Privacy policy

Universia Holding, S.L informs users (hereinafter "Users" or “User”) of its personal data protection policy so that anyone who provides personal data that may be required for arranging or signing up for certain services offered by this entity, on the portals (hereinafter "Portals" or "Portal") or through the same, are fully informed with regard to the mandatory nature of providing the data and the reasons for processing it.

The Portal is international and both EU and non-EU Users, universities/companies and entities (whether belonging to the Santander Group or not) may register and/or collaborate on it.

Users guarantee that the personal data provided via the Portal is accurate and they will be responsible for notifying the latter of any changes to the same.

DEFINITION

  • Programme: Scholarships and/or aid and/or academic project Programmes published on the scholarships space provided by Universia Holding S.L.
  • Local bank: Santander Group entity with a registered address in the User's place of residence.
  • Destination bank: Santander Group entity with a registered address in the place the Programme takes place.
  • University of origin: university where the User is currently studying.
  • User's country of origin: User's country of residence.

1. DATA CONTROLLER

Identity of the Data Controller:

Universia Holding, S.L

An entity registered with the Mercantile Registry of Madrid in 2005, at volume 16547, Folio 107, Sheet number M-28189, Entry: 4, with corporate tax number: B82976515. (hereinafter the “Data Controller”).

Data controller contact details:

Postal address: Santander Group City. Avda de Cantabria s/n, 28660 Boadilla del Monte (Madrid)

Email: derechosarcobecas@universia.net

Contact details for Data Protection Officer: dpo@universia.net

2. PURPOSES OF AND LEGAL BASES FOR PROCESSING

  1. Managing registration of the User on the Portal. Managing registration of Users on the Portal. The data controller will process data belonging to Users who register via the corresponding form to manage their registration on the Portal and also manage their participation in the services offered, particularly for registration in calls ("Programme" or "Programmes"), and also to exchange information and resolve any doubts and queries submitted by Users. The legal basis that enables this data processing is the performance of a contract put in place through acceptance of the legal conditions of the service

  2. Transfer of data to universities/companies and the Santander Group entity in the scholarship destination country, where applicable. The data controller may transmit the User's data to the university or company that has included or has to include them on the pertinent Programme and also, where applicable, to the destination university/company, depending on the type of Programme, for the purpose of managing the processes involved in the same, so that the User may fully enjoy the Programme. The User's data will also be transmitted to the Santander Group entity in the country in which the university/company that provides the Programme is located, solely and exclusively for the purpose of them providing support to the User in relation to their Programme, particularly as regards managing academic activities and meetings between users, the university/company providing the Programme and the applicable Santander Group entity. This is required for processing the Programme. The legal basis that enables this data processing is the performance of a contract put in place through acceptance of the terms and conditions of the pertinent service and/or Programme.

  3. The data controller sending own communications of an academic nature, by any means. The data controller will process Users' personal data for sending them communications exclusively of an academic nature, which may be in relation to courses, scholarships, employment, training, workshops and others. This type of communication is related to the Portal content. The legal basis that enables this personal data processing is that it is of legitimate interest to the data controller.

  4. Transfer by the data controller of the User's personal data to local banks and other entities in the Santander Group so that they may send own and third-party marketing communications via any means, including digitally. The data controller will transmit personal data belonging to Users that have given their express consent to other entities in the Santander Group so that they may send them own and third-party marketing communications and/or communications of an academic nature that may refer, for example, to banking products, investment products, insurance products, telecommunications, study, leisure, research, vehicles, consumer goods, employment, culture, professional opportunities, textile, transport, insurance, catering, technology, food, television, radio, portals and internet comparison tools. Marketing communications may be personalised, which means that the prospecting may be based on the User's personal profile. The legal basis for this data processing is the express consent provided by the User. If the User does not initially provide their consent, or provides it but then revokes it, they will still be considered Users and their participation in other services provided on the Portal will not be affected.

