Website Privacy Policy

Data controller

The company responsible for the processing of your data under this privacy policy is:

FUNDACIÓ INSTITUT DE FORMACIÓ CONTÍNUA DE LA UNIVERSITAT DE BARCELONA 
TAX ID NO. (NIF): G64489172
Registered office: C/ Ciutat de Granada, 131 - 08018 Barcelona 
Email: bbdd@il3.ub.edu 
Website: www.il3.ub.edu
Tel.: (+34) 933 093 654

Registered in the Foundations Register of the Government of Catalonia, No. 2320.

At the FUNDACIÓ INSTITUT DE FORMACIÓ CONTÍNUA DE LA UNIVERSITAT DE BARCELONA, we recognise the importance of safeguarding your personal data and are fully committed to processing it responsibly and conformitat in accordance with applicable data protection laws.

This privacy policy aims to regulate all aspects related to the processing of data of the different users who browse or provide their personal data through the various forms on the website, as well as to inform them of other data processing carried out by our organisation in connection with our activities.

Personal data

Personal data is information that identifies or makes an individual identifiable. Through the website, in the fields established for this purpose, we collect the personal data that the user provides to us: first name, surname, email address, telephone number, postal address, town/city, etc., as well as any data voluntarily provided through any of the social media on which the user is registered. In this case, privacy will depend on the configuration set by the user themselves, as well as the terms and conditions of the social media in question.

The user’s visit to the website does not imply an obligation to provide any personal data. However, if the user does provide such data, it will be processed lawfully, subject at all times to the principles and rights set out in Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018, of 5 December, on data protection and guarantee of digital rights (LOPDGDD).

Purposes, legal basis, recipients and duration of processing

We will process the data of the data subjects for the following purposes:

Responding to the request or enquiry made by the user through the contact form on the website

We collect and process the user’s personal data in order to handle and manage their request, query or any other enquiry submitted through this form.

  • Legal basis for processing: It is the legitimate interest of the data controller, reinforced by the consent granted by the user when selecting the checkbox to accept our privacy policy before submitting the request. The user has the right to withdraw their consent at any time without this affecting the legal basis for the processing based on the consent given prior to its withdrawal.
  • Recipients: The data obtained for this purpose will not be disclosed to third parties except when required by law.
  • Duration of processing: We will retain this data for as long as necessary to comply with the user’s request and for the period established by law, with a maximum duration of three years.

Responding to the request or enquiry made by the user through the business services form located on the website.

We collect and process the information provided in order to handle and manage a request, query or any other enquiry submitted through this form.

  • Legal basis for processing: It is the legitimate interest of the data controller, reinforced by the consent granted by the user when selecting the checkbox to accept our privacy policy before submitting the request. The user has the right to withdraw their consent at any time without this affecting the legal basis for the processing based on the consent given prior to its withdrawal.
  • Recipients: The data obtained for this purpose will not be disclosed to third parties except when required by law.
  • Duration of processing: We will retain this data for as long as necessary to comply with the user’s request and for the period established by law, with a maximum duration of three years.

Processing of student data in the provision of our services

Throughout the entire process of providing our educational services, it will be necessary for our organisation to process the personal data of students, whether through our own offer or through our various collaborations with other entities, with our role potentially varying between data controller and mere processor. In this section, we will define the different processing activities we may carry out:

  • Managing your registration or enrolment through the various means made available for contracting services related to our own educational offer or those provided in collaboration with other entities. All the information requested is necessary to manage the enrolment of the data subject in the requested programme or course. Managing enrolment involves carrying out all administrative and academic/teaching tasks performed by our institution, including reviewing and storing all documentation provided by the student to assess compliance with the admission requirements of the chosen programme.
  • Our institution, in order to properly assist students, will provide various secure communication channels through which their requests will be handled.                                                 
  • Managing teaching, assessments and academic monitoring will involve storing assessment records in designated secure areas.
  • The certification process allows students to request official documents related to their academic records. These requests may be handled directly by us or, in some cases, through partner organisations, as outlined in the agreements we have with them.
  • Managing student enrolment on the Virtual Campus. We collect and process users’ personal data to grant access and manage their activity on the Virtual Campus, which is one of the key platforms we use to carry out our academic and teaching functions.
  • Teaching may be delivered remotely and could involve recording sessions where participating students may appear. These recordings might be published during the course of study on the Virtual Campus. To facilitate this, the following tools will be used:

