INFORMATION FOR USERS
This Policy applies to the processing of your personal data collected by the University. If you agree to the measures contained in this Policy, you consent to our processing your personal data as defined in this Policy.
The controller for your data is:
- Corporate name: INTERNATIONAL STUDIES S.A
- Trade Name: CIS UNIVERSITY
- TAX ID No. (CIF): A78055415
- Address: C/ VELÁZQUEZ Nº 140 MADRID (SPAIN)
- Tel: +34 91 563 67 40
- Email: firstname.lastname@example.org
DATA PROTECTION OFFICER
The Data Protection Officer (DPO) is the company’s person responsible for data and data protection consultant.
The DPO must ensure compliance with regulations and act as an intermediary between interested parties (company, authorities, etc.).
- Lawfulness: We will only collect your personal data for specific, explicit, legitimate purposes.
- Data minimization: We limit the personal data we collect to what is strictly relevant and necessary for the purposes for which it was collected.
- Limitation of purpose: We only collect your personal data for our stated purposes.
- Accuracy: We will keep your personal data accurate and updated.
- Data security: We implement suitable technical and organizational measures commensurate with the risks to ensure that your data is not damaged.
- Access and rectification: We have the means so that you can access and correct your data when you want.
- Storage: We hold your personal data legally and appropriately, and only while it is needed for the purposes for which it was collected.
- International data transfers: In the event your data is to be transferred outside the EU/EEA, it will be properly protected. Access and transfer of personal data to third parties are undertaken in accordance with applicable laws and regulations, while ensuring appropriate contractual safeguards.
- Direct marketing and cookies: We comply with the pertinent legislation on advertising and cookies.
WHAT INFORMATION DO WE COLLECT?
The types of data we may request and process are:
- Identifying data, data on personal and family characteristics, social and academic circumstances.
- Financial and economic data.
Whenever we ask for your personal data, we clearly tell you which personal data we collect for the purpose of answering your queries and requests, using forms that we post on our website or other means.
Each party is responsible for ensuring that the data provided is true, accurate, complete and updated. They alone will be responsible for any direct or indirect damage or harm that may occur as a result of breaching such an obligation.
WHY AND FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
- Execution of the contractual relationship with the University, or to apply pre-contractual measures.
- Legitimate interest: To undertake commercial and/or advertising actions or communications, on any media, including electronic or similar communications, related to the university’s services, in accordance with Spanish Law 34/2002 (LSSI). Recording cameras will also be used in the facilities, whose legitimate interest is the safety of people, property, and facilities.
- To send information and advertising on the educational center’s own services or related services, on any media, including electronic or similar communications.
- To send information and advertising on products and services provided by other third party companies related to the educational center, on any media, including electronic or similar communications, as well as receive information from the NGO Cruzada por los Niños, Fundación International Studies, International Studies Foundation USA and Fundación RFK Human Rights Spain, non-profit entities belonging to the same educational group as CIS University.
HOW DO WE OBTAIN YOUR PERSONAL DATA?
Through the information you provide us when you fill out any of the forms provided on our website or other physical or digital media, or by contracting our products and/or services.
Also, in case of accessing the building, located at Calle Velázquez 140 28006, Madrid, through recording cameras.
WITH WHOM DO WE SHARE YOUR DATA?
Your data may be sent to third parties so as to provide various services, operating as data processors, but we will not disclose your personal data to third parties unless we are required by law, or you have agreed to this with the University after being properly informed.
We share your information with:
- Service providers hired by (data processors): Our hosting service, IT technicians, consultants or service suppliers. We demand that our service providers only use the personal data provided for the purpose described in the corresponding contract, and that once this purpose is fulfilled, they destroy such data.
- Service providers located outside the European Economic Area (international data transfers): In such cases, the affected parties’ express consent is required, and these providers are subject to current legislation regulating institutions that receive information.
- Due to legal obligation: Spanish Tax Office, pertinent government authorities, judges and courts, or similar, and so on.
The personal data will be retained for as long as the contractual relationship between the parties exists and, in any case, until the period to claim liabilities arising from the contractual relationship and other legal obligations has elapsed.
In all other cases, the personal data provided will be held as long as the interested party does not request deletion, taking as reference the deletion request date, except for data collected through recording devices, whose deletion period will be one month, unless required by the police or judicial authority.
Data will also be kept in accordance with the legal, tax and accounting periods established by law.
RIGHTS OF INTERESTED PARTIES
- To request confirmation regarding whether we are processing your personal data and, if so, access such data or request portability.
- Challenge the processing of your data and/or request deletion of such data.
- Right of access.
- Rights of rectification.
- Limit processing of your data.
- Revoke the consent given at any time. Notwithstanding, bear in mind that after honoring your revocation, we may continue to communicate with you as needed to comply with our legal obligations or to enforce your contract with us.
For the proper practice of your rights, when making your request, you must provide proof of your identity by means of a copy of your ID card (DNI), or equivalent official document, along with identification of the company (or companies) to which your data is linked. Communication channels available:
- Postal mail: INTERNATIONAL STUDIES S.A , Calle Velázquez Nº 140 Madrid (Spain) writing “Data Protection” in the Subject line
- Email: email@example.com, writing “Data Protection” in the Subject line
If you believe that your personal data have not been processed in accordance with the regulations, you can contact the Data Protection Officer at firstname.lastname@example.org, writing in the Subject line: Data Protection Claim