Privacy policy
Data protection
Having regard to the fact that the right to data protection is a fundamental right, the University of Girona fully assumes the principles of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data, which replaces Directive 95/46/CE (General Data Protection Regulations or RGPD, available for consultation from this link) and Framework Act 3/2018, of 5 December, on Protection of Personal Data and Guarantee of Digital Rights(LOPDGDD, available for viewing from this link), rules that give people guarantees in relation to the processing of their data. The University has approved a general rule for data processing, which will be used as a basis for drafting instructions and protocols on processes and specific processing. The University’s regulations for this matter can be viewed from this link.
Under what criteria do we process personal data?
When processing data we fully adopt the principles of the General Data-Protection Regulations.
– We process them lawfully (only when we have a legal basis that authorises us to do so transparently with the person concerned).
– We assign the data for the specific, explicit and legitimate purposes we explain on obtaining them. We do not subsequently process them any way that is incompatible with these purposes.
– We only process data that are suitable, relevant and limited to what is necessary in each case and for each purpose.
– We do our utmost to ensure the data are up to date.
– We store the data for as long as necessary time, complying with the regulations governing the conservation of the public information.
– We apply the appropriate technical or organisational measures to prevent unauthorised or illegal processing, or any loss, destruction or accidental damage to data.
– As a general criterion only individuals over the age of 14 years can communicate data. In the case of minors under the age of 14, the authorisation would be required from their parents or legal representatives.
