relationship between you and the ORGANISATION, specifically the application for admission.
- Types of data: Identifying data, personal data, social circumstances data and academic data.
- Legal basis: GDPR - Art. 6.1.b) Processing necessary for the performance of the contract with you.
PURPOSE 2. Sending commercial communications from the ORGANISATION based on the assessment of your profile through internal sources.
- Purpose: Sending advertising or promotional information, or information that may be of interest to you, via post, email, SMS, messaging apps (WhatsApp, Telegram, Line, etc.) and other electronic communication channels of the ENTITY, regarding its own services. All of this is based on profiling through marketing studies and statistical and segmentation techniques and procedures that enable us to make improvements and select product and service offers suited to your characteristics and needs, using internal sources;
- Type of data: Identifying data and personal data.
- Legal basis: GDPR – Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes. GDPR – Art. 6.1.f) Processing is necessary for the purposes of the legitimate interests pursued by the controller.
PURPOSE 3. Compliance with applicable regulations.
- Purpose: Compliance with legal obligations imposed on the University by any authority. This may involve, depending on the case, responding to judicial and administrative orders.
- Type of data: Identifying data and personal data.
- Legal basis: GDPR – 6.1.c) Processing necessary for compliance with a legal obligation to which the controller is subject.
To whom will your personal data be disclosed?
The personal data processed by the ENTITY to achieve the purposes detailed above may be disclosed to the following recipients depending on the legal basis for the disclosure.
- Regional, national, European or international public bodies and administrations.
- Financial institutions for the management of collections and payments.
- The institution awarding the university degree.
In light of the above, the following data transfers are intended to ensure the proper performance of the contractual relationship, as well as to comply with legal obligations requiring such transfers.
We inform you that, in accordance with the data controllers identified in this policy, your data may be processed outside the European Economic Area, specifically in the Principality of Andorra. In this regard, your data may be transferred to the company operating in that territory under the protection of Commission Decision 2010/625/EU of 19 October 2010.
How long do we keep your data?
Personal data will be retained, provided that you have not exercised your right to erasure, taking into account the applicable legal time limits in each specific case, the type of data and the purpose of the processing.
Subsequently, the data will be blocked for the periods established by law to address any potential liabilities arising from the processing.
What are your rights regarding the processing of your data?
The ENTITY informs you that you have the right to access your personal data and to obtain confirmation as to how such data is being processed. You also have the right to request the rectification of inaccurate data or, where applicable, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected by the ENTITY.
In certain circumstances, you may request the restriction of the processing of your data, in which case the ENTITY will only retain them for the exercise or defence of potential claims.
Furthermore, in certain circumstances, you may object to the processing of your personal data for the purpose stated by the ENTITY. In that case, the ENTITY will cease processing your personal data, unless there are legitimate grounds for doing so, or to ensure the exercise or defence of potential claims.
Finally, you may exercise the right to data portability and obtain, for yourself or for another service provider, certain information derived from the contractual relationship entered into with the ENTITY.
You may exercise these rights by:
- A written request addressed to UNIVERSIDAD EUROPEA DE MADRID S.A.U. at its registered office, located at Calle Tajo s/n, 28670 Villaviciosa de Odón (Madrid).
- An email sent to the address dpo@universidadeuropea.es
- Email sent to the address dpo@iade.es
In any of these cases, it is necessary to provide reliable proof of the identity of the person exercising their rights.
The ORGANISATION will provide the requested information within a maximum of one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.
You may withdraw your consent at any time, in the event that consent has been given for a specific purpose, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.
You may lodge a complaint with the competent data protection supervisory authority. However, in the first instance, you may lodge a complaint with the Data Protection Officer, who will resolve the complaint within a maximum of two months.
Student Portal Application
Who is responsible for processing your personal data?
The data controllers are all entities within the EUROPA EDUCATION GROUP that may provide you with access to the student portal:
- UNIVERSIDAD EUROPEA DE MADRID, S.A.U., with Tax Identification Number (N.I.F.) A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
- UNIVERSIDAD EUROPEA DE VALENCIA, S.L.U., with Tax Identification Number (N.I.F.) B-97934467 and registered office at Paseo de la Alameda 7, 46010 Valencia.
- UNIVERSIDAD EUROPEA DE CANARIAS, S.L.U., with Tax Identification Number B-57257263 and registered office at C/ Inocencio García Feo 1 Casa Salazar, 38300 La Orotava, Santa Cruz de Tenerife.
- INSTITUCION ARTÍSTICA DE ENSEÑANZA IADE, S.L., with Tax Identification Number (N.I.F.) B-06988380 and registered office at C/ Claudio Coello, 48, 28001 Madrid.
