Legal
Privacy policy
Draft pending completion with the owner's actual details and legal review before final publication.
Data controller
Identity: [To be completed: company name] Tax ID: [To be completed: tax ID] Address: [To be completed: address] Contact: [To be completed: privacy email] Data protection officer: [To be completed: DPO details, if any]
Data we process
Application form: first and last name, email, phone, country of residence, profession, programme of interest, preferred language and your message. Student area: account data (email, name), profile data you provide, enrolments, documents and announcements for your programmes. We do not request identity documents, health data or other special categories of data in the initial form.
Purposes and legal basis
Responding to your request and managing your possible participation in a programme (pre-contractual measures at your request and, where applicable, performance of a contract). Managing the student area (performance of a contract). Sending marketing communications only if you have expressly and separately opted in (consent, withdrawable at any time). Complying with legal obligations.
Retention
Data is kept as long as needed for the purpose for which it was collected and then for the applicable legal limitation periods. [To be completed: specific retention periods for unconverted applications]
Recipients and processors
Data is not disclosed to third parties unless legally required. Technology providers hosting the platform act as processors. Organising a programme may require sharing data with the relevant partner institution, which you will be told about in advance. [To be completed: list of processors and international transfers, if any]
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to [To be completed: privacy email]. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply technical and organisational measures: encrypted connections, role-based access control and per-student data isolation, private document storage and logging of administrative actions.