User Information

University of Oviedo, with registered address at C/ SAN FRANCISCO, 3 – Oviedo 33007 (ASTURIAS) and VAT number Q3318001I, hereinafter the RESPONSIBLE ENTITY, is the controller of the User’s personal data and informs that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) regarding the protection of individuals with regard to the processing of personal data and on the free movement of such data. Therefore, the following information about the processing is provided:

Purpose of Processing

At the time of data collection, the purposes of the processing will be informed to the User, which may include:

• Academic and educational management, particularly enrollment management, preparation of grade records and their publication, issuance of personal certificates, issuance of degrees, internship management in companies and institutions, and generally necessary functions for the provision of Higher Education Public Service.
• Research management related to the research activities of Teaching and Research Staff and research contracts.
• Personnel management for the necessary purposes of maintaining labor relations and compliance with legal regulations, both for Teaching and Research Staff and Administrative and Services Staff.
• Economic and asset management, particularly the treatment and management of subscribed contracts and service requests offered by the University of Oviedo.
• Management of job applications and offers, and if applicable, related selection processes leading to the creation of job pools.
• Services to the university community, including, among others, prevention services, library services, transportation, sports, international relations, institutional email, and access to telematic services.
• Information requests, inquiries, or suggestions, as well as the submission of applications and documents addressed to the University of Oviedo.

Data Retention Criteria

Data will be kept for as long as there is a mutual interest in maintaining the purpose of the processing. When no longer necessary for such purpose, they will be deleted with appropriate security measures to ensure pseudonymization or total destruction of the data.

Data Disclosure

The Responsible Entity contracts with data processors to provide their services. Specifically, agreements are in place with the following service providers:

• Microsoft (email service).
• Telecable (data network and communications service).

Except for the mentioned entities, data will not be transferred to other third parties unless necessary. If data transfer to third parties becomes necessary for any reason, the User will be informed beforehand and their consent will be requested, specifying the purposes of the communication and the identity of the third party.

User Rights

Individuals providing their data have the following rights:

• Right of access
• Right to rectification or erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with the competent Supervisory Authority, in this case, the Spanish Data Protection Agency. Contact details for the Spanish Data Protection Agency are as follows: C/ Jorge Juan, 6, 28001 – Madrid, Spain. Phone: 901 100 099 / 912 663 517.

Rights 1-6 can be exercised by sending a request form or by sending an email to secretariageneral@uniovi.es, clearly indicating the desired right and attaching a copy of your ID to verify your identity.

For more information about your rights, it is recommended to visit the Spanish Data Protection Agency’s website.

Contact Information for Exercising Rights

University of Oviedo VAT: Q3318001I C/ SAN FRANCISCO, 3, 33007 Oviedo (ASTURIAS) Email: secretariageneral@uniovi.es

Data Origin

All data collected originate from the data subject.

Data Protection Officer (DPO)

In order to ensure the security of your data, the Responsible Entity has appointed a Data Protection Officer who can be contacted via email at delegadopdatos@uniovi.es.

Mandatory or Optional Nature of Information Provided by the User

Users, by ticking the corresponding boxes and entering data in fields marked with an asterisk (*) on the contact form or presented in download forms, expressly and freely accept that their data are necessary to fulfill their request by the provider. The inclusion of data in the remaining fields is voluntary. The User guarantees that the personal data provided to the Responsible Entity are truthful and assumes responsibility for communicating any changes to them.

The Responsible Entity informs and guarantees to users that their personal data will not be transferred to third parties under any circumstances, and that whenever there is any type of transfer of personal data, prior express, informed, and unequivocal consent from the Users will be requested. All data requested through the website are mandatory as they are necessary for the optimal provision of the service to the User. Failure to provide all the data may result in the information and services provided not being fully tailored to their needs.

Security Measures

In accordance with current regulations on the protection of personal data, the Responsible Entity complies with all provisions of GDPR for the processing of personal data under its responsibility. Personal data are treated lawfully, fairly, and transparently in relation to the data subject and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

The Responsible Entity guarantees that appropriate technical and organizational policies have been implemented to apply the security measures established by GDPR, in order to protect the rights and freedoms of Users. Adequate information has been provided to Users so that they can exercise their rights.