Data Protection Policy

Following the entry into force of the new European General Data Protection Regulation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 —hereinafter, the GDPR—, we include updated information on the processing of personal data relating to our customers, under the terms required by EU regulations.

In accordance with the provisions of the regulations, we inform you that your personal data will be incorporated into an internal file owned by the University of Huelva. The existence of these files is recorded in our register of processing activities.

Who is the Data Controller responsible for processing your personal data?

Identity: University of Huelva

Tax ID: Q7150008F

Postal address: Campus de la Rábida. Carretera Huelva-Palos de la Frontera, s/n. Huelva, Andalusia 21819

Email: andujar@diesia.uhu.es

Security Officer: University of Huelva

For what purpose do we process your data?

On our website, we offer you the possibility of contacting us through different contact forms, as well as the possibility of enrolling in our training offer, for which you will be asked to provide a series of data for the sole purpose of studying your possible access to our training offer or to enable us to contact you if you request information. Under no circumstances will your data be used for any purpose other than that strictly necessary for carrying out the requests we receive, as well as for the management and storage of such data in order to satisfy possible claims and legal obligations.

This website will never make automated decisions in the processing of your data; processing will always be in accordance with the consent given by the user for the processing of their personal data.

How did we obtain your data?

Personal data is always entered by users in the different contact forms. To collect the different data, we have systems in place that ensure the consent given by the user themselves for the processing of such data.

None of the data we process is specially protected data; it corresponds to a basic or medium categorization in terms of the security measures to be applied for its processing.

How long will we process your data?

The data will be kept for as long as the user’s relationship with the company remains in force and, after the relationship has ended, for the period legally established for the retention of all data relating to invoicing.

The user may object to the processing of their personal data at any time.

What is the legal basis for processing your data?

The legal basis for processing your data is the consent given by the user when transferring their data by completing the contact forms, as well as the commercial or service relationship we provide to users; otherwise, contracts could not be carried out and the service could not be provided.

Consent to the provision of data is mandatory in order for us to contact you, as well as to formalize the commercial and contractual relationship. For this reason, we have means in place to ensure the consent given by the user.

The products we offer are only accessible to adults. If a minor requests information, they must do so under the supervision of an adult.

To which recipients will your data be disclosed?

Your data will not be transferred to third parties without your consent, and only in the absence of such consent when required by law.

However, in order to provide the services offered by the website, it is necessary for us to work with third parties such as hosting and email providers, which allow us to store the website information on the internet so that it can be accessible and so that we can have email services that enable communication between the website and different users.

These servers store information relating to IP addresses and browsing data on their own servers. It is strictly necessary to use the services provided by these third parties, as otherwise we would not be able to offer you the web service.

Likewise, on our website we use software to analyze web traffic so that we can provide a better experience, offer you more personalized services, and improve the services requested. These tools collect user information through cookies; although this is not personal data such as name, address, etc., it is identifiable data such as the IP addresses associated with the computer from which the user is browsing.

For more information about these plugins and how to disable them, you can access our cookie policy.

All the aforementioned third parties are required to comply with the same legal provisions as we do, so their processing of your data will always be legally protected.

Below, we list the third parties responsible for processing your data and include a link to their privacy policy:

Hosting and email: WebEmpresa

Privacy policy address: https://www.webempresa.com/aviso-legal.html

Analytics software: Google Analytics

Privacy policy address: https://www.google.com/analytics/learn/privacy.html?hl=es

What are your rights when you provide us with your data?

Users have the right of access, rectification, erasure, objection, restriction, and portability.

The right of access entails the right to obtain the personal data we have stored in our files.

The right of rectification entails the right of users to rectify any data they consider inaccurate or to complete any data they consider incomplete.

The right of erasure, or right to be forgotten, entails the right of users to have all data we hold deleted without delay, provided that the legally established requirements under the GDPR are met.

The right of objection entails the right of users to object to the processing of their personal data, provided that the legally established requirements under the GDPR are met.

The right to restriction entails the right of users to have us suspend the processing of their personal data, as well as to retain it in the event of legal claims.

The right to data portability entails the right of users to receive their own personal data in a readable file so that it can be transmitted to another data controller.

How can you exercise your rights?

Users may exercise any of their rights recognized under the GDPR by submitting a written and signed request accompanied by a photocopy of their National Identity Document or a document proving representation, if exercised through a representative, to the postal address of the controller, University of Huelva, at Campus de la Rábida. Carretera Huelva-Palos de la Frontera, s/n. Huelva, Andalusia 21819, or by email, attaching an image or photocopy of the National Identity Document as well as the document proving representation, if exercising their rights through a representative, to the email address andujar@diesia.uhu.es.

Your request will be addressed within 10 days and the right you claim will be exercised if we are in legally protected circumstances.

The user may also submit a complaint to the Spanish Data Protection Agency —contact details available at www.agpd.es— or an equivalent competent supervisory authority, if the user considers that their rights have been infringed or has not obtained satisfaction in exercising them.