Data Privacy Policy

FUNDADACIÓN PRIVADA UNIVERSITARIA EADA (hereinafter “EADA” or the “Institution”) is the Responsible party for processing. It takes the privacy of its Users extremely seriously and will do its utmost to ensure it is respected.

EADA’s identification data is as follows:

Owner:    FUNDADACIÓN PRIVADA UNIVERSITARIA EADA
Registered address:     Calle Aragón, 204, 08011, Barcelona (Spain)
Tax identification number: ESG08902645
E-mail:     privacy@eada.edu
DPO e-mail:    privacy@eada.edu
Telephone number:     93 452 0844
Registry data:     Registry number 43, Register of Private Foundations of the Generalitat de Catalunya.

EADA collects personal data in the following ways:

i.    Personal data provided by the User: when the User fills in any of the forms on the website or any paper form such as a registration form, an attendance form for activities or when a User registers and/or accesses the Platforms or when the User purchases any of the activities, services and programmes offered by EADA.
ii.    Personal data which is not provided directly by the User: From time to time EADA may collaborate with other institutions on joint programmes and will therefore obtain the personal data of the Users who have enrolled. In all cases, EADA will specifically inform Users of this fact.
iii.    Via Cookies or similar technologies: when the User visits the website, EADA uses various types of technology to collect and store information and this may include the use of cookies or similar types of technology to identify the User’s browser or device. EADA also uses this technology to collect and store information when the User interacts with the services offered by EADA (such as paying the enrollment fee) or other Google functions which may appear on other sites. Google Analytics helps EADA to analyse traffic to the website and/or platforms. The User may obtain more information about how EADA processes their personal data by consulting the EADA Cookies policy Política de Cookies.

Said personal data can be grouped according to the following categories:

Identification data: name, surname, national identity document number or tax identification number, home address and email address, telephone number, handwritten and electronic signature, civil status, image, voice, Social Security number or mutual insurance company number.
Academic data: academic record, grades, qualifications, language level.  
Financial economic data: information regarding the User’s economic and financial situation (income, insurance policies, financial situation, tax, current account).
Professional data: CV, place of work, position held, occupation.
Data used to create profiles: interests and hobbies.
Connection identification data: IP, logs.

EADA processes the personal data of different categories of Interested parties which are also considered Users. These categories include but are not limited to the following:

Users of the Website, Platforms and Social Networks: the personal data of Users who contact EADA via the Website or who access any of the institution’s profiles on social networking sites as a follower or as a independent user or who use any of the Platforms that EADA gives the User access to or which the User may freely access.
Job applicants: personal data of those natural persons who apply to EADA directly for jobs advertised on the Website, Platform and/or in collaboration with third parties which manage the job adverts or job applications.
Programme candidates: personal data of those natural persons who sign up via the Website to begin the admissions process of an EADA programme.
Admitted candidates: personal data of those natural persons who have passed the admissions process and who have received confirmation from EADA of their admission onto a programme.
Participants: personal data of those natural persons enrolled on academic programmes which are organised and taught directly by EADA and/or jointly run with third parties (these may be higher education institutions or organisations related with teaching or with the field of knowledge being studied in the programme), via any channel (open-enrolment training or in-company training) and via any form of learning (on site, blended learning or online)
Alumni: personal data of ex-participants of any of the programmes organised and taught by EADA.
Members: personal data of those natural persons who pay a fee to obtain EADA membership and access its advantages.
Collaborators / providers: personal data of academic collaborators, speakers, conference speakers and service providers of any kind.
Attendees: personal data of those natural persons who attend an event which has been directly organised by EADA or in collaboration with a third party and/or held in any of the event spaces at the EADA facilities.

As has been previously stated, EADA processes personal data obtained     through various channels. EADA processes said personal data depending on     the category of User and according to different purposes:

The personal data obtained via the EADA Website and Platforms will be processed for the following purposes:

1. To reply to the requests for information and/or enquiries made by the User through the contact forms on the Website and / or through the chat platforms made available to them.

Storage period: until EADA has addressed the User’s request for information and once this has been done the necessary time period for any existing applicable legal obligations to be fulfilled.
Legal basis: the User’s consent is implicit when they send their request or enquiry so that EADA may reply.

