Privacy policy

Who is responsible for your data?

  1. Identity: UNIVERSIDAD DE LEÓN (en adelante, UNILEON)
  2. CIF: Q2432001B
  3. Address Av. Facultad, 25. 24004 León (España)
  4. Email secgen@unileon.es
  5. E-mail address of the Data Protection Officer dpd@unileon.es

TAFI, as the party responsible for the Website, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, in Organic Law 3/2018, of 5 December, on the protection of personal data and guarantee of digital rights and by Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity and availability of the data entered.

For what purpose do we process your data?

Your personal data will only be used for the following purposes:

  • To carry out the necessary administrative procedures with the users of the website;
  • To send commercial advertising communications by email, fax, SMS, MMS, social communities or any other electronic or physical means, in the event that the User has expressly consented to the sending of commercial communications by electronic means by subscribing to the newsletter;
  • Respond to queries and/or provide information requested by the User;
  • To perform the services provided and/or subscribed to by the User.
  • Participate in university prizes and competitions.
  • Use your data to contact you, both electronically and non-electronically, to obtain your feedback on the service provided.
  • Notify you of changes, important developments to the privacy policy, legal notice or cookie policy.
  • Security of the facilities through a video surveillance system.

You may revoke your consent at any time by sending a letter with the subject ‘Withdrawal’ to dpd@unileon.es.

In accordance with the LSSICE, UNILEON does not carry out SPAM practices, therefore, that have not been previously requested or authorised by the User. Consequently, in all communications that you will receive from TAFI, the user has the possibility to cancel their express consent to receive our communications.

We will not process your personal data for any other purpose than those described above except as required by law or court order.

Your data will be retained for the duration of your contract with us or for as long as you exercise your right to erasure, objection or restriction of processing. However, we will retain certain personal identification and traffic data for a maximum period of 2 years in the event that we are required to do so by a court of law or in order to initiate internal proceedings arising from the misuse of the website.

You will not be subject to decisions based on automated processing which produce effects on your data.

What is the legitimate basis for processing your data?

The lawful basis for the processing of the data may be a task carried out in the public interest, legal obligation, contractual performance, and in other cases, consent of the data subject depending on the purpose for which the personal data were collected, in accordance with Article 6 of the European Data Protection Regulation.

Communication of personal data

UNILEON does not disclose your personal data to third parties who process it in any way that goes beyond what is legally stipulated. No international data transfers will be made. The information you provide to us both through this website and through the application will be hosted on UNILEON's servers.

What rights can I exercise as a data subject?

As a data subject, you may request the exercise of the following rights before UNILEON by sending a letter to the postal address in the heading or by sending an email to dpd@unileon.es indicating as subject: ‘RGPD, Rights affected’, and attaching a photocopy of your ID card or any similar means in law, as indicated by law.

  • Right of access: allows the data subject to know and obtain information about his or her personal data undergoing processing.
  • Right of rectification or erasure: allows errors to be corrected and data which prove to be inaccurate or incomplete to be amended.
  • Right of cancellation: allows data that proves to be inadequate or excessive to be deleted.
  • Right to object: the right of the data subject to prevent or stop the processing of his or her personal data.
  • Treatment limitation: entails the marking of the personal data retained, with the aim of limiting their future processing.
  • Data portability: provision of the data undergoing processing to the data subject, so that he or she may transmit them to another controller, without hindrance.
  • The right not to be subject to automated individual decision-making (including profiling): the right not to be subject to a decision based on automated processing which produces effects or significantly affects.

In addition, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out prior to the withdrawal of consent.

You also have the right to lodge a complaint with the supervisory authority if you believe that your data protection rights may have been violated (agpd.es).

With regard to your image, we inform you that the photographs posted on the website are the property of UNILEON, including those of minors, in which, in order to obtain them, the prior consent of the parents, guardians or legal representatives has been obtained by signing the forms provided for this purpose by the centres in which the minors form part.

What security measures will be taken to protect my personal data?

The data you provide will be treated confidentially.

UNILEON has adopted all the technical and organisational measures of the National Security Scheme to ensure security in the processing of data and prevent its alteration, loss, theft, unauthorised processing or access, according to the state of technology and the nature of the data stored. Likewise, it is also guaranteed that the processing and recording in programmes, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established in the regulations in force.

Subsequent amendments to this policy and competent jurisdiction

UNILEON reserves the right to modify this policy to adapt it to new legislation or case law.

To all effects and purposes the relations between TAFI and the Users of its telematic services, present on this Website, are subject to Spanish legislation and jurisdiction to which the parties expressly submit themselves, and the Courts and Tribunals of León shall be competent for the resolution of all conflicts arising from or related to its use.