    Zoom (https://zoom.us/es-es/privacy.html)
    BB Collaborate (https://help.blackboard.com/es-es/Privacy_Statement) 

We recommend that you regularly visit their privacy policies.

  • Managing enrolment refunds due to various force majeure causes, such as the death or serious illness of the student or a first-degree blood relative, catastrophes, and terrorism. To verify these circumstances, the data subject must provide documentation containing information considered especially sensitive; therefore, additional security measures will be applied in the processing of these data to guarantee their full confidentiality.
  • Legal basis for processing: 
    . Compliance with a task carried out in the public interest (Organic Law 6/2001, of 21 December, on universities, and Law 1/2003, f 19 February, on Catalan universities).
    . Performance of the contract to which the data subject is a party, and the application of pre-contractual measures at their request.
    . Legitimate interest of our institution.
    . Compliance with applicable legal obligations.
  • Recipients: The personal data of students may be shared in courses delivered in collaboration with other entities, only when necessary to provide the contracted service to the student. Such collaborations will always be subject to the fulfilment of our agreements, which will include appropriate clauses to ensure the proper compliance with data protection laws by each party involved.
  • Duration of processing: This data will be processed for the duration of the contractual relationship and will be retained in accordance with the time limits established in the regulatory framework governing our services, always considering their necessity (Article 5.1.e of the GDPR).

Responding and managing the request made by the user through the Job Bank and "Work with us" form on the website

We collect and process the user’s personal data in order to handle their participation in the Job Bank, managed by our institution with the aim of promoting employment  and providing interested parties with job offers related to their education and experience.

  • Legal basis for processing: The data subject’s consent, given by selecting the acceptance checkbox of our privacy policy prior to submitting their CV. The user has the right to withdraw their consent at any time without this affecting the legal basis for the processing based on the consent given prior to its withdrawal.
  • Recipients: This processing involves the transfer of the information provided to companies interested in the data subject’s CV.
  • Duration of processing: This data will be retained for a maximum period of one year, after which the data will be blocked for the legally established time, ensuring full respect for confidentiality both during processing and subsequent destruction.

Responding and managing the request made by the user through the Talent Hub registration form

We collect and process the user’s personal data in order to handle and manage their request, query or any other enquiry submitted through this Talent Hub form.

  • Legal basis for processing: It is the legitimate interest of the data controller, reinforced by the consent granted by the user when selecting the acceptance checkbox before submitting the request. The user has the right to withdraw their consent at any time without this affecting the legal basis for the processing based on the consent given prior to its withdrawal.
  • Recipients: The data obtained for this purpose will not be disclosed to third parties except when required by law.
  • Duration of processing:  We will retain this data for as long as necessary to comply with the user’s request and for the period established by law, with a maximum duration of three years.

Sending bulletins, newsletters and commercial information about our services

We may send commercial information to data subjects who so request this, as well as to students and alumni, regarding the different services offered by our organisation, adapting this information to the services which, according to their specific profile, may be of interest to them. We may also send information about events and updates that affect our institution and that may also be of interest.

  • Legal basis for processing: Under the express consent of the user, who has the right to withdraw it at any time, we collect and process their personal data in order to send them this information. In the case of students and alumni, the legal basis for this processing will be the legitimate interest of the controller, based on the provisions of Section 2 of Article 21.
  • Recipients: The data obtained for this purpose will not be disclosed to third parties except when required by law.
  • Duration of processing: When processing is based on consent, we will process this data as long as the user does not withdraw it. When based on legitimate interest, once the provision of our services to the data subject has ended, this processing will have a maximum duration of three years.