2. To facilitate the use of the features on the Website, including the purchasing of and/or enrollment on one of the academic programmes advertised on the Website. This also includes the User’s attendance to events (conferences, information sessions or other similar events) which are advertised on the Website and the pre-enrolment form or information regarding the different courses / master’s programmes, postgraduate courses and/or conferences also advertised on the Website.

Storage period: for the duration of the contractual or business relationship between the User and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of any contractual and/or business obligations by the User and EADA on the Website.

1. If the User sends their CV and/or job application to EADA, their data will be treated for the purpose of their application and, if appropriate, permit the User to participate in the selection process for a job position at EADA.

Storage period: all CV’s are destroyed one year after the selection process has finished. If the User wishes to remain on the EADA database, they should resend their CV to EADA after this time period.
Legal basis: the User gives their implicit consent when they send their CV or job application.

 

1. To manage the requests of those natural persons who start the admissions process of an EADA programme via the Website. This may include all types of handwritten or electronic communication between EADA and the candidate regarding the admissions process.

Storage period: for the duration of the relationship between the prospective Candidate and EADA. This includes the candidate being admitted to the programme and/or participating in the programme. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: to correctly manage the relationship with the Candidate so that they may form part of the EADA admissions process.

2. To use the information provided by the Candidate to evaluate their skills for the programme on which they wish to enroll. This may include the creation of a non-automated candidate profile.

Storage period: for the duration of the relationship between the prospective Candidate and EADA. This includes the candidate being admitted to the programme and/or participating in the programme. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: EADA’s legitimate interest in selecting the right candidates for its programmes.

1. To manage all electronic and non-electronic communications related to the enrolment process between EADA and the Candidates who have been successful in the Admissions process for an EADA programme.

Storage period: For the duration of the academic relationship between the Admitted Candidate and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of all academic and non-academic obligations by the Admitted Candidate and EADA.

1. Formalisation, enrolment, administration, completion and development of the training programmes, To access the teaching programme Platforms and any teaching activity by EADA, including the Library service.

Storage period: for the duration of the academic relationship between the Participant and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of all academic and non-academic obligations by the Participant and EADA.

2. To manage scholarships and study grants for the EADA community.

Storage period: for the duration of the academic relationship between the Participant and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: completion of managing all scholarships and study grants.

3. To offer a careers advice service (Jobsite/Professional careers) and/or manage the participants’ work placements with collaborators (external academic work placements)
Storage period: for the duration of the contractual and/or business relationship between the Participant and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the participant and EADA.

4. To segment and create non-automated profiles, carry out a statistical study of the services and contents used, likes and preferences, surveys or forms.

Storage period: until the participant withdraws their consent to said processing.
Legal basis: EADA’s legitimate interest in improving their programmes and services for Participants.

5. To manage the Participants on the Virtual Campus so that the sessions can be prepared and the storage of the academic e-mail addresses.

Storage period: for the duration of the contractual and/or business relationship between the Participant and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the participant and EADA.

6.    To manage the evaluations carried out by the Participant who may be asked to complete surveys at any time during the academic course.

Storage period: This data is stored until the Participant withdraws their consent.
Legal basis: the implicit consent of the Participant when they send their evaluations.

7.    To manage the use of images and voice files of the participant, in any medium, support or material which is sufficiently permanent or stable , to allow the perception, reproduction or communication in any format of the training activities and services offered by or developed by EADA.

Storage period: the data processed for this purpose will be stored for the duration of the contractual and/or business relationship between the Participant and EADA.
Legal basis: fulfilment of contractual and/or business obligations by the participant and EADA.

8.    To manage the use of images and voice files of the participant, in any medium, support or material to promote EADA services in publications, webpages, virtual campus and Social Networks belonging to EADA, as well as in press, publications and any other media.

Storage period: the data processed for this purpose will be stored until the participant withdraws their consent.
Legal basis: The express consent of the participant, duly given through the channels provided.

9.    To manage the administration for the participants who take part in joint programmes between EADA and another university, entity, business school and/or institution and where EADA appears as co-responsible party for processing.

Storage period: for the duration of the contractual and/or business relationship between the Participant and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the participant and EADA.

1. To maintain the EADA Alumni category and to manage relations with ex-participants.

Storage period: for the duration of the contractual and/or business relationship between the Alumni and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the Alumni and EADA.