  5. Contests, promotions, draws and other events via the scholarships portal or Facebook. With a certain frequency, the data controller publishes contests, promotions, draws and other events on the Portal or Facebook so that Users can participate and benefit from the possible prizes offered. This processing will only take place with the user's consent, which will be obtained through their acceptance of the terms and conditions for each promotion, draw, contest or event. After the User has given their consent, they may revoke it at any time, remembering that this revocation will mean that they may no longer participate in the contest, promotion or draw for which the user registered and accepted the terms and conditions.

  6. Statistical studies run by Universia Holding, S.L. The data controller will process any information obtained through the User's interaction with the Portal and the services offered on the same for the sole purpose of assessing the status and usefulness of services provided so it may improve them going forward. The legal basis that enables this data processing is that it is of legitimate interest to the data controller.

  7. Transfer of data to the local bank so that it may run statistical studies. The data controller will send the local bank the personal data provided by the User and any information obtained through Users' interaction with the Portal and the services offered on the same. The local bank will compare this information with the data it has regarding the User for the sole purpose of running statistical analyses and assessing the status and usefulness of services provided so they may improve them going forward. The legal basis for this transfer of personal data is the express consent that the User provides by ticking the corresponding box. If the User does not initially provide their consent, or provides it but then revokes it, they will still be considered Users and their participation in other services provided on the Portal will not be affected.

  8. Resolution of users enquiries.The main purpose is to process and manage the request for information, doubts or other queries sent by the User (whether registered or not) through the contact form provided, as well as the actions and operations that may arise from them. This processing is carried out on the basis of Universia's legitimate interest and, where appropriate, in compliance with legal obligations that may apply.

  9. Transfer by the data controller of the user's personal data to local banks and, where appropriate, to Banco Santander, S.A (España), so that they may contact data subjects about possible recruitment processes. In those programmes where it is offered as an option, the data controller will transfer the personal data of those users who have given their express consent to the local bank to contact them about taking part in the institution's own recruitment processes. Likewise, on certain occasions, the personal data of those data subjects who consent to it, will be transferred to Banco Santander, S.A. (España), as parent of the Group, for global recruitment processes with global content performance required by the parent. For example, if the user is resident in Brazil, their data will be transferred to the local bank in that country in every case and, where appropriate, to Banco Santander, S.A (España), if the process is considered global. The legal basis for this data processing is the express consent provided by the user. If the user does not initially provide their consent, or provides it but then revokes it, they will still be considered users and their participation in other services provided on the portal will not be affected.

3. DATA STORAGE PERIOD

Personal data provided will be kept as long as the contractual relationship is in place, until the user asks for it to be erased or for as long as it cannot be erased because it is required for compliance with a legal obligation or for the filing and exercising of or defence against complaints.

If the User were to revoke their consent or exercise their right of erasure, their personal data will be kept blocked for the legally established periods so that any possible responsibilities arising from the processing of the same may be properly dealt with.

For those cases, where the data subjects in particular programmes accept the transfer of their CV data to the local bank and, where appropriate, to Banco Santander, S.A., in relation to the recruitment processes, the financial institution which is the recipient of these data, will only retain them for a period of three years. At the end of this period, the data will remain blocked for the legally established period prior to their erasure.

4. DATA RECIPIENT

The data and files provided by Users during the registration process will be transferred by the data controller to the university/company that has included or has to include them on the pertinent Programme and also to the destination university/company providing the Programme that the User has decided to join and, lastly, to the destination bank, solely and exclusively for the purpose of them providing support to the User in relation to their Programme, particularly as regards managing academic activities and meetings between users, the destination university/company and the pertinent destination bank for the sole purpose of managing their participation in the Programme. On the next link there is a list with the names of the universities/companies, and the country they are in, with whom the data controller is in partnership and, next to them, on this link are the destination banks that are going to collaborate on certain activities and events of an academic nature with the scholarship recipients and participants. The data must be transferred to the university/company or pertinent Group entity (destination bank) for management of the User's participation in the chosen project, scholarship or Programme.

