Normative

Privacy policy

Users are informed that the personal data they provide, both by completing any online form, as well as by email or by any other means, will be processed in accordance with this Privacy Policy.

Who is responsible for the processing of your data?

Identity: ANTONIO DE NEBRIJA UNIVERSITY (UNIVERSITAS NEBRISSENSIS, S.A.), hereafter, NEBRIJA UNIVERSITY.
Registered office: La Berzosa University Campus, 28240, Hoyo de Manzanares (Madrid).
Phone number: 91 452 11 00.
Contact email:lopd@nebrija.es

Who is the entity's Data Protection Officer (DPO) and how can they help you?

We inform you that we have a Data Protection Officer (DPO), who is a legally established figure whose main functions are to inform and advise the entity on the obligations that affect it in terms of personal data protection and supervise its compliance. In addition, the DPO acts as a point of contact with the entity for any matter related to the processing of personal data, so if you wish, you can contact him/her: dpo@nebrija.es

For what purpose do we process your personal data, what is the legitimate basis for such treatment and for how long will it be kept?

The data provided will be processed for the following purposes, depending on the reason for which it was submitted:

Solve queries and questions, as well as process requests for information or any type of request that is made by the user through any of the contact forms that are made available.
Referral of commercial communications, including through electronic means. Through these communications, users will be informed about the different services offered by NEBRIJA UNIVERSITY, as well as the events organized by it.
In the event that you have sent us your CV, your data will be treated in order to manage and process your job application. For these purposes, the data will be processed on the legal basis of the consent of the person who provides it. Such consent can be withdrawn at any time, although this will not affect the lawfulness of the treatments carried out previously. Providing the data is voluntary, although, in case of not doing so, it cannot be processed for the specified purposes. Therefore, the communication of your personal data for these purposes is a necessary requirement so that we can attend to the requests made in this way, as well as to send, where appropriate, the entity's commercial communications. The data will be kept for the time necessary to respond to your application, request, or consultation, and to close it definitively. Subsequently, it will be kept as a communication history for a maximum of one year, unless the user requests its deletion at any of the referenced contact addresses. In the event that you have provided your CV, your data will be kept during the selection processes and, unless you expressly tell us otherwise, even later, for a period of one year from the last update that the interested party makes of the data, in order to be able to take it into account in similar processes that could be carried out in the future. To this end, the interested party must keep the personal data supplied to us updated, especially the information related to education and professional experience. Additionally, more data may be collected during interviews or personnel selection processes, the treatment of which is also based on consent. In the event of being hired, the CV will be incorporated into your employment file and will be stored for the time required by labor regulations to face possible legal responsibilities. Finally, if the user consents to the sending of commercial communications, the data may be stored indefinitely for this purpose, until the user objects to this. The categories of data that will be processed for these purposes will be the following: Identification data and, for the management of CVs, in addition to identifying data, academic and professional data, employment details and data on social circumstances (specifically hobbies) will be processed.
Process the applications for registration and admission made by users to any of the academic or cultural services offered by the University, as well as to the associated activities. In this case, the data will be processed on the basis of the legal relationship maintained between the parties. The processing of personal data is necessary for the correct admission and registration to the different educational and cultural activities of the University, so it is mandatory that personal data be provided, as it would be impossible to process your registration otherwise. The data will be kept for the duration of the academic or cultural services to which you have registered and, subsequently, until the possible responsibilities that may derive from them expire.
Manage the academic services requested by the students, as well as any other service that has been specified during the self-enrollment process, or that is a consequence of the university studies carried out in this center (internships, participation in events, etc.). The treatment of the data for the specified purposes is necessary for the student's enrollment and the proper development of the studies and activities at this University, as well as the services offered by it, the legal relationship maintained between the parties being the basis of this treatment, so it is mandatory that personal data be provided, as it would be impossible for the student to enroll and carry out the academic studies and services requested at this University otherwise. Likewise, unless the student expresses his/her opposition, his/her data may be used to send him/her information, by electronic means, about the services, offers and events carried out by the University. The prospective offer of products and services is based on satisfying the entity's legitimate interest in promoting its academic services and activities. Said legitimate interest is recognized by the applicable legal regulations, which expressly allow the processing of personal data on that basis for direct marketing purposes. However, the student has the right to oppose this treatment of their data, and may do so by any of the means provided in this clause. The data will be kept for as long as he/she is a student at the University and, even afterwards, until the possible responsibilities that may arise from the academic relationship and for all the time required by the applicable regulations. Notwithstanding the foregoing, for the indicated commercial purpose, his/her data may be kept indefinitely, unless the student objects to this.
