Data Protection Policy

This policy on the processing of personal data will be applicable to the users of the website of the European Project Self Regulated Learning in SmartArt (SmartArt) 2019-1-ES01-KA204-065615 financed by the European Union within the ERASMUS+ Programme,"www.slrsmartart.com", as well as to all those individuals who provide their personal data through the following ways of communication: website, web portals, post, e-mail and telephone.

Through this website, no personal data is collected from users without their knowledge, nor is it transferred to third parties, unless legally required.

This privacy policy is adapted to the Spanish and European regulations in force regarding the protection of personal data on the Internet. Specifically, it respects, among others, the following rules:

Regulation (EU) 2016/679 of the European Parliament and of the Council of April, 27 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Responsible for data processing

The person responsible for processing the personal data collected is: The University of Burgos, CIF: Q0968272E and within it the DATAHES Research Group https://www.ubu.es/data-analysis-techniques-applied-health-environments-sciences-datahes.

Contact details:

Address: Faculty of Health Sciences. C/ Comendadores s/n. 09001 Burgos (Spain); Contact telephone: 673192734; Contact email: slrsmartart@gmail.com

Data processing

The processing of the user's personal data will be subject to the following principles, as set out in article 5 of the GDPR.

The personal data will be:

  1. Processed in a lawful, fair and transparent way in relation to the data subject ("lawfulness, fairness and transparency"); Transparency principle;
  2. Collected for specified, explicit and legitimate purposes and shall not be further processed in a way incompatible with those purposes; pursuant to Article 89(1), the further processing of personal data for archiving purposes in the public interest, scientific and historical research purposes or statistical purposes shall not be considered incompatible with the initial purposes; Purpose limitation.
  3. Appropiate, relevant and limited to what is necessary in relation to the purposes for which they are processed; Data minimisation.
  4. Accurate and, where necessary, kept up to date; all reasonable steps shall be taken to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are deleted or rectified without delay; Accuracy principle.
  5. Maintained in such a way as to allow identification of the data subjects for no longer than is necessary for the purposes of the processing of the personal data. Personal data may be kept for longer periods provided that they are processed exclusively for archiving purposes in the public interest, for scientific or historical research or for statistical purposes; Storage limitation period.
  6. Processed in such a way as to ensure appropiate security of personal data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, through the implementation of appropriate technical or organisational measures; Integrity and Confidentiality.
  7. The data controller will be responsible for compliance with the principles of the GDPR and will be able to demonstrate it. Accountability.

Minors

In accordance with articles 8 of the GDPR and 13 of the RDLOPD, only those over 14 years of age may give their consent to the processing of their personal data in a lawful manner. In the case of a minor under 14 years of age, the consent of the holder of the parental authority and guardianship will be required for the processing, and this will only be considered licit to the extent that they have authorised it. It may also be revoked at any time.

Rights of the interested party (person who provides the data)

The interested part or user has the following rights recognised in the GDPR with regard to the Information on the SmartArt Project coordinated by the University of Burgos, and may therefore exercise them against the Data Processing Manager:

  • Right of access: The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning him/her are being processed and, if so, the right of access to the personal data and to the following information:
    • Purposes of Treatment
    • Categories of personal data
    • Recipients or categories of recipients
    • Retention period or criteria for determining this period
    • Rights of rectification, deletion or limitation of data processing
    • Right to complain to a supervisory authority
    • Origin of the data
    • Information on automated decisions
    • In case of transfer to a third country, information on appropriate guarantees

    A copy of all personal data will be provided in electronic format.

  • Right of rectification: The data subject shall have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him/her. Having regard to the purposes of the processing, the data subject shall have the right to obtain from the controller the completion of personal data which are incomplete, including by means of an additional statement.
  • Rights of Withdrawal (Right to Oblivion). The data subject shall have the right to obtain without undue delay from the data controller the deletion of personal data relating to him/her, who shall be obliged to delete the personal data without undue delay in any of the following circumstances:
    • The data are not necessary for the purposes for which they were collected
    • The person concerned withdraws the consent given previously
    • The data subject opposes the processing of his or her data and other legitimate interests do not prevail
    • The personal data has been illegally obtained
    • Personal data must be deleted in order to comply with a legal obligation
    • Data of minors obtained through offers of information society services
  • Right to limit processing: The right to limitation of treatment will be exercised when
    • The interested part can contest the accuracy of the personal data, for a period of time that allows the person in charge to verify the accuracy of the data; Cautionary Limitation.
    • The processing is unlawful and the data subject opposes the deletion of the personal data and requests instead the limitation of its use; Will affected limitation.
    • The data controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the formulation, exercise or defence of claims; Will of the data subject limitation.
    • The data subject has objected to the processing by virtue of the Right to Object, while it is verified whether the legitimate interests of the data subject prevail over those of the data subject; Cautionary limitation.

    In these cases, the data may only be processed with the consent of the data subject, for the purpose of lodging complaints, protecting the rights of another natural or legal person or for reasons of public interest.

    If the processing limitation is lifted, the data subject will be informed.

  • Right to data portability: In the event that the processing is carried out by automated means, the User shall have the right to receive from the Data Controller his personal data in a structured, commonly used and machine-readable format and to transmit them to another Data Controller. Wherever technically possible, the data controller will transmit the data directly to that other controller.
  • Right of opposition: Data based on express consent, public interest mission or legitimate interest. The data subject will have the right not to have his or her personal data processed or to have it stopped by the University of Burgos, which is the coordinator of the European Self-Regulated Learning in SmartArt (SmartArt) 2019-1-ES01-KA204-065615 Project  financed by the European Union within the ERASMUS+ Programme.
  • Right not to be subject to automated individual decisions and profiling: Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on him/her or significantly affects him/her in a similar way.

Users may therefore exercise their rights by writing to the Data Controller.

Purpose of Treatment

The purpose of the data processing corresponds to the objectives of the SmartArt Project, which are the knowledge and improvement of adult learning. This project has a favourable report from the Bioethics Commission of the University of Burgos No. IR 27/2019.

Legitimation

The processing of your data is carried out for the fulfilment of legal obligations by the Project Coordination at the University of Burgos, as well as when the purpose of the processing requires your consent, which must be given by means of a clear affirmative action.

Data retention

The personal data provided will be kept for the time necessary to finish with the purpose for which it is collected and to determine any responsibilities that may arise from the purpose, in addition to the periods established in the regulations on archives and documentation.

Data communication

As a general rule, personal data will not be communicated to third parties, unless the data subject has given his or her consent, there is a legal obligation to do so, or the vital interests of the data subject or another natural person are protected.
You may exercise your rights to access, rectify, delete and transfer your data, to limit and object to their processing, and not to be subject to decisions based only on the automated processing of your data, where applicable.