Receiving statistical information about website users

To obtain information about the use of the website, we analyse the number of pages visited, the number of visits, as well as visitor activity and frequency of use. For this purpose, we use statistical information produced by our internet service providers. You can find all information relating to this processing in our cookie policy.

Management arising from the use of social media

By following our profile on the various social media networks we use, the user has given their consent for their personal data to be processed in accordance with the privacy policy of the respective social media network. Our institution is not responsible for the information that users post on the social media it manages. However, individuals whose data is published or included in comments may request its deletion from us.

  • Legal basis for processing: The user expressly consents to our access to and processing of the data contained in their profile, and to news about the services offered by our institution appearing on their timeline. The user’s request to connect with us necessarily implies their consent to the processing activities mentioned.
  • Recipients: Comments and content published on social media become public information, so users should exercise particular caution when deciding to share their personal information.
  • Duration of processing: The data will be retained while the data subject does not object or withdraw their consent, which they may do at any time.

You can find more information on this processing on the page provided for this purpose: https://www.il3.ub.edu/ca/politica-de-xarxes-socials.

Managing and processing of the data subject’s registration for attendance at an event or activity

Our institution will manage these requests through the data collected via forms provided for this purpose on our website, or through any other form we may send to confirm the data subject’s attendance at activities organised by us.

  • Legal basis for processing: The consent given by the data subject through the completion of the participation form provided for this purpose and by ticking the acceptance box of our privacy policy, when this request is managed through our website. The user has the right to withdraw their consent at any time without this affecting the legal basis for the processing based on the consent given prior to its withdrawal.
  • Recipients: When these activities are co-organised with other entities, the personal data of attendees may be shared with the other organisers, provided this is necessary for the correct management of the event.
  • Duration of processing: We will retain this data for as long as necessary to comply with the user’s request and for the period established by law, with a maximum duration of three years.

Managing the sending of satisfaction surveys

Our institution uses surveys and other mechanisms that allow us to gauge the degree of satisfaction with the services we offer, with the aim of improving the experience of our customers on a daily basis.

  • Legal basis for processing: The processing of this data is based on the legitimate interest of our institution to improve the quality of the services provided.
  • Recipients: The data obtained for this purpose will not be disclosed to third parties except when required by law.
  • Duration of processing: Personal data will be deleted once the survey has concluded, along with a reasonable period to implement improvements, activate new services, and comply with applicable legal requirements.

Receiving, managing and responding to formal complaints sent to our institution

Our institution, with the aim of improving the quality of all our services on a daily basis, provides users with the necessary channels so that they can send us their suggestions and complaints or lodge a formal complaint.

  • Legal basis for processing: It is the legitimate interest of our institution that underpins the processing of personal data to properly manage these complaints, in compliance with the General Law on the protection of consumers (Royal Legislative Decree 1/2007, of 16 November).
  • Recipients: The data obtained for this purpose will not be disclosed to third parties except when required by law.
  • Duration of processing: This data will be processed as long as necessary for their purpose and as long as liabilities may arise, within the applicable time limits for filing, exercising or defending claims.

Processing of the UB Card

All students enrolled in courses leading to a qualification awarded by the University of Barcelona are issued this card, which grants access to discounts at participating establishments, allows online procedures and interactions with our institution, and offers additional benefits.

  • Legal basis for processing: The performance of the contract to which the data subject is a party and the data subject's express consent.
  • Recipients: This processing involves the transfer of the information provided to the University of Barcelona, which is responsible for issuing the card.
  • Duration of processing: This data will be processed as long as necessary for their purpose and as long as liabilities may arise.

Processing of student data for courses awarding micro-credentials

The purpose of this processing is to manage the enrolment of the data subject for the contracting of these courses and the related administrative procedures linked to the provision of these educational services.

