Privacy Statement

 

Data protection (RGPD)

Normative

The University of Vigo assumes the responsibility of complying with current legislation on data protection, guaranteeing the protection of personal information in a lawful and transparent manner in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and its free circulation (RGPD) and with the state, regional and university regulations on the protection of data of character personal. This document provides detailed information on the circumstances and conditions of the processing of personal data and the rights of interested persons.

 

Responsible for the treatment

University of Vigo

CIF: Q8650002B

Address: General Secretariat.

Rectory Building. Lagoas-Marcosende s / n 36310 Vigo, Pontevedra

Telephone: 986 813 600

Email: informacion@uvigo.es

Data protection officer

Pintos & Salgado Abogados S.C.P.

Address: Avda.de Arteixo, 10, 1o izq., 15004 A Coruña

Telephone: 981227076

dpd@uvigo.ga

 

Purpose of the treatment

The University of Vigo will only collect the personal data strictly necessary in relation to the purposes for which they are processed, in accordance with the principles set forth in article 5 of the RGPD and will provide interested persons, at the time they are obtained. personal data, the information necessary to guarantee fair and transparent treatment, in accordance with the provisions of articles 13 and 14 of the RGPD.

The purposes of the treatment are protected in the public interest and in the provision of the higher education service entrusted to the University of Vigo through Organic Law 6/2001, of December 21, on Universities and other related regulations.

The data collected by the University of Vigo serves the purposes directly related to its powers and functions. In this sense, it will collect, process, store and use them to carry out its relationships with students, former students, teaching and research staff, administration and services staff, other users of the services it provides, as well as suppliers and other people. physical or legal.

 

Legitimation

The University of Vigo is entitled to process personal information in accordance with the principle of legality indicated in article 6 of the RGPD and, specifically, to:

Compliance with different legal obligations such as, for example, Organic Law 6/2001, of December 21, on universities; Royal Decree 412/2014, of June 6, which establishes the basic regulations for admission procedures to official university degree courses; Royal Decree 1125/2003, of September 5, which establishes the European Credit System and the system of qualifications in university degrees of an official nature and valid throughout the national territory; Law 40/2015, of October 1, on the legal regime of the public sector; Law 39/2015, of October 1, on common administrative procedure; Law 14/2011, of June 1, on science, technology and innovation; to Law 9/2017, of November 8, on public sector contracts, Legislative Royal Decree 8/2015, of October 30, which approves the revised text of the General Law of Social Security; Organic Law 11/1985, of August 2, on freedom of association; Law 16/1985, of June 25, on the Spanish Historical Heritage; Organic Law 3/2007, of March 22, for the effective equality of women and men; Legislative Decree 1/1999, of October 7, which approves the revised text of the Law of the Financial and Budgetary Regime of Galicia; Law 2/2015, of April 29, on public employment in Galicia; Law 7/2014, September 26, on Galician files and documents; Law 1/2016, of January 18, on transparency and good governance; the Statutes of the University of Vigo etc.

The fulfillment of a mission carried out in the public interest: the University of Vigo is part of the institutional public sector and, therefore, the processing of personal data is necessary to provide the public service of higher education, as well as to exercise public powers conferred on the University of Vigo by Organic Law 6/2001, of December 21, on universities, by their statutes and by the rest of their own regulations.

The fulfillment of a legitimate interest: for example, for the correct maintenance of the relations of the members of the university community with the University of Vigo.

The fulfillment of certain vital interests of the interested persons or of other natural persons.

The execution of a contract in which the interested person is a party or for the application at the request of this of pre-contractual measures.

The processing of personal data, for one or more specific purposes, conferred by the person concerned.

Record of treatment activities

The University of Vigo is responsible for keeping a record of the treatment activities carried out under its responsibility. Said registry must contain what is specified in article 30 of the RGPD: name and contact information of the person in charge and the delegate of data protection, purposes of the treatment, categories of interested persons and personal data, categories of recipients / as, where appropriate, transfers of personal data to a third country when possible, the periods for deletion of the data categories and a general description of the technical and organizational security measures.

Likewise, each manager and, where appropriate, each manager representative will keep a record of all categories of treatment activities carried out on behalf of the University of Vigo.

Data retention

The personal data provided will be kept for the time necessary to fulfill the purpose for which they are requested and to determine the possible responsibilities that may arise from the same purpose, in addition to the periods established in the regulations on files and documentation.

Recipients to whom personal information is communicated.

Depending on the type of data processing activities carried out, the University of Vigo may be obliged to communicate information regarding interested persons to different institutions, organizations or public or private entities, including recipients in third countries or international organizations.

The planned communications are identified in the record of treatment activities.

