Privacy Policy

Responsible for processing and DPO contact details

In order to adapt the TECHNOLOGICAL INSTITUTE OF ARAGÓN to the personal data protection legislation (Regulation (EU) 2016/679, henceforth GDPR) we are undertaking the task of complying with its new requirements and forms, including those dealing with processing data in a legal, trustworthy, transparent, suitable, pertinent, limited, exact and up-to-date manner.

By virtue of it, and as established by article 13 of said legislation, the duty of disclosure concerning processing is expanded. To this effect, and by means of this privacy policy, we expand on the information we made available to you at one time:

Responsible for processing: INSTITUTO TECNOLÓGICO DE ARAGÓN
CIF (tax identification number): Q5095008H
Address: Calle María de Luna 7-8, 50018 Zaragoza

DPO contact details: dpo@itainnova.es

Processing, purposes and legitimisation

By virtue of the relationship established with ITAINNOVA, the storage of your data, the processing we subject them to, and the intended purposes, vary. To this effect, there are different categories of interested parties: clients, suppliers, students, candidates and contacts.

Below we show the processing purposes and legitimisation for each one of the processings undertaken:

 

Purpose of the processing

Legitimisation of the processing

PROCESSING OF CLIENT DATA Client management and invoicing; sales management and payment collection; entering into contracts or agreements and drawing up quotations; development of Projects or provision of services; obtaining sales statistics and commercial histories; data storage required for tax and commercial legislative purposes and those pertaining to the commercial relationship. Processing required to execute a contract to which the interested party is a signatory (article 6.1.b) of the GDPR).
Sending information about our services and activities and to invite them to days out and/or events promoted by, or at which ITAINNOVA is participating. Expressly requested Consent (Article 6.1.a) of the GDPR).

 

Purpose of the processing

Legitimisation of the processing

PROCESSING OF SUPPLIER DATA To undertake the management of purchases, payments and suppliers; and obtaining commercial relationship histories. Processing required for the execution of a contract to which the interested party is a signatory (article 6.1.b) of the GDPR).

 

Purpose of the processing

Legitimisation of the processing

PROCESSING OF STUDENT DATA To manage the course in which he/she may take part (pre-registration, enrolment, development, invoicing, etc.). Unequivocal Consent of the interested party when enrolling on a course once the purposes of the processing are known (Article 6.1.a) of the GDPR).
Provide information (including by electronic means: emailing and SMS) about other courses, activities and promotional events promoted by, or at which the Technological Institute is participating, so long as these may be of interest. Expressly requested Consent (Article 6.1.a) of the GDPR).
The taking of images of the course and the processing and use of the image for the editing and publication of corporate documents or any other type of document or promotional support of ITAINNOVA, whether as hard copy or electronic (including the corporate website and ITAINNOVA profiles on social media), that will be circulated to ITAINNOVA employees, its clients and suppliers, third-party collaborators with ITAINNOVA, local, regional, national or international Public Administrations as well as to the general public. Legitimate interest of ITAINNOVA (Article 6.1.f) of the GDPR) once the interests and rights of the interested parties and the measures adopted to comply with the obligations in terms of proportionality and transparency have been considered, and concludes that:

1.- the impact on public rights and liberties is limited;

2.-  said processing can be reasonably foreseen by the interested party;

3.- the processing of the data for the above purposes does not give rise to the exclusion of, discrimination against, defamation of, or situations that might put the reputation of the interested party at risk.

 

Purpose of the processing

Legitimisation of the processing

PROCESSING OF CANDIDATE DATA To manage the selection processes undertaken at the Institute, respecting the principles of publicity, merit and competition.

 

Unequivocal Consent of the interested party when sending his/her data once the purposes of their processing are known (Article 6.1.a) of the GDPR).

 

Sending CVs to other companies related to ITAINNOVA for the sole purpose of enabling participation in selection processes deemed appropriate. Expressly requested Consent (Article 6.1.a) of the GDPR).

 

Purpose of the processing

Legitimisation of the processing

PROCESSING OF CONTACT DATA To enable contact with persons of interest for the development of the institution’s activity. Legitimate interest of ITAINNOVA (Article 6.1.f) of the GDPR) once the interests and rights of the interested parties and the measures adopted to comply with the obligations in terms of proportionality and transparency have been considered, and concludes that:

1.- the impact on public rights and liberties is limited;

2.-  said processing can be reasonably foreseen by the interested party;

3.- the processing of the data for the above purposes does not give rise to the exclusion of, discrimination against, defamation of, or situations that might put the reputation and/or negotiating power of the interested party at risk.

Sending information about our services and activities and to invite them to days out and/or events promoted by, or at which ITAINNOVA is participating. Expressly requested Consent (Article 6.1.a) of the GDPR).

 

Purpose of the processing

Legitimisation of the processing

PROCESSING OF IMAGES OF ACTIVITIES UNDERTAKEN AT ITAINNOVA The taking of images of the course and the processing and use of the image for the editing and publication of corporate documents or any other type of document or promotional support of ITAINNOVA, whether as hard copy or electronic (including the corporate website and ITAINNOVA profiles on social media), that will be circulated to ITAINNOVA employees, its clients and suppliers, third-party collaborators with ITAINNOVA, local, regional, national or international Public Administrations as well as to the general public. Legitimate interest of ITAINNOVA (Article 6.1.f) of the GDPR) once the interests and rights of the interested parties and the measures adopted to comply with the obligations in terms of proportionality and transparency have been considered, and concludes that:

1.- the impact on public rights and liberties is limited;

2.-  said processing can be reasonably foreseen by the interested party;

3.- the processing of the data for the above purposes does not give rise to the exclusion of, discrimination against, defamation of, or situations that might put the reputation and/or negotiating power of the interested party at risk.

 

With respect to processing the legitimate basis for which is consent, we inform you that this may be withdrawn at any time.

Data conservation time, Recipients and Your rights

Data conservation time: The data will be kept for as many years as necessary to comply with the legal obligations deriving from their processing, such as the need to justify projects competitively financed by public funds, and to justify the allocation of public Funds received (Feder, FSE, etc.).

Recipients: The data will not be communicated to any third party except where there exists a legal obligation that might impose on us to do so, or when required to do so by public institutions for the purposes of intervention, auditing, certifications, etc.

Your rights: You have the rights of access, rectification, opposition, suppression, portability and limitation of the processing of your personal data, which may be exercised by contacting the person responsible for their processing at, INSTITUTO TECNOLÓGICO DE ARAGÓN at Calle María de Luna 7-8, 50018 Zaragoza or at lopd-ita@itainnova.es.

Similarly, you can present a complaint to the Spanish Data Protection Agency if you consider that your data is not being processed appropriately.