Responsible entity
The data controller is "ALCALINGUA - UNIVERSIDAD DE ALCALÁ S.R.L." (hereinafter, "ALCALINGUA"), with address in Alcalá de Henares, C / Escritorios, 4 and N.I.F. B-82335902
Personal Data Processing Activities
Clients and suppliers
Purpose: Management of the relationship with customers, contact persons within the customer's organization, suppliers and contact persons within the supplier's organization.
Legal basis: Contract, legal obligation and legitimate interest.
Data categories: Identifying Data, Personal Contact Data, Financial Data, Goods and Services Transaction Data, Professional Data and Employment and Training Details Data.
Communications and data transfers: Tax Administration, Banking Entities and Treatment Managers.
Conservation: Maximum term of six years.
HR Human Resources
Purpose: Selection and management of personnel, training of personnel, social benefits, promotion and management of employment and labor control.
Legal basis: Contract, consent and legitimate interest.
Data categories: Identifying Data, Personal Contact Data, Personal Characteristics Data, Social Circumstances Data, Financial Data, Professional Data, Employment and Training Details Data, Other Special Categories of Data and Data of Groups of special vulnerability.
Communications and data transfers: Social Security Organizations, Tax Administration, Banking Entities, Insurance Entities, and Treatment Managers.
Conservation: Maximum term of ten years and twelve months the data of the CVs of the candidates.
Students
Purpose: Management of admission, courses and accommodation of foreign students who come to train or improve their studies.
Legal basis: Contract, legal obligation and legitimate interest.
Data categories: Identifying Data, Personal Contact Data, Personal Characteristics Data, Social Circumstances Data, Financial Data, Goods and Services Transaction Data, Professional Data, Employment and Training Details Data, Special Data Categories, Special Collective Data vulnerability.
Communications and data transfers: Social Security Organizations; Tax administration; Justice Administration; Banks, Savings Banks; Insurance Entities and Treatment Managers.
Conservation: Maximum term of six years.
Video surveillance
Purpose: Video surveillance of the facilities.
Legal basis: Contract, legal obligation and legitimate interest.
Data categories: Identifying data.
Communications and data transfers: Security Organisms and Treatment Managers.
Conservation: Up to a maximum of 1 month.
Data transfers outside the EU
ALCALINGUA does not transfer data outside the territory of the EU, except to companies subject to the Privacy Shield agreement.
Security measures
We use appropriate technologies and procedures to protect data from accidental loss and from unauthorized access, use, destruction or disclosure. We make backup copies to be able to recover the information in the event of an incident. And we also implement appropriate physical and technological measures for the storage and transfer of your data safely.
Rights of those affected
Those affected have the rights recognized by the regulations on protection of personal data and privacy, which are the following.
- Right to have your data treated fairly and transparently.
- Right to be informed of the processing activities, including the communication of your data to third parties
- Right to receive all information in a concise, transparent, intelligible and easily accessible manner, with clear and simple language.
- Right to request access to your data in order to know what data of yours is being processed, for what purpose, where it comes from and if it is communicated or if it has been communicated to third parties.
- Right to request the rectification of inaccurate personal data that concerns them.
- Right to complete incomplete personal data.
- Right to request the deletion of the data that concern them, for example when they are no longer necessary in relation to the purposes for which they were collected or when established by a legal obligation.
- Right to request the limitation of the processing of your data, for example, when the accuracy of the data has been questioned or when the data is no longer necessary for the original purpose and, however, cannot be erased for legal reasons.
- Right to object to treatment for reasons related to a particular situation of the affected party.
- Right to object to being subject to automated individual decisions, including profiling.
- Right to object to commercial communications being sent electronically.
- Right to totally or partially revoke the consent given.
To exercise any of their rights, those affected may write to the address of the person responsible for the treatment that have been stated in the first section of this privacy policy or by email addressed to dpd@alcalingua.com
They will receive a response within a maximum period of one month.
For identification purposes, it will be necessary for those affected to send a copy of their ID or passport so that the data controller can verify your identity.
If the affected party chooses to exercise their rights through a legal representative, it will be necessary for her to identify herself as such and to prove the representation through a special power of attorney.
Control organization
The control body in Spain regarding data protection is the Spanish Agency for Data Protection, which has its headquarters at Calle de Jorge Juan, no. 6, Madrid (28001) and before which those affected may file a claim if they deem it appropriate.
This organization also has a citizen service, in person and by phone (0034.901.100.099), and has its own website at the following address: https://www.aepd.es/