2. To organise activities and events for the Alumni.

Storage period: for the duration of the contractual and/or business relationship between the Alumni and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the Alumni and EADA.

3. To manage the Virtual Campus for Alumni.

Storage period: for the duration of the contractual and/or business relationship between the Alumni and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the Alumni and EADA.

4. Careers advice service (EADA Careers).

Storage period: for the duration of the contractual and/or business relationship between the Alumni and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the Alumni and EADA.

5. To organise professional activities between participants, alumni and associated companies.

Storage period: for the duration of the contractual and/or business relationship between the Alumni and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the Alumni and EADA.

1. To manage the membership status obtained by those natural persons who, after paying the corresponding fee to EADA, may take advantage of this service.

Storage period: for the duration of the contractual and/or business relationship between the Member and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the Member and EADA.

1. To manage the order established in the contract, offer and/or quotation, including the planning of activities and the administration of payment and other benefits pertaining to the collaborator/provider.

Storage period: for the duration of the contractual and/or business relationship between the client and/or provider and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the clients and/or provider and EADA.

2. To manage the administration of the clients who have registered on the EADA Jobsite with the purpose of advertising job offers.

Storage period: for the duration of the contractual and/or business relationship between the client and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the client and EADA.

3. To manage the administration of clients who have purchased services provided by EADA within the framework of EADA Corporate.

Storage period: for the duration of the contractual and/or business relationship between the client and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the client and EADA.

4. To administer and manage services for companies which organise events or activities in EADA facilities.

Storage period: for the duration of the contractual and/or business relationship between the client and EADA. Once this is finished, the time period needed to comply with any applicable legal obligations.
Legal basis: fulfilment of contractual and/or business obligations by the client and EADA.

5. To maintain a relationship with the legal person to whom the affected party is providing their services. This also applies to individual businesspersons or liberal professionals for the purpose of entering into a professional relationship and not as natural persons.

Storage period: until the Interested party opposes the receipt of said communications.
Legal basis: the legitimate interest of EADA, in accordance with article 19 of the LOPDGDD, in which processing is restricted to the necessary data for its professional location and to maintain commercial relationships.

1. To maintain the Interested parties informed, including via electronic means, about EADA products, services and news, publications, invitations, programmes, newsletters, activities and events as long as said User has manifested their express consent to said processing.

Storage period: until the Interested party withdraws their consent to receiving said communications.
Legal basis: the interested party gives their explicit consent for said communications to be received.

2. To keep the User (EADA Client and/or Participant) informed, including via electronic means, of similar products, services and news related with those products and services already purchased by the User.

Storage period: Until the Interested party opposes the receipt of said communications. The User will have the option to oppose the receipt of this type of commercial communication when purchasing the products and/or services.
Legal basis: the legitimate interest of EADA in accordance with article 21.2 of Law 34/2002, of 11th July regarding Information Society Services and Electronic Commerce. The existence of a previous contractual relationship, through which EADA lawfully obtained the contact data of their clients, to send them commercial communications regarding similar products or services to the initial product or service purchased by the client.

1. To administer the interactions between the User and EADA via the different social networking profiles (among others, Instagram). The data processed for this purpose will be those introduced by the Users on their corresponding social network profile and therefore regulated by the privacy policy of said social network, for which EADA shall not be held responsible. For more information, please consult EADA’s Privacy Policy for Social Networks https://www.eada.edu/es/politica-de-privacidad-en-las-redes-sociales

Storage period: the processed data for this purpose will be stored for the duration of EADA’s profile on the social network.
Legal basis: the implicit consent of the Interested party to interact and/or follow EADA’s profile on the social network.

In accordance with the provisions set out in the purposes of processing indicated in the previous point, the personal contact information of the Website and Platform Users, participants, alumni and collaborators/providers, will be communicated to companies which collaborate with EADA. Explicit consent will always be sought in these cases. The Interested parties may request information regarding the companies which collaborate with EADA by sending an email to privacy@eada.edu

EADA may communicate the personal data of the Participants and specific collaborators/providers to collaborating academic entities in international or European programmes to which said participant is enrolled or which said collaborator/provider is participating. Said communication will be sent during the management and completion of the programme.

