1. Data controller
The processing of the personal data obtained from the forms on this page will be the responsibility of the Fundació per a la Universitat Oberta de Catalunya (hereinafter the "FUOC"), with tax identification number G-60667813 and registered address at Rambla del Poblenou, 154-156, Barcelona.
If you have any queries about how your personal data are processed, please contact the data protection officer at:
Email: dpd@uoc.edu
Post: Rambla del Poblenou 154-156, Barcelona, FAO: FUOC Data Protection Officer.
2. Purposes of the processing
Your personal data may be processed for the following reasons, depending on the specific purposes for which you have provided them to us by filling in the form selected in each case, or through other means of data collection:
- Providing personalized advice from a tutor who will guide you in your choice of courses for the academic year you are interested in and help you with information about the enrolment fee, credit recognition, grants and the documents you need to provide for your subsequent official enrolment.
-
Providing the teaching services arranged in the enrolment, which involves the data processing necessary to that end, which may include the following:
- Using the student's image and voice during online teaching activities.
- Audio and/or video recordings of the student, either synchronously or asynchronously, during online teaching activities.
- Assessment of teaching material prepared by the student.
- Audiovisual recordings (image and voice) during oral tests, such as final examinations, continuous assessment activities, the presentation and/or defence of projects, etc.
- Using tools that assist in verifying authorship during final examinations, continuous assessment activities, the presentation and/or defence of projects, etc.
-
Carrying out the procedures necessary for official enrolment, which involves associated administrative procedures including:
- Admissions, in which the documentation provided by the student is reviewed by the UOC for validation purposes.
- Student services, through which the UOC establishes and makes communication channels available to students.
- Certification, which enables and administers the student's ability to request certificates related to their academic record.
- Granting access to the Virtual Campus.
- Identification for taking online tests, in order to carry out the verification processes during assessment tests in order to prevent identity fraud.
- Preventing academic fraud.
- Performing administrative procedures for registering (and de-registering) students in the cloud tools necessary to study at the FUOC, such as G Suite For Education UOC and Adobe Creative Cloud. Ensuring access to the Virtual Campus under the terms of use and services associated with the data subject according to their role, whether they are active students, course instructors, alumni or whatever role may be assigned to them at any given time. Participation in the Virtual Campus involves the automatic assignment of an individual username associated with an account for office software applications and cloud tools that includes the FUOC email address. You can consult the terms of service of the Google Workspace for Education.
- Managing the information sent regarding the programmes offered by the UOC in the academic field you have chosen.
- Assessing and monitoring the services offered by the UOC by means of statistics and satisfaction surveys.
- Creating a profile based on the interests you have told us about and the studies you wish to take, in order to send communications about UOC products, services and promotions, if you have expressly authorized us to do so.
- We will send you information about UOC products, services and promotions if you have expressly authorized us to do so.
-
Managing telephone calls to people who have expressly requested to be contacted by the UOC in order to receive information, which implies the processing of personal data for the following purposes:
- Recording the call for quality assurance purposes.
- Providing the data subject with the information requested.
- If necessary, supporting and helping the person to enrol for the programme they wish to take.
- Conducting satisfaction surveys on all the services provided by the UOC to the data subject, such as surveys about the telephone attention received, the degree of satisfaction with the studies completed, etc.
We will not process your personal data for any reason other than those listed here, except as a result of a legal obligation or court order.
3. Duration
The personal data collected will be processed by the FUOC for the purposes indicated in each case, for the time necessary to manage and provide the services requested and, in cases where you have given us your prior express consent, until you request us to stop doing so.
In specific terms, the data provided for enrolment will be kept for as long as the enrolment is valid. They will then be blocked until the applicable data storage period has elapsed. Identifying data used to perform verification processes during online assessment tests to prevent identity and academic fraud will be kept for the duration of the online tests and generally for a period of one (1) academic year, starting when the record of the grade is final.
Data that enable access to the Virtual Campus and the use of its tools will be kept as long as the data subject does not request the cancellation of this right granted by the FUOC to their community, or until the applicable data storage period has elapsed.
Data for sending information about the programmes offered by the UOC in the educational field you have chosen, according to the profile created on the basis of the interests you told us about, will be kept as long as the data subject does not ask to delete them.
At the end of this period, the FUOC will keep the personal data blocked for as long as they may give rise to legal obligations. When these obligations no longer apply, the personal data will be deleted permanently.
4. Legal basis for processing, automated decisions and profiles
The legal basis for the personal data processing required for the indicated purposes is as follows:
The legal basis for processing relating to access and enrolment procedures, advice, registration for the tools necessary to study at the FUOC and the provision of teaching services is the performance of a contract.
The legal basis for data processing of the audiovisual recording of the various oral tests that are carried out during the studies taken at the FUOC, and the use of tools that help prove authorship in tests, examinations and/or activities is the performance of a task carried out in the public interest.
