The data controller for the processing of the data subject’s data is the Fundació per a la Universitat Oberta de Catalunya (hereinafter, the “FUOC”). The contact details of the FUOC are as follows:
Address: Avinguda del Tibidabo, 39-43, 08035, Barcelona
Email address: firstname.lastname@example.org
The data subject is hereby informed that the UOC Group has appointed a data protection officer to deal with any issue relating to the processing of your personal data. As the data subject, you may contact the Data Protection Officer using the following contact details:
Address: Avinguda del Tibidabo, 39-43, 08035, Barcelona
Email address: email@example.com
Purpose of the processing
The FUOC informs its users that the personal data they provide will be processed by the FUOC in accordance with the provisions of the General Data Protection Regulation (GDPR).
The purposes of data processing are the following:
In particular, but without limitation, the data is processed for the purpose of providing and managing the Skill Up Hub services, communicating with users regarding activities of the site and the Skill Up project, managing users’ accounts, putting users in contact with each other, providing notices, newsletters and other electronic communications, and for any administrative and legal/judicial purposes.
It is also processed in order to attend to and resolve requests or queries sent through the contact form.
We do not process your personal data for any purpose other than the ones described here, except in the case of a legal obligation or court order.
The FUOC may collect the following personal data categories for processing purposes:
Identity data: includes name.
Contact information: includes email address.
Your data will be processed by the FUOC as the data controller on the following lawful basis:
– The execution of a contract with the registered user.
– Our legitimate interest in knowing our users and their preferences, thus ensuring the correct functioning of the platform. We make sure to consider and balance any possible impact on you (both positive and negative) and your rights before processing your personal data for our legitimate interests. We do not use your personal data for activities in which our interests are nullified by the impact such use has on you (unless we have your consent, or the law requires or otherwise permits).
– Complying with a legal or regulatory obligation means processing your personal data when necessary to comply with a legal or regulatory obligation to which we are subject.
– Express informed consent, particularly for the sending of newsletters.
The FUOC, as the data controller, may transfer your personal data to its third-party suppliers located outside the European Economic Area, always guaranteeing the adequate levels of protection required by European legislation. Your data may also be transferred if necessary to comply with a legal obligation to judges and courts that request it through the courts or in the framework of a police investigation.
The UOC will only store your personal data for as long as is necessary to fulfil the purposes for which they have been collected, including complying with legal or reporting requirements. In determining the appropriate storage period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, whether we can achieve those purposes through other means and the applicable legal requirements.
You have certain rights under the General Data Protection Regulation in relation to your personal data. Specifically, you have the right to:
Request access to your personal data (commonly known as “data subject request”). This allows you to receive a copy of the personal data we have about you and verify that we are processing them legally.
Request the correction of the personal data we have about you. This allows you to correct any incomplete or inaccurate information we have about you, although we may have to verify the accuracy of the new data you provide us with.
Request the erasure (cancellation) of your personal data. This allows you to ask us to erase your personal data when there is no good reason for us to continue processing them. You also have the right to ask us to erase your personal data when you have successfully exercised your right to object to its processing (see below), when we may have processed your information illegally or when we must delete your personal data in compliance with local law. However, please note that we may not always be able to comply with your request for removal for specific legal reasons that will be notified, if applicable, at the time of your request.
Object to the processing of your personal data when we have (or a third party has) a legitimate interest and there is something about your particular situation that makes you want to oppose said processing, or it has an impact on your rights and fundamental freedoms. You also have the right to object when we process your personal information for direct marketing purposes. In some cases, we can show that we have legitimate interests to deal with your information that prevail over your rights and freedoms.
Request the restriction of the processing of your personal data. This allows you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the accuracy of the data; (b) when our use of the data is illegal but you do not want us to erase it; (c) when you need us to store the data, even if we no longer need it to exercise or defend legal claims; or (d) you have opposed our use of your data, but we must verify if we have legitimate reasons to use them.
Request the transfer of your personal data to you or a third party. We will provide you, or a third party that has been chosen by you, with your personal data in a structured, commonly used and readable format. Please note that this right only applies to the automated information that you authorized us to use, as well as the information necessary to enter into any form of contract with you.
Withdraw consent at any time to the processing of your personal data, when said processing is dependent upon consent. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We will advise you of this if this is the case when you withdraw your consent.
To exercise these rights, data subjects can contact us via email at firstname.lastname@example.org. They are also entitled to submit a claim to the controlling authority if they consider that their data protection rights have been violated (http://apdcat.gencat.cat/en/inici/index.html).
Taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as the varying risks of probability and seriousness to the rights and freedoms of natural persons, the FUOC shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, to prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorized communication of or access to such data.