Personal data belonging to Users who have provided their consent will be transmitted to local banks and/or other Santander Group entities so that they may send the Users their own and third-party marketing communications and run statistical studies in relation to the quality and success of the Programmes offered. The above link shows the different Santander Group entities that may send marketing communications depending on the User's country of origin.

Lastly, in those programmes which offer the opportunity to participate in a recruitment process of the local bank or of Banco Santander, S.A., when the user gives their consent, the data controller will transfer the data to the financial institutions referred to above, for the purposes of contacting the user and managing the related recruitment processes.


International data transfers to third countries:

With regard to the Programmes offered, please note that the Portal is international and both EU and non-EU Users, universities/companies and entities (whether belonging to the Santander Group or not) may register and/or collaborate on it. If the User adheres to a Programme, project or scholarship from a university/company located outside the European Union, they accept that their data will be transferred to the university awarding the scholarship, to the destination university/company and the Santander Group entity located in that country (destination bank). In this regard, the user must bear in mind that the processing of data outside the European Union may entail a security risk concerning their data, which would no longer be protected by the guarantees demanded by European regulations, in the absence of an adequacy decision by the European Commission about the third country in question. The data controller will not be held responsible for and cannot guarantee the security of the transferred data.

With regard to prospecting and running statistical studies by other Santander Group entities, the data controller will transfer data belonging to Users who have provided their consent to the different Santander Group entities so that they may send the Users marketing communications and/or run statistical studies to verify the quality and success of the Programmes offered. Please bear in mind that there are entities in the Santander Group that are located outside the European Union, even in territories considered "unsecure" by the European Commission and, therefore, unless otherwise specified, we will only transfer your personal data pursuant to standard contractual clauses approved by the European Commission. Users may request additional information in relation to international transfers of personal data and obtain a copy of the pertinent protection measures implemented by sending an email to the address provided in section 5.

On the next link there is a list with the names of the universities/companies, and the country they are in, with whom the data controller is in partnership and, next to them, on this link , are the destination Santander Group entities that are going to collaborate on certain activities and events of an academic nature with the recipients of the scholarships and participants and/or who may send marketing communications to Users, depending on consent given.

With regard to the participation in recruitment processes of the local bank and/or of Banco Santander, S.A., which may be offered as part of certain programmes, the data controller will transfer the data of users who have given their prior consent to the corresponding local bank or, where appropriate, to Banco Santander, S.A. (Spain) for the purposes of contacting the user and managing the related selection process. There are local banks which are located outside the European Union, even in territories classified as "unsecure" according to the European Commission. As a result, unless otherwise specified, the data controller will only transfer personal data in accordance with provisions of standard contractual clauses approved by the European Commission. Users may request additional information in relation to international transfers of personal data and obtain a copy of the relevant protection measures implemented by sending an email to the address provided in section 5. The local banks that can receive these data can be found by following this link

5. RIGHTS OF DATA SUBJECTS

Users have the right to access their personal data, and to request the rectification of any inaccurate data, that the processing be limited, or request they be deleted when, among other reasons, the data are no longer necessary for the purposes for which they were gathered. In certain circumstances and for reasons relating to their own specific situation, data subjects may object to the processing of their data. The data controller will cease to process data, except in the event of compelling legitimate reasons, or for exercising or defence against potential claims.

Users will also have the right to request the portability of their data where this is technically possible.

To exercise their rights, data subjects may send an email to the following address: derechosarcobecas@universia.netor send a letter to Santander Group City. Avda de Cantabria s/n, Santander Universities, 28660 Boadilla del Monte (Madrid), Spain, attaching a copy of their ID.

Data subjects have the right to lodge a complaint with the Spanish Data Protection Agency at Calle Jorge Juan 6, 28001, Madrid or its online address www.aepd.es, especially when the data controller has not satisfactorily responded to their exercising of their rights.

The User has the right to withdraw their consent for marketing purposes at any time by writing to the above addresses.