The data controller for the processing of the interested party's data is Fundació per a la Universitat Oberta de Catalunya (hereinafter, the “UOC”). The contact details of the UOC are as follows:
The interested party is hereby informed that the UOC Group has appointed a Data Protection Officer to deal with any issue relating to the processing of your personal data. The interested party may contact the Data Protection Officer via the following contact details:
Personal data of the interested party are processed for the following purposes:
Student enrolment implies integration within the UOC community.
Furthermore, on completion of their studies, students will automatically be integrated within the Alumni community.
With regard to profiling, we inform you that the UOC uses this for the sole purpose of finding persons with a similar conduct or interests in order to send them information regarding the academic offer.
The personal data provided by the interested party will be kept bearing in mind the following aspects:
The lawful basis for the processing of the personal data collected from the interested party is the fulfilment of this contract. In this regard, interested parties are obliged to provide the data necessary to fulfil it, and if they do not provide them, it will not be possible to formalize this contract.
With regard to the following processing, the lawful basis is the consent of the interested party, provided this has been given beforehand:
Said processing is based on the consent requested from the interested party, and under no circumstances will consent withdrawal affect the fulfilment of the contract in question.
There are also consents whose lawful basis is the fulfilment of a legal obligation, such as the transfer of data for statistical or university quality purposes.
The personal data of the interested party may be transferred by the UOC to the following recipients:
Students are also informed that their personal data may be transferred to course instructors or third-party entities located outside the European Economic Area (EEA), in order to manage and fulfil the commitments derived from the present contract. Such international transfers of data shall only be made in accordance with Article 49 of the GDPR, if necessary for the execution of the contract signed by the student or, wherever applicable, when the UOC has requested the explicit consent of the student.
In all cases, the UOC shall guarantee that the transfer of data to course instructors or third-party entities located outside the European Economic Area to countries with a level of protection equivalent to the European one is carried out in accordance with European Commission criteria. Whenever it is declared that said jurisdictions do not have a level of protection equivalent to the European one, the UOC shall adopt the applicable safeguards through the use of standard contractual clauses, a requirement of affiliation to the Privacy Shield or contractual clauses previously authorized by the Spanish Data Protection Agency (AEPD), in virtue of which the UOC shall guarantee:
In addition, the interested party has the right to receive the personal data they have previously provided to the UOC in a structured, commonly used and machine-readable format, and to transmit them to another controller whenever the processing is based on consent or on a contract and is carried out by automated means.
The interested parties have the right to object, at any moment, for reasons related to their particular situation, to the personal data that concerns them being the object of processing based on the public or legitimate interest pursued by the UOC or a third party, including profiling, in order to stop the UOC or other UOC Group company from processing their data, except where the latter can accredit compelling reasons for the processing to prevail over the interests, rights and freedoms of the interested parties, or they need them for the formulation, exercise or defence of legal claims.
Furthermore, interested parties has the right not to be the object of a decision based solely on automated processing, including profiling, which has legal or similarly significant effects on them, except where this decision is necessary for the formalization or fulfilment of a contract between the UOC or another UOC Group company and the same, is authorized by applicable European Union or member state law or is based on the explicit consent of the interested party.
Finally, the interested party has the right to submit a claim before the Catalan Data Protection Authority.
The personal data we process at the UOC, in cases where it does not originate from the interested party, is obtained from the following sources:
The categories of data that are processed are as follows: