Privacy Policy
We make this Privacy Policy available to you in order to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us.
If, in the future, we make changes to this Privacy Policy, we will notify you through this website or by other means, so that you can be aware of the new privacy terms that will be adopted.
We inform you below, in the form of questions and answers, of the conditions under which our entity processes your personal data:
Who is responsible for the processing of your data?
Identity: INTERNATIONAL INSTITUTE OF THEOLOGY AT A DISTANCE. CIF: R2800617I
Postal address: C/Iriarte, 3, 28028 – Madrid.
Telephone: 91 402 18 06
For what purpose do we process your personal data?
We process the personal data you provide us with for the following purposes:
To process their enrolment, manage the relationship between the student and the teaching activity, as well as the billing and collection of services. Likewise, the data will be processed to carry out the application for validation of the studies carried out at the centre. The provision of data for this purpose by our customers is obligatory, otherwise preventing the performance of the contract.
The management of relationships with our suppliers, as well as the invoicing and payment of services. To this end, it is mandatory for the provider to provide us with your data, otherwise the contract cannot be performed.
To channel requests for information, suggestions and complaints that you may send us, to contact the sender of the information, to respond to your request or query and to follow up afterwards. The fact of providing the data for this purpose is voluntary, although, if you do not do so, you will not be able to respond to the request, query or claim. Therefore, the communication of your personal data for these purposes is a necessary requirement for us to respond to these requests.
Sending commercial communications about our products or services. If you are our student, we will send you these communications, unless you express your wish to the contrary by checking the corresponding box at the time of providing your data or, subsequently, by communicating it to us by any means.
On the other hand, if you are not a student of the centre, we will not send you commercial information, unless you expressly authorise us to do so. Authorisation is voluntary and your refusal would only result in you not receiving commercial offers for our products or services.
In relation to the sending of the aforementioned communications, based on the information provided, we may create commercial profiles, to offer you the products and services that best suit your interests.
How long will we process your data for?
We only keep your data for the period of time necessary to comply with the purpose for which they were collected, to comply with the legal obligations imposed on us and to attend to any possible liabilities that may arise from the fulfilment of the purpose for which the data was collected.
The data for the processing of enrolment, the management of the relationship with students, the management of validations, the management of suppliers and the invoicing and collection of services will be kept for this purpose for as long as the contract is in force. Once this relationship has ended, where appropriate, the data may be kept for the time required by the applicable legislation and until any liabilities arising from the contract expire.
The data for sending commercial communications about our products or services will be kept indefinitely, until, where appropriate, you express your desire to delete them or your desire to stop receiving such communications.
The data processed to respond to requests, requests, queries or claims will be kept for the time necessary to respond to them and consider them definitively closed. Subsequently, they will be kept as a communications history for a period of one year, unless you request their deletion first.
What is the legitimacy for the processing of your data?
If you are a student, applicant for validation or supplier, the data will be processed on the basis of the contractual relationship existing between the parties, as a result of the provision of services offered.
The prospective offer of products and services to our customers is based on the satisfaction of the legitimate business interest in being able to offer them the contracting of other products or services and thus achieve their loyalty. This legitimate interest is recognised by the applicable legal regulations (General Data Protection Regulation), which expressly permit the processing of personal data on that legal basis for direct marketing purposes. However, we remind you that you have the right to object to this processing of your data, and you may do so by any of the means provided for in this clause.
The prospective offer of products and services to those who, having shown interest in them, are not or have not become our customers, is based on the consent of the data subject. This consent can be revoked at any time, without this having any consequences other than ceasing to receive the advertising and without affecting the data processing carried out previously.
The processing of personal data for the purpose of responding to your requests for information, requests, queries and complaints is based on the consent of the data subject. This consent may be withdrawn at any time, although this will not affect the lawfulness of the processing carried out previously.
The categories of data processed are those that are requested in each case by the form or contract through which you provide us with your data.
To whom will your data be communicated?