Process his/her registration in the Nebrija Alumni Club and manage any activity associated with it. In this case, the data will be processed by the Antonio de Nebrija Foundation, as the entity responsible for processing it. The treatment of the data is necessary for the correct registration and participation in the Alumni Club, this provision of services being the basis of the treatment, so it is mandatory that personal data be provided, as it would be impossible to register in said Club otherwise. Likewise, unless there is opposition from the interested party, the data may be used to send information, by electronic means, about the services, offers and events carried out by the Foundation. The basis of the treatment is the legitimate interest of the entity to promote its services and activities. This legitimate interest is recognized by the applicable legal regulations (General Data Protection Regulation), which expressly allows the processing of personal data on that legal basis of direct marketing purposes. In any case, the student has the right to object to this processing of his/her data, and may do so by any of the means provided in this clause. The data will be kept as long as he/she is a member of the Alumni Club and, even later, until the possible responsibilities that may arise from his/her relationship with it expire, and for all the time required by the applicable regulations. Notwithstanding the foregoing, in the event that he/she has not objected to the sending of commercial information, his/her data may be kept indefinitely in order to send him/her commercial communications.
7. During the participation in the different activities and events carried out by the University, images of the participants may be taken (photographs and videos). When the treatment is part of the educational function, the participant's image can be taken without their consent, since the legitimizing basis will be carrying out the teaching and educational function (contractual relationship), as it is mandatory that the interested party provide their data for this purpose, otherwise said function would not be carried out. However, when taking images does not correspond to said educational function, but rather images of occurrences or events that are usually recorded for dissemination and promotion purposes in the university magazine or on its website or social networks, we will proceed to obtain the consent of the interested parties, this being the legitimizing basis of the treatment. In any case, the University reserves the right to take photographs and recordings of all the activities and events that it organizes, individually or in collaboration with third parties, so the interested party, in case they want their image and voice taken and used for the specified purpose of dissemination and promotion, must express their consent. When they have not expressed their consent, the latter must abstain from voluntarily participating in the photographs and recordings that the entity makes during them. In the event that the participant's image is taken in an ancillary manner, in accordance with Organic Law 1/82, it will not be considered an illegitimate interference with privacy and with the image itself, and may be taken without the need to obtain the express consent of the person affected. For this purpose, the data may be kept by the University indefinitely, unless the user objects by contacting any of the specified contact addresses. The treatment of your image for the specified purpose of dissemination and promotion is not mandatory, so if the participant does not grant his/her authority, the data may not be processed for this purpose. The consent may be withdrawn at any time, although this will not affect the legality of the data previously processed.
8. In the event that a user downloads and installs the AppCrue application, accepting its terms and conditions, the personal data collected through it will be processed in order to manage the user's registration and participation in the services offered through the application. The basis of the treatment of your data will be consent. The user may uninstall the application when he/she deems it appropriate, thus revoking his/her consent, although this will not affect the legality of the data previously processed. The processing of your data through the application is not mandatory for the development of the academic or professional relationship maintained with the University, although the interested party may not enjoy the advantages offered by said application in the event that it is not downloaded. authorizing the processing of his/her data. For the correct operation of certain functionalities of the app, permissions are requested to access certain resources of the device. The activation of permissions will be carried out through pop-up windows in which the user can consent to access the device's resources.

The data will be kept as long as the user makes use of the application and, then, as long as any type of legal liability may arise from it.

Are international data transfers carried out?

