1. Data Controller
The personal data you provide to us through the website www.esdapc.cat (hereinafter, the “Website”) as a user thereof will be included in a file owned by the Escola Superior d’Art i Disseny de Catalunya, hereinafter ESDAPC, with registered office at Ciutat de Balaguer 17, 08022, Sant Gervasi, Barcelona (Spain); provided with Tax Identification Number Q0801808G; and with email address a8071573@xtec.cat.
The processing of your data and this Privacy Policy will be governed by the General Data Protection Regulation or Regulation (EU) 2016/679 (the “GDPR”).
2. Purpose
To use certain services, users must provide personal data. By checking the box in the contact forms on the website, users expressly, freely, and unequivocally consent to their personal data being processed by ESDAPC, which will inform the user and analyze the information derived from this management to improve our services and adapt them to user preferences for the following purposes:
- To facilitate access to the Website and improve the user experience.
- To manage the services requested on the Website.
- To provide interested parties with offers of products and services of interest to them.
- To create a “commercial profile” based on the information provided. No automated decisions will be made based on this profile.
3. Legitimacy
By submitting their personal data to ESDAPC, the user expressly consents to ESDAPC carrying out the following activities and/or actions, unless otherwise indicated when contracting or subscribing to any ESDAPC product and/or service, or as a result of a subsequent revocation of the consent initially granted:
- Sending commercial and/or promotional communications on paper, informing users of activities, promotions, advertising, news, offers, and other information about services and products related to commercial activity.
- Sending commercial communications by electronic means, informing users of activities, promotions, advertising, news, offers, and other information about ESDAPC services and products that are the same as or similar to those initially contracted or of interest to the user.
- Processing requests or responding to inquiries made by the user through any of the contact methods made available on the ESDAPC website.
- Conducting statistical studies.
- Or, where established on our website, processing your user registration request and/or your order for products offered by ESDAPC. Once the request is confirmed and accepted, the user will receive a confirmation email at the address provided when completing the registration form.
Notwithstanding the above, any information sent by ESDAPC—including by electronic means—to ESDAPC users for the purpose of carrying out, executing, and/or developing any service subscribed to or contracted by the user—even if not subscribed to by electronic means—and all other tasks, actions, and/or activities derived from this contractual and/or commercial relationship shall not be considered commercial and/or advertising communication.
By submitting your data, you consent to ESDAPC processing your personal data for the described purposes. You guarantee that the data provided is true, accurate, and complete, and you are responsible for notifying us of any changes to it.
4. Recipients
Personal data may be communicated to other companies within the contact and administrative management group linked to ESDAPC, exclusively for internal administrative purposes, including the processing of client or employee data. Likewise, data may be communicated to public bodies when necessary to comply with legal obligations. In this regard, data communication to the following is highlighted:
- Department of Education and Vocational Training – Government of Catalonia.
Files and personal data are stored through our technological providers of web services, email, and online marketing, which comply with the EU-US Privacy Shield framework. Therefore, the following professionals and entities could have access to the personal data provided through this website or by email, always within the corresponding legal framework and with due security guarantees:
- CDMon (10DENCEHISPAHARD, S.L.) as a web hosting provider.
- Pixtin (Pixtin S.C.P.) as an online marketing service provider.
- WeAddit (WAI Visibilidad Web, S.L.U.) as an online marketing service provider.
By accepting this privacy policy, you expressly authorize us to process and communicate your personal data to the aforementioned companies and/or transfer personal data to the referred service providers as data processors for the described purposes and to provide you with a complete service.
ESDAPC expressly informs and guarantees users that their personal data will not be transferred to third parties, except in cases where there is a legal obligation. Should it be necessary to transfer personal data, the express, informed, and unequivocal consent of the data subjects will be obtained beforehand.
5. Rights
In accordance with data protection legislation, you have the rights to information, access, rectification, erasure, objection, and portability. You have the right to obtain confirmation as to whether or not ESDAPC is processing personal data concerning you. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only retain them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. ESDAPC will stop processing the data, except for compelling legitimate reasons, or for the exercise or defense of potential claims.
You may exercise your rights of access, rectification, cancellation, opposition, and portability by sending an email to the address email@laempresa.com or by postal mail to the address ESDAPC – Escola Superior d’Art i Disseny de Catalunya with registered office at Ciutat de Balaguer 17, 08022, Sant Gervasi, Barcelona (Spain), indicating your name and surname, the specific request, an address for notification purposes, and you must attach a copy of your ID or another valid document that identifies you.
Likewise, ESDAPC undertakes to guarantee the confidentiality of your personal data and to use it in accordance with the aforementioned purposes.
Similarly, it must adopt all necessary measures to prevent its alteration, loss, unauthorized processing, or access, in accordance with the provisions of personal data protection regulations.
6. Data Retention Period
We will keep your personal data for the duration of the contractual relationship with us and, once it has ended, for the limitation periods of the obligations that may have arisen from the data processing and/or the legally established periods.