The data will be communicated to the following entities:
The competent Public Administrations, including judges and courts, in the cases provided for in the Law and for the purposes defined therein.
The financial institutions through which the management of collections and payments is articulated.
When you carry out internships in the training centers in which the INTERNATIONAL INSTITUTE OF THEOLOGY AT A DISTANCE has collaboration agreements, your data will be transferred to these centers so that they can manage and organize the needs related to the teaching activity carried out in them. The transfer of your data to these centres is necessary to manage the completion of the internship.
In the case of validations of studies, your data will be communicated to the San Damaso Ecclesiastical University, as a training center accrediting studies to carry out the aforementioned validation.
This entity contracts its infrastructure to make video calls with the company Zoom, which constitutes an international transfer of data to the United States. Such transfers are made under the Standard Contractual Clauses approved by the European Commission for international data transfers.
Although this is not a transfer of data, it may be that third parties, acting as our suppliers, may access your information to carry out the service. These processors access your data following our instructions and without being able to use them for a different purpose and maintaining the strictest confidentiality and based on a contract in which they undertake to comply with the requirements of current regulations on the protection of personal data.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request their deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
Under the conditions provided for in the General Data Protection Regulation, data subjects may request the limitation of the processing of their data or their portability, in which case we will only keep them for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. In these cases, we will stop processing the data or, where appropriate, we will stop doing so for that specific purpose, except for compelling legitimate reasons, or the exercise or defence of possible claims.
In addition, data protection regulations allow you to object to being subject to decisions based solely on the automated processing of your data, where appropriate.
The aforementioned rights are characterized by the following:
Its exercise is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive), in which case a fee may be charged in proportion to the administrative costs incurred or refusal to act
You can exercise your rights directly or through your legal representative or volunteer.
Your request must be responded to within one month, although, if the complexity and number of applications are taken into account, the deadline can be extended by another two months.
We have the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of opting for another means. If the request is submitted by electronic means, the information will be provided by these means where possible, unless you request us otherwise.
If, for any reason, the request is not processed, we will inform you, within one month at the latest, of the reasons for this and of the possibility of complaining to a Supervisory Authority
In order to facilitate the exercise of the aforementioned rights, we provide you with the links to the application form for each of them below:
All the aforementioned rights can be exercised through the means of contact listed at the beginning of this clause.
In all cases, you must prove your identity by attaching a photocopy or scanned copy of your ID card or equivalent document, or a document accrediting the representation, if the right is exercised through a representative.
In the event of any violation of your rights, especially when you have not obtained satisfaction in exercising them, you can file a complaint with the Spanish Data Protection Agency (contact details available at www.aepd.es ), or other competent supervisory authority. You can also find out more about your rights by contacting these bodies.
How do we protect your personal data?
We are committed to protecting the personal data we process. We use physical, organisational and technological measures, controls and procedures that are reasonably reliable and effective, aimed at preserving the integrity and security of your data and guaranteeing your privacy.
In addition, all personnel with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.
In the case of the contracts we sign with our suppliers, we include clauses in which they are required to maintain the duty of secrecy with respect to the personal data to which they have had access by virtue of the assignment carried out, as well as to implement the technical and organisational security measures necessary to guarantee confidentiality, Permanent integrity, availability and resilience of personal data processing systems and services.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed and there is no security system that is impenetrable and, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, to those users who may have been affected so that they take the appropriate measures.
What is your responsibility as a data subject?
By providing us with your personal data, the person who does so guarantees that they are over 14 years of age and that the data provided is true, accurate, complete and up-to-date.
To this end, the interested party is responsible for the veracity of the data and must keep them suitably updated so that they correspond to their real situation, being responsible for any false and inaccurate data that may be provided, as well as for any direct or indirect damages that may arise.
If you provide data from third parties, you assume the responsibility of informing them in advance of all the provisions of article 14 of the General Data Protection Regulation under the conditions established in said precept.
