Legality

Privacy policy

Data controller for the personal data collected through the website

The UdL is the data controller for the personal data that the users provide through this website, pursuant to the regulations in force on the protection of personal data – Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).

Data protection officer

Data Protection officer (DPD)
Rectorat Building
Pl. De Víctor Siurana, 1
25003 Lleida
dpd@udl.cat
973 70 21 97

Personal data processed and purpose of the processing

The UdL processes the data of the users in accordance with the form in which they have been provided, in accordance with the following categories. The purpose of the processing changes depending on the channel that the users have used to provide them.

Electronic office:

Purpose:
Access by the users to the electronic office of the UdL, and the possibility of carrying out the procedures and formalities available: obtaining a temporary key (24 hours), presentation of applications and/or registration of documents, management of a personal folder, making of payments, request for electronic invoice, etc.

Data category:
Identification data (first name, surnames, e-mail address, telephone, address, ID card number, Foreigner Identification Number or passport).
Academic data.
Economic and financial data.

Activities:

Purpose:
Participation in different activities promoted by the UdL or in which the UdL collaborates.

Contact mailboxes, request for information or advice, suggestions:

Purpose:
Contact the different areas, services, faculties and/or bodies of the UdL. Resolve queries, make complaints or make enquiries and suggestions.

Data category:
Identification data (first name, surnames, e-mail address, telephone, address, ID card number, Foreigner Identification Number or passport).
Academic data.
Employment data.

Registration on courses:

Purpose:
Registration and participation in the courses given by the UdL.

Data category:
Identification data (first name, surnames, e-mail address, telephone, address, ID card number, Foreigner Identification Number or passport).
Academic data.

Purchases in Editions and Publications of the UdL:

Purpose:
Process the purchase of the products selected in the Editions and Publications of the UdL shop.

Newsletter:

Purpose:
Subscribing to or unsubscribing from the newsletter of the UdL.

Data category:
Identification data (e-mail address).

UdL Alumni:

Purpose:
Registration, access and participation in the platform of the UdL alumni association, and in the services and initiatives promoted from this platform.

Data category:
Identification data (first name, surnames, e-mail address, telephone, address).
Academic data.

Training non-university staff:

Purpose:
Registration of teachers from outside the university sphere for training sessions given by the UdL.

Data category:
Identification data (first name, surnames, date of birth, Tax Identification Number, e-mail address, telephone).
Academic data.
Employment data.

Placement portal of the UdL:

Purpose:
Registration of organizations or companies and students with the external placement platform of the UdL.

Data category:
Identification data (first name, surnames, date of birth, ID card number, Tax Identification Number, passport, e-mail address, telephone, gender).
Academic data.
Employment data.

Legitimacy of the processing

The legal bases for the processing carried out and described in the previous point are as follows:

1. The explicit consent granted by the person on accepting the conditions of use and privacy policy in relation to the different services which require it.
2. The mandatory nature of the processing in relation to the need to perform a contract (labour, academic, agreement, etc.) between the two parties.
3. The mandatory nature of the processing in fulfilment of any legal obligation which may exist.
4. The mandatory nature of the processing to satisfy the legitimate interests pursued by the UdL.

Failure to accept this (mandatory) privacy policy shall give rise to the impossibility to carry out the management of the services and/or actions undertaken by the individual. In this case, no type of processing shall be carried out.

Data retention

We retain the user data provided in accordance with the following criteria:

1. In those instances of processing in which the purpose does not expire, the data shall be retained for as long as the users do not exercise their rights of deletion or opposition and/or revoke the explicit consent provided.
2. In accordance with the periods established in the regulations.
3. Until the time barring of the legal actions which may arise.

In any case, the data shall be destroyed under the terms and conditions foreseen in the regulations on retention and deletion of administrative documents of the UdL and the documentary assessment tables approved by the Generalitat of Catalonia (http://www.udl.cat/ca/serveis/arxiu).

Recipients of the communications

The UdL may communicate the personal data to third parties in the following cases:

· Suppliers which provide services to the UdL. The UdL has signed the corresponding contract or addendum for the commissioning of the processing with each of the suppliers which collaborate with the UdL in order to ensure that their personal data are processed pursuant to the applicable regulations.
· Entities and/or collaborators of the UdL which participate in a processing purpose described in this policy and for which the users have provided their personal data.
· In those cases, in which there is a legal obligation to communicate the data.

Rights of the individuals

The users may access their data at any time; request their rectification, deletion or portability; oppose their processing, and request the limitation of the processing, provided that this is compatible with the purposes described, by means of a written message sent to the address dpd@udl.cat.

They may also make a claim addressed to the Catalan Data Protection Authority, through its electronic office (https://seu.apd.cat) or by non-electronic means.

Origin of the data

In principle, the data always come from the data subjects. In the event of receiving a communication from the UdL and not being aware of having provided your data, it is possible that a third party has taken your status or identity. In this case, kindly notify us using the means provided in this privacy policy.

In this respect, the users are liable for the authenticity of the data provided, ensuring that they are accurate, current and complete for the purpose for which they are provided, and accept liability for damages, both for loss of profit and for consequential damages, which may arise from these inaccuracies or untruths. In any case, if the data provided on the corresponding forms are owned by a third party, the users become the sole parties responsible for obtaining their consent correctly and for providing them with the information on the aspects reflected in this legal notice and privacy policy.