The University uses the Mailchimp platform to send its informative communications. The recipients' data is stored on the Mailchimp platform, which is owned and operated by The Rocket Science Group LLC, located in the United States, so an international data transfer would be taking place. However, Mailchimp is an organization that applies adequate security measures for the protection of personal data, by adhering to the Privacy Shield agreement. You can find more information at the following link: enlace

How do we process your data on Social Networks?

In the event that you become a friend or follower of ours on social media, we will process your data to keep you informed of our activities and promotions through these channels. These data will be processed on the legal basis of your consent and will be kept as long as you remain our friend or follower, and may revoke your consent at any time, although this will not affect the legality of the treatments carried out previously. Providing the data for this purpose is voluntary, although, if you do not do so, you will not be a friend or follower on our social networks. In those cases, in which the user registration is carried out through social networks, the personal data that we will treat will come from the social network in question, to which the interested party will have previously provided said data for the purposes provided in their corresponding privacy policies. The data categories that we will collect from the social network in question are those that appear in our registration form and that you have provided to that social network. If, in order to proceed to registration on our website, more data is required than that provided by the social network, you must additionally complete our registration form, subject to the privacy conditions set forth in this clause.

How do we treat your data in calls from the Call Center?

We inform you that calls to the NEBRIJA UNIVERSITY Call Center may be recorded to process your request or answer your query, question or suggestion, as well as to assess the quality of the response given by our agents or, where appropriate, to manage commercial actions and proposals. Your data will be processed on the basis of the University's legitimate interest in having instruments to justify the fulfillment of the purposes mentioned in the previous paragraph. Said legitimate interest is considered prevalent, taking into account that the medium is suitable for the intended purpose, that the only data recorded is the voice and that the data is kept only for the necessary time. Specifically, the recordings will be stored for a maximum of 12 months.

To which recipients will your data be given?

The data provided may be transferred to the following entities:

To the Nebrija companies for the referral of commercial communications about the services they offer or events that they carry out. In this sense, the companies that are part of Nebrija are the following: Nebrija Institutes, Nebrija Residences, Nebrija Foundation (www.fundacionnebrija.org), entities that provide academic, cultural or accommodation services. In order to make this transfer of data, the consent of the interested party is required. For this purpose, the data will be processed on the basis of your consent, and it is not mandatory to provide them, in which case you may not receive the specified information. You can withdraw consent at any time, although this will not affect the legality of the treatments carried out previously.
To Nebrija Residences or Nebrija Institutes: In the event that the request or application made by the user implies the need to communicate their data to these entities so that they can respond to them or manage the corresponding request.
To Public Administrations in the cases provided by Law.
To the financial entities for the collection of the services offered, to the insurance entities with which the University has contracted the corresponding insurance and to the Public Administrations in the cases provided by the Law and for the purposes defined therein. Likewise, in the event that the student carries out his/her academic studies in any of the centers attached to the University, their data will be transferred to them so he/she can carry them out. On the other hand, as a consequence of the academic service offered by this University and so that the student can complete his/her studies, their data may be communicated to the training and employment companies with which this center has signed collaboration agreements, in order to facilitate access to jobs and practical training in companies. In the event that the student has applied for enrollment in any of the University's clubs, their data will be transferred to the Nebrija Foundation as the entity responsible for managing them. Similarly, if the student has requested accommodation, their data may be communicated to Nebrija Residences, which is in charge of managing the accommodation services for students.
For the members of the Alumni Club, the data may also be transferred to the insurance entities with which the Foundation has contracted the corresponding insurance, especially as a result of trips or activities of any kind organized by the Club. For these latter purposes, their data will also be transferred to the entities that carry out these trips and activities so that they can properly manage their participation. Similarly, the data may be transferred to Nebrija University when, as a consequence of the advantages offered by the Alumni Club to its members, they can enjoy the academic facilities or services, or any kind, offered by the University. For this the University is required to know the information of the members of the Alumni Club, as this transfer is necessary for the correct development of the services offered by the Club.
The identification and contact information of the students (name and surname, telephone number and email address) may be transferred to ranking companies in order to prepare surveys to evaluate the quality and results of our university and our programs, such as quality of teaching or degree of employability. In order to carry out this transfer of data, the consent of the interested party is required, this being the legitimate basis. The authorization for this transfer of data is voluntary and, in the event, that it is not granted, the student cannot participate in the surveys sent by the ranking companies and, therefore, their assessments would not be taken into account when preparing the corresponding rankings. They can withdraw consent at any time, although this will not affect the legality of the treatments carried out previously. Personal data may be kept by the assignee, for the specified purpose, for as long as necessary in order to prepare the corresponding rankings. Then, their data will be deleted.
In the event that the user downloads the AppCrue application, access to the advantages of Santander and/or Universia offered within the Advantages area requires that the user consents to the transfer of their data to these entities. For more information on this transfer of data, see the followinglink:
This transfer to both entities must be consented the first time the user enters an offer from Santander or Universia. The legitimacy to enable this data processing finds its legal basis in the express consent of the User. In the event that the User does not give their consent initially or, having given it, revokes it in the future, it will not mean the loss of their status as a User of the app, nor will it affect their participation in the rest of the services offered by the app. Additionally, as reported in the specified link, the user's data may be transferred to third parties that offer advantages through the "Advantages" section. This transfer will always be made with prior information and consent of the user, through the legal bases or conditions that he/she will have to accept in order to participate in such advantages, where the terms and conditions of this data communication will be detailed.