The personal data of Participants and/or Alumni may also be communicated to companies that use Jobsite and other EADA channels to advertise jobs that may be of interest to the Participants and/or Alumni. Said communication will take place based on the implicit consent of the Participant and/or Alumni through their registration or response to the job offer or based on the explicit consent which is requested when sending their application.

EADA also informs all Interested parties that their personal data may be accessed by third parties acting on behalf of EADA, as long as said access and the processing of data is necessary for a specific service to be provided to the Institution. In all cases, EADA will enter into the corresponding contract of data processing with each of the said third parties, who will process said data exclusively for the purposes set out by EADA in each case.EADA may also use the platforms of Gmail or Google Drive to send electronic communications. This will involve transferring the User’s data to a data processor located in the United States. Google LLC is the owner of said platform and it adheres to the principles of the Privacy Shield (www.privacyshield.gov) regarding the protection of personal data. Google also collects connection data (including the User’s email address and IP address) via its tracking technology. This data may also be transferred.

EADA collaborates with third parties, among others Google, to know their Privacy Policy: Google’s Privacy & Terms site

For some services or programmes, the personal data of some categories of Interested parties may be subject to processing, access or storage in a different country. Said country may not offer the same levels of data protection.

If EADA transfers personal data to external companies in other jurisdictions, it will guarantee the protection of the personal data (i) by applying the level of protection required in accordance with local legislation regarding data/privacy applicable to EADA, (ii) by acting in accordance with the rules and policies of EADA and (iii) for EADA, which is located in the European Economic Area (EU member states plus Iceland, Liechtenstein and Norway, the ‘EEA’), and unless otherwise stated, by exclusively transferring personal data in accordance with the standard contractual clauses approved by the European Commission (iv) by obtaining consent from the Interested party, if there are legal grounds for processing.

Additional information regarding international transfers of personal data and how to obtain a copy of the appropriate protection measures in place can be found detailed below in section 6 (Security).

In accordance with GDPR and the LOPDGDD, EADA applies technical, administrative and organisational security measures to protect the data that we collect in case of accidental or unlawful destruction, loss, modification, dissemination or unauthorised access, especially when the processing involves the transmission of data on a network, and any other unlawful form of processing.

The User may access and browse the contents of the Website without having previously registered. However, the use of specific services and content of the Platforms may require previous registration by the User. In such cases, the data introduced by the User must be exact and up-to-date.
The registered User will be responsible at all times for the data provided via the Website and/or Platform. The completion of data will be deemed as having been carried out by said User, who will respond in all cases to the data which has been introduced. The User will be responsible for any false or inaccurate data and information provided to EADA.

The registered User will at all times be responsible for safeguarding their login information (username and password). The User will consequently assume any damages arising from the misuse of their login information such as ceding it to others, disclosing it or losing it.

Access to restricted areas of the Website using the login information of a registered User will therefore be deemed to have been carried out by said User who will be held responsible for said access and use.

If the User suspects that their login information is being used by a third party without their prior consent, the User should information EADA immediately via the contact details indicated in the current Terms and Conditions.

The Users may contact FUNDACIÓN PRIVADA UNIVERSITARIA EADA to exercise the following rights regarding their personal data: access, rectification, erasure, right to restriction of processing, portability of data and opposition by writing to FUNDACIÓN PRIVADA UNIVERSITARIA EADA, Calle Aragón, 204, 08011, Barcelona (Spain), or by e-mail privacy@eada.edu. The Users must accompany any written correspondence with official identification documents and must indicate which of the above mentioned rights they wish to exercise.

Similarly, where the legitimacy of the treatment of the Interested party’s data is based on their own consent, they have the right to withdraw said consent at any time, without it affecting the legality of the processing based on consent given prior to withdrawal.

EADA will consider all requests and will provide a response within the timeframe established by the applicable law. It is important to be aware, however, that under some circumstances certain information may be exempt from said requests such as when personal data is still being processed for legitimate interests or to comply with a legal obligation.

In all cases, the User has the right to present a claim before the corresponding control authority if they deem it necessary.
For any further questions regarding the treatment of personal data by the company, please contact our Data Protection Officer at the following e-mail address: privacy@eada.edu

EADA may revise this Privacy Policy from time to time and publish the most up-to-date version on the EADA website. EADA will notify Users if their rights are significantly affected by any changes.