Likewise, personal data may be communicated to companies or collaborating entities, for example, to carry out external internships, so that, if there is no authorization to communicate the data in these cases, the service cannot be provided.

International data transfers

The personal information collected by the University of Vigo resides in Spain, but it is possible that it could be transferred to countries outside the European Union, for example, in the case of some exchange programs. If so, the University of Vigo undertakes to comply with the legal requirements established by Spanish and European Union regulations.

 

Rights in relation to personal data

Any person, as the owner of personal data, has the following rights recognized in the terms and conditions indicated in articles 15-22 of the RGPD:

  • Right of access. The interested person will have the right to obtain from the University of Vigo the confirmation of whether or not they are treating personal data that concerns them and, in this case, the right of access to personal data and for the purposes of treatment, to the categories of personal data , to the recipients to whom the personal data was communicated, in particular, to recipients in third parties or international organizations if possible, to the planned period of conservation, to the possibility of requesting other rights, to file a claim with the control authority, the existence of automated decisions or any information available on its origin.
  • Right of rectification. The interested person will have the right to obtain from the University of Vigo, without undue delay, the rectification of inaccurate personal data that concerns him. Depending on the case, you must provide the necessary documentation to prove the requested change.
  • Right to erasure (or right to be forgotten). The interested person shall have the right to obtain from the University of Vigo, without undue delay, the deletion of the personal data concerning him when they are not necessary in relation to the purposes for which they were collected; When you withdraw the consent on which the treatment is based in accordance with article 6.1 a) or article 9.2 a) and it is not based on another legal basis; When you object to the treatment in accordance with article 21.1 and no other legitimate reason prevails; when the personal data were unlawfully processed; when the data must be deleted to comply with a legal obligation; or when the data were obtained for offers of services of the information society mentioned in article 8.1.

 

A series of exceptions are regulated in which this right will not apply, for example, when the right to freedom of expression and information must prevail, for the fulfillment of a legal obligation, for reasons of public interest in the field of public health , for archival purposes in the public interest, scientific and historical research purposes or formulation of exercise or defense of claims. 

  • Right to limitation of treatment. The interested person will have the right to obtain from the University of Vigo the limitation of the data processing, both temporarily and permanently, when he challenges the accuracy of the personal data; when the treatment is illegal; When the university no longer needs the personal data for the purposes of the treatment, but the interested person needs them for the formulation, exercise or defense of claims; and when you oppose the treatment according to article 21.1.
  • Right to data portability. The interested person will have the right to receive the personal data that concern him (which will be provided to the University of Vigo in a structured format, of common use and mechanical reading) and to transmit them to another person responsible for the treatment without being prevented by the University of Vigo when the treatment is based on your consent or is carried out by automated means.
  • Right of opposition. The interested person will have the right to oppose at any time, for reasons related to their particular situation, that the personal data that concerns them be subject to a treatment based on the provisions of article 6.1 letters e) or f), including the preparation of profiles on the basis of those provisions. The University of Vigo will stop processing personal data unless it proves compelling legitimate reasons or in the exercise or defense of possible claims. 
 

Exercise of rights

The interested person may exercise their rights at no cost and will have the right to receive a response, within the deadlines established by current legislation on data protection, by the following means:
  • Through the written request, signed and presented in the registry of the University of Vigo or in one of the registries or post office referred to in article 16 of Law 39/2015, of October 1, addressed to the Secretariat General of the University of Vigo. Along with the application, you must provide a photocopy or scanned copy of the ID or passport. In case of acting through a legal representative, you must also provide the ID and the document proving the representative's presentation.
  • If the University of Vigo has reasonable doubts regarding the identity of the natural person making the request, it may request the additional information necessary to confirm the identity of the interested party.
  • The University of Vigo must satisfy the rights without undue delay, and in any case, it will respond to requests within one month of receipt. This period may be extended for another two months if necessary, taking into account the complexity and number of requests. The interested party will be informed of the extensions within a month from the receipt of the request, indicating the reasons for the delay.
  • In any case, the interested person may direct their request to the data protection delegate at the email dpd@uvigo.gal.
  • Likewise, if the University of Vigo does not process the interested party's request, it will inform them without delay, and within a month at the latest, of the reasons for their failure to act and of the possibility of filing a claim with the Spanish Data Protection (AEPD) at the web address https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf.

 

Security measures

The interesteThe University of Vigo is committed to protecting personal data by applying the necessary security measures in accordance with its information security policy. It will take into account the state of the art, the costs of application and the nature, scope, context and purposes of the treatment, as well as the risks of variable probability and severity for the rights and freedoms of the persons concerned. Both the University of Vigo and the different processors will apply appropriate technical and organizational measures to guarantee a level of security appropriate to the risk and in accordance with the provisions of article 32 of the RGPD.