The legal basis for sending information about the academic field you have chosen or in which you have enrolled, compiling statistics and conducting satisfaction surveys is the legitimate interest of the FUOC.
The legal basis for the creation of basic profiles, exclusively for the purpose of sending personalized information regarding the academic field you have chosen or in which you have enrolled, is the legitimate interest of the subjects in receiving information about courses that may be complementary to the studies you have completed, provided that you do not object to this processing and profiling through the channels provided for this purpose by the FUOC.
We may process your data using partially automated means for some services.
Furthermore, if you expressly authorize us to do so by ticking the relevant box on the relevant form, the legal basis for sending information about the FUOC's products, services and promotions is your consent, which you may withdraw at any time through the channels provided for this purpose by the FUOC.
With regard to telephone calls made to data subjects in order to provide them with the information they have specifically requested, as well as possible enrolment assistance provided during the telephone call, the legal basis is the consent provided when requesting information from the FUOC.
5. Data storage location
The information and personal data provided are stored on the servers of the FUOC or of suppliers and data processing companies whose servers are located in the European Union. In the event that data are processed outside the European Union, they will be processed in accordance with the legal safeguards set out in the applicable legislation, and in accordance with the stipulations made by the data protection authorities at all times.
Likewise, in accordance with the provisions of Regulation (EU) 2016/679, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data (GDPR) and Spanish Law 34/2002, of 11 July 2002, on information society services and e-commerce (LSSICE), the FUOC has taken the necessary security measures (both technical and organizational) to guarantee and protect the confidentiality, integrity and availability of the data processed.
6. Communication and international transfers of data
The data you provide us with through the forms on the FUOC website will be passed on to third parties if necessary to comply with the legal obligations that apply in each case.
The FUOC also works with a number of service providers that assist it in performing various tasks related with the processing of personal data. Providers with a particularly important role in data processing will be mentioned in the first layer.
To that end, the data provided may be passed on to institutions responsible for the processing: these may include service providers for sending communications, cloud applications such as G Suite, messaging services, agencies, identification and identity verification services, services enabling the proper functioning of the Virtual Campus, etc.
In these cases, the FUOC will ensure that the company that provides the service in each case has adequate privacy and security policies in force, through binding contractual clauses for all the parties involved.
International transfers may also take place in accordance with the framework for authorization and prior notification established by the current legislation, as set out in the section stipulating where the data is stored. The appropriate protection and security measures will be adopted in each case.
7. Data subjects' rights
To exercise the rights set out below, simply contact the Fundació per a la Universitat Oberta de Catalunya, through any of the following channels, with the subject heading "Data Protection":
-
By emailing fuoc_pd@uoc.edu.
You can also contact our data protection officer if you have any questions or queries about how the FUOC processes your personal data by sending an email to dpd@uoc.edu.
- By post, to Rambla del Poblenou, 154-156, 08018 Barcelona.
Our data protection officer will respond within a reasonable period of time (which may be up to two months).
If the request does not meet the requirements for processing, you may be asked to amend it.
For example, you may be asked to send a copy of your national identity document (DNI) or an equivalent identification document to prove your identity.
There is no charge for exercising these rights, although a fee may be charged for requests that are baseless, excessive or repetitive.
Likewise, if you no longer wish to receive newsletters or promotional communications by email from the FUOC, you can unsubscribe by sending an email to the address shown in the communications received or by clicking on the link at the bottom of all our messages.
8. Rights
Right of access: allows data subjects to know and obtain information about the personal data concerning them that are being processed.
Right to rectification: allows data subjects to have any inaccurate or incomplete data corrected or modified.
Right to object: allows data subjects to request that their personal data not be processed and to stop any processing of their data that is taking place.
Right to erasure: allows data subjects to request the deletion of their personal data.
Right to restriction of processing: the marking of stored personal data in order to restrict its processing in the future.
Right to data portability: the right of data subjects to receive their processed personal data so that they can pass them on to another controller without hindrance.
Right not to be subject to automated individual decision-making, including profiling, for which they have not provided their express consent.
Right not to be subject to a decision based solely on automated processing which has legal effects concerning the data subject or significantly affects them.
Right to withdraw consent at any time.
Data subjects are also entitled to file a complaint with the Catalan Data Protection Authority (APDCAT) if they believe their data protection rights have been infringed.
9. Security
In response to the trust placed in us, and considering the importance of the protection and confidentiality of users' personal data, the UOC hereby informs you that it has adopted all the technical and organizational measures necessary to safeguard the security of those data, as required by the GDPR, the current legislation on the protection of personal data and the opinions of the competent authority on data protection and information security.
10. Cookies
You can find all the information on the use of cookies in our cookie policy.
11. Changes to this privacy policy
The UOC reserves the right to amend this policy in order to adapt it to new legislation or jurisprudence. The UOC will provide timely notification of any amendments to this policy.