Personal Data Protection

Regulations on Personal Data Protection

In accordance with article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR) and article 11 of Spanish Organic Law 3/2018, of 05 December, on Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform you that any personal data provided in the forms offered by the Ministry of Universities portal and associated website will be processed in accordance with the current regulations for each Processing Activity with characteristics covered by article 30 of the aforementioned GDPR in this department’s Register of Processing Activities (RPA).

Legitimisation of processing may be based on acting in the public interest or in exercising public powers granted to the data controller, in compliance with a legal obligation and with the consent of applicants, or for any of the other causes listed in article 6 of the GDPR. This Ministry agrees to keep any provided information strictly secret and confidential, using it exclusively for the purposes established for each Processing Activity.

Data will be collected in the corresponding forms, which must only contain the essential fields for processing the requested services, and will only be stored for the time period necessary for completing the services, based on current law regarding liability prescription. It is applicants’ responsibility to update their own data; the Ministry of Universities will not be held responsible for data inaccuracy if any changes are not duly notified.

In accordance with the obligation established in article 37 of the GDPR, the Ministry of Universities has appointed a DATA PROTECTION DELEGATE (DPD), whose functions include handling enquiries and complaints sent to the Ministry of Universities via the means detailed below. This DPD also acts as a point of contact with the Spanish Data Protection Agency.

Applicants may exercise their rights of access, to rectification, to erasure, to restrict processing, to data portability and to object, as set forth in articles 13 to 18 of the LOPDGDD, with the Delegate, for the data controller or processor’s information and awareness.

The Data Controller can be contacted in two different ways:

  • By opening an existing procedure on the Ministry of Universities website
  • By submitting this form at any of the Registers covered by article 16 of Spanish Law 39/2015, of 01 October, and more specifically through the Common Electronic Register, or in person, in paper format, through the Register Support Office network.

Incomplete forms that do not correctly identify the data controller, the processing name and the rights to be exercised will not be accepted.

You also have the right to complain to the Spanish Data Protection Agency: C/ Jorge Juan, 6. 28001. MADRID (www.aepd.es)