- INICIATIVA EDUCATIVA UEA, S.L., with Tax Identification Number (N.I.F.) 86130044 and registered office at C/ Tajo s/n, 28670 Villaviciosa de Odón, Madrid, and owner of the UNIVERSIDAD EUROPEA DE ANDALUCÍA.
- INICIATIVA EDUCATIVA UDDI, S.L., with Andorran tax registration number L-718330-G and registered office at Calle Manel Cerqueda Escalera nº 3-5, Escaldes-Engordany, Principality of Andorra.
hereinafter referred to collectively as the ENTITY or the University.
For all of them, the data processor is UNIVERSIDAD EUROPEA DE MADRID S.A.U., with tax identification number A-79122305 and registered office at C/ Tajo s/n 28670 Villaviciosa de Odón, Madrid.
The University has formally appointed a Data Protection Officer and has also set up the following communication channels:dpo@universidadeuropea.es anddpo@iade.es , to whom you may, interchangeably, address any queries regarding the processing of your personal data.
How do we obtain your personal data?
To answer this question, a distinction must be made between the sources from which your personal data originates and the types of personal data processed by the University:
A) Sources from which personal data is obtained.
- Provided by you in your dealings with the University.
- The management, maintenance and development of the relationship itself.
B) Types of personal data.
- Identifying data.
- Personal data.
- Social circumstances data
- Academic and professional data
- Economic and financial data
What data is processed, for what purpose and on what legal basis?
At the University, we process your personal data to achieve the purposes detailed below:
PURPOSE 1. Management and registration on the Student Portal.
- Purpose: To consult all relevant information relating to the student during the course of their academic career, such as the timetable, grades obtained, events held on university premises, current calls for scholarship applications, available international exchange programmes, amongst others.
- Types of data: Identifying data, personal data, social circumstances data, academic and professional data.
- Legal basis: GDPR - Art. 6.1.b) Processing necessary for the performance of a contract to which you are a party. GDPR - Art. 6.1.a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes.
PURPOSE 2. Management and registration on the financial portal.
- Purpose: To consult any type of economic and financial information relating to the student, including the management and monitoring of payments made, the consultation of receipts and supporting documents, invoices relating to their enrolment and other academic matters, etc.
- Types of data: Identifying data, personal data, data on social circumstances, academic and professional data, economic and financial data.
- Legal basis: GDPR – Article 6(1)(b) Processing necessary for the performance of a contract to which you are a party. GDPR – Article 6(1)(a) The data subject gives their express and explicit consent to the processing of their personal data for one or more specific purposes.
To whom will your personal data be disclosed?
The personal data processed by the ENTITY to achieve the purposes detailed above may be disclosed to the following recipients depending on the legal basis for the disclosure.
In light of the above, the following data disclosures are intended to ensure the proper performance of the contractual relationship, as well as to comply with legal obligations requiring such disclosures:
- Regional, national, European or international public bodies and administrations.
- Financial institutions, information regarding academic results, where consent has been given.
- Entities awarding university scholarships, where necessary, and entities managing events, if you have consented.
How long do we retain your data?
Personal data will be retained provided that you have not exercised your right to erasure, and will be retained in accordance with the applicable legal time limits in each specific case, the type of data and the purpose of the processing.
Subsequently, the data will be blocked for the periods established by law to address any potential liabilities arising from the processing.
What are your rights regarding the processing of your data?
The University informs you that you have the right to access your personal data and to obtain confirmation as to how such data is being processed. You also have the right to request the rectification of inaccurate data or, where appropriate, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected by the University.
In certain circumstances, you may request the restriction of the processing of your data, in which case the University will only retain them for the purpose of exercising or defending against any potential claims.
You may also object to the processing of your personal data for the purpose stated by the University. In that case, the University will cease processing your personal data, unless there are legitimate grounds for doing so, or to ensure the exercise or defence of potential claims.
Finally, you may request the right to data portability and obtain, for yourself or for another service provider, certain information derived from the contractual relationship entered into with the University.
You may exercise these rights, as you wish, by:
- A written request addressed to UNIVERSIDAD EUROPEA DE MADRID S.A.U. at its registered office, located at Calle Tajo s/n, 28670 Villaviciosa de Odón (Madrid).
- An email sent to the address dpo@universidadeuropea.es
- Email sent to the address dpo@iade.es
In any of these cases, it is necessary to provide reliable proof of the identity of the person exercising their rights.
The University will provide the requested information within a maximum of one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.
You may withdraw your consent at any time, should you have given consent for a specific purpose, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
You may lodge a complaint with the competent data protection supervisory authority. However, in the first instance, you may lodge a complaint with the Data Protection Officer, who will deal with the complaint within a maximum of two months.