  • Legal basis for processing:
    • Performance of the contract to which the data subject is a party, and the application of pre-contractual measures at their request.
    • Compliance with applicable legal obligations.
  • Recipients: For the justification of subsidies linked to these micro-credentials, our institution is required to share the data subject’s personal data with the following entities:
    • Government of Catalonia.
    • Spanish Ministry of Science, Innovation and Universities.
    • European Commission.
  • Duration of processing: This data will be processed for the duration of the contractual relationship and will be retained in accordance with the time limits established in the regulatory framework governing our services.

International transfers of data

Our organisation takes special care to safeguard the personal data it processes. To this end, we periodically review the privacy policies of our information society service providers. Some of these providers may be located outside the European Union. According to the GDPR, any processing of personal data under our responsibility that is carried out by such entities is considered an international data transfer. To ensure an adequate level of protection for the rights and freedoms of the data subjects whose data may be processed under these terms, our institution is committed to complying with the provisions of Chapter V of the GDPR, which sets out the conditions governing such international data transfers.

Location of data storage

The data processed by our organisation is stored on our own servers, but may also be hosted on servers managed by information society service providers acting as our data processors. These servers may be located within the European Union or outside it. In cases where the destination country does not provide an adequate level of protection as determined by the European Commission, we sign a data processing agreement with the relevant processor incorporating the Standard Contractual Clauses (SCCs) adopted by the Commission in Decision 2001/497/EC of 15 June 2001.

Updating personal data

To ensure we maintain accurate and up-to-date personal data, it is important that users inform us of any changes. Otherwise, we cannot be held responsible for the accuracy of the data provided.

The user guarantees that the personal data supplied is truthful, accurate, up-to-date, and corresponds to their actual situation. The user also undertakes to notify us of any modification to their personal data.

Third-party data

If the user provides us with personal data relating to third parties for any purpose, they confirm that such data has been obtained lawfully, that the data subjects concerned have been duly informed in advance, that their consent has been obtained for the data to be disclosed, and that the data is accurate and truthful.

Mandatory nature of the requested information

All our forms have an asterisk (*) in the mandatory fields. If the user does not complete the required fields or does not tick the box to accept the privacy policy, the form cannot be submitted.

Use of passwords

To access the Virtual Campus, the user must log in by entering the email address and password generated through the registration form or password recovery form. Passwords must comply with the complexity requirements in force at the time on the website.

Users are responsible for the proper safekeeping and confidentiality of any identifiers or passwords they select during registration. They agree not to share these credentials with third parties or allow access by unauthorised individuals.

Users are also required to immediately notify the data controller of any event that may lead to the misuse of their identifiers or passwords, such as theft, loss, or unauthorised access, so that appropriate measures can be taken to mitigate potential risks.

Rights of data subjects

You have the right to access your personal data and to obtain confirmation as to whether or not your data is being processed. You may also request a copy of the personal data subject to processing.

You have the right to request the rectification of inaccurate or outdated data and to request the erasure of data when it is no longer necessary for the purposes for which it was collected. You may also request the restriction of processing or object to the processing of your data, including the right to withdraw your consent at any time, as well as the right to data portability. Additionally, you have the right not to be subject to decisions based solely on automated processing, including profiling. You can exercise your rights in the following ways:

  • Contacting us at C/ Ciutat de Granada, 131 - 08018 Barcelona, or via email: bbdd@il3.ub.edu
  • Contacting our Data Protection Officer at: dpd@il3.ub.edu

If you believe that your rights have not been properly upheld, you have the right to lodge a complaint with the competent supervisory authority at https://apdcat.gencat.cat/ca/inici.

Processing of data belonging to minors

Anyone providing personal data via the forms on this website and consenting to their processing declares to be over 14 years of age. Access to and use of the portal by individuals under this age is strictly prohibited. If, at any point, we detect that personal data has been provided by a child under the age of 14, we will proceed to delete such data immediately.

Furthermore, parents or legal guardians may contact us at the addresses provided in section 10 of this privacy policy to request the deactivation of any account created by a minor in their care, should they have registered by falsifying their age.