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation on whether we are processing personal data that concerns them, or not. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.

Under the conditions provided in the General Data Protection Regulation, the interested parties may request the limitation of the treatment of their data or its portability, in which case we will only keep them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. If you have given consent for any specific purpose, you have the right to withdraw it at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal. In these cases, we will stop processing the data or, where appropriate, we will stop doing it for that specific purpose, except for compelling legitimate reasons, or the exercise or defense of possible claims.

All the aforementioned rights can be exercised through the contacts listed at the beginning of this clause. If you face any violation of your rights, especially when you have not obtained satisfaction in exercising them, you can file a claim with the Spanish Agency for Data Protection (contact details available at www.aepd.es), or another competent control authority. You can also get more information about your rights by contacting these organizations. Regarding the processing of personal data through the AppCrue Advantage Area, Users may exercise their rights against Santander and/or Universia to access, rectification, deletion, opposition, limitation of treatment, portability and to not be subject to individually automated decisions, by sending an email to privacy@gruposantander.es in the case of Santander, or to appuniversitaria@universia.es in the case of Universia, or by mail to any of the companies at Juan Ignacio Luca de Tena 11 - 13, 28027 Madrid.

Detailed information on Santander's data protection for client users can be found in the Legal Notice on the Santander website: https://microsite.bancosantander.es/files/aviso_legal/informacion_ddc_pot.pdf

Detailed information Universia's data protection can be found at https://usuarios.universia.net/preparaPoliticaPrivacidad_portal.action?request_locale=es_ES

What responsibility do you have over your personal data?

The user is responsible for the fact that the information provided through this website is true. For these purposes, he/she is responsible for the veracity of all the data that he/she communicates and will keep the information provided suitably updated, so that it corresponds with their real situation. The user will be responsible for any false or inaccurate information that they provide, and for the damages that this causes to the owner of this website or to third parties.

What measures are taken in the processing of personal data?

NEBRIJA UNIVERSITY is committed to using the personal data provided in accordance with the purposes indicated in this Privacy Policy, guaranteeing the security and confidentiality of the personal data provided. To this end, it has implemented the technical and organizational security measures that are necessary to prevent its alteration, loss, unauthorized treatment or access, in accordance with the provisions of the applicable regulations.

What responsibility do you have in the processing of third-party data?

In the event that the personal data of a third-party has been provided, it is the sole responsibility of the person who has previously obtained the consent of that person so that their data is processed by us to have previously informed them of everything provided for in Article 14 of the General Data Protection Regulation.