LAST MODIFICATION: 15/12/2022

The Privacy Policy is part of the General Conditions that govern the Agency's website (www.aquib.es) together with the Cookies Policy and the Legal Notice.

The BALEARIC AGENCY FOR QUALITY ASSURANCE IN HIGHER EDUCATION (AQUIB) reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. If the user has registered on the website and accesses their account or profile, when accessing it, they will be informed in the event that there have been substantial changes in relation to the processing of their personal data.

AQUIB publishes the Register of treatment activities (2022)

Who is responsible of the treatment of your data?

The data that is collected or provided to us voluntarily through the Website, either by browsing it, as well as all those that you can provide us in the contact forms, via email or by phone, will be collected and processed by the Data Responsible, whose details are indicated below:

AGÈNCIA DE QUALITAT UNIVERSITÀRIA DE LES ILLES BALEARS (AQUIB)

CIF: Q0700449B

Address: C/ Isaac Newton, Naorte Building A, ground floor, local 5, ParcBit, 07121 Palma de Mallorca

STATUTES

Agreement of the Government Council of December 13, 2002 approving the creation of the AQUIB consortium and its statutes.

Agreement of the Government Council, of April 22, 2005, approving the modification of the statutes of the AQUIB.

Contact for the protection of your personal data

C/ Isaac Newton, Edificio Naorte A, planta baixa, local 5, ParcBit, 07121 Palma de Mallorca

Telephone number: 971 72 05 24

Mail: lopd@aquib.es

If, for any reason, you want to contact us in any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

What data do we collect through the website?

By the simple fact of browsing the webpage, AQUIB will collect information regarding:

1. IP direction.
2. Browser version.
3. Operating system.
4. Duration of the visit or browsing through the website.

The information that we handle will not be related to a specific user and will be stored in our databases, with the purpose of carrying out statistical analysis, improvements to the Website, about our products and/or services and will help us to improve our strategy. Data will not be communicated to third parties.

User register in the website / Form sending

In the event that in order to access certain services, it is necessary for the user to fill in a form, a series of personal data will be requested. The data will be necessary and mandatory to carry out such registration. In the case of not providing such fields, the registration will not be carried out.

In this case, the browsing data will be associated with the user's registration data, identifying the same specific user who is browsing the Website. In this way, it will be possible to personalize the offer of products and/or services that, in our opinion, best suits the user.

The registration data of each user will be incorporated into the AQUIB’s databases, together with the history of operations carried out by the same user and will be stored there as long as the registered user's account is not deleted. Once such account is deleted, said information will be separated from our databases, keeping those data related to the transactions carried out for 10 years, without accessing or altering them, to comply with the deadlines established by law. The data that is not linked to the transactions carried out will be kept unless you withdraw the consent, in which case they will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the execution of a contract between the parties.

In relation to the sending of communications and promotions electronically and the response to requests for information, the legitimacy of the treatment is the consent of the user.

The purposes of the treatment will be the following:

1. Manage your access to the website.
2. Manage the services made available to you through the Website.
3. Keep you informed of the processing and status of your requests.
4. Respond to your request for information.
5. Manage all the utilities and/or services offered by the platform to the user.

Thus, we inform you that you will be able to receive communications via email and/or on your phone, in order to inform you of possible incidents, errors, problems and/or status of your requests.

To send communications, the express consent of the user would be requested at the time of registration. In this regard, the user could revoke the consent given, by contacting AQUIB, using the means indicated above. In any case, in each communication, you will be given the possibility of unsubscribing from receiving them, either through a link and/or email address.

The information of interest for each group is detailed below:

CONTACTS OF THE WEBSITE OR THE EMAIL

For what purposes will we process your personal data?

1. Answer your questions, applications or requests.
2. Manage the requested service, answer your request, or process your request.
3. Information by electronic means, regarding your request.
4. Commercial information or events by electronic means, provided there is express authorization.

What is the legitimacy for the processing of your data?

The acceptance and consent of the interested party: In those cases where in order to make a request it is necessary to fill out a form and click on the send button, doing so will necessarily imply that you have been informed and have expressly granted your consent to the content of the clause attached to said form or acceptance of the privacy policy.

All our forms have a verification box or checkbox with the following formula, in order to send the information: “□ I have read and accept the Privacy Policy.”

AQUIB USERS

For what purposes will we process your personal data?

1. Information by any means, including electronic, regarding your request.
2. Information by electronic means, provided there is express authorization.
3. Manage the administrative, communications and logistics services carried out by the Data Responsible.
4. Carry out the corresponding transactions.
5. Any other management that is necessary for the correct provision of the service.

What is the legitimacy for the processing of your data?

The legal basis is your consent, the execution of a contract and the mandatory legal obligations.

SUPPLIERS

For what purposes will we process your personal data?

1. Information by electronic means, regarding your request.
2. Commercial information or events by electronic means, provided there is express authorization.
3. Manage the administrative, communications and logistics services carried out by the Responsible.
4. Billing.
5. Carry out the corresponding transactions.
6. Billing and declaration of appropriate taxes.
7. Management of control and recovery.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products by any means.

JOB APPLICATIONS

For what purposes will we process your personal data?

Organization of selection processes for hiring employees.

Contact you for job interviews and evaluate your candidacy.

If you have given us your consent, we can transfer it to collaborating or related entities, with the sole objective of helping you find a job.

What is the legitimacy for the processing of your data?

The legal basis is your unequivocal consent, by giving us your CV and receiving and signing information related to the treatments that we are going to carry out.

For how long are we going to keep your personal data?

The curriculum will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

Human Resources

For what purposes will we process your personal data?

1. Management of the employment relationship and the worker's file.
2. Carry out all those administrative, fiscal and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labor regulations, Social Security, occupational risk prevention, fiscal and accounting.
3. Management of payroll through a financial institution.
4. Time control through the access control system by fingerprint/card (if applicable).
5. Management of group insurance / pension plan of the entity.
6. Carry out training actions both subsidized and non-subsidized training.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the execution of your employment contract. Compliance with relevant legal obligations. The consent of the interested party.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Do we include personal data of third parties?

No, as a general rule we only process the data provided by the owners. If you provide us with data from third parties, you must previously inform and request their consent from said persons, or otherwise you exempt us from any responsibility for non-compliance with this requirement.

And data of persons under age?

We do not process data from persons under 14 years of age, therefore, refrain from providing them if you are not that age. In any case, the services offered by AQUIB are intended for people over 18 years of age.

Will we make communications by electronic means?

They will only be carried out to manage your request, if it is one of the means of contact that you have provided us.

If we make commercial communications, they will have been previously and expressly authorized by you.

What security measures do we apply?

You can rest assured: We have adopted an optimal level of protection for the personal data that we handle, and we have installed all the means and technical measures at our disposal, according to the state of technology, to avoid loss, misuse, alteration, unauthorized access authorized and theft of personal data.

To what extent will decision making be automated?

AQUIB does not use fully automated decision-making processes to establish, develop or terminate a contractual relationship with the user. In the event that we use those processes in a particular case, we will keep you informed and inform you of your rights in this regard if prescribed by law.

Will profiling take place?

In AQUIB, automated decisions will not be made based on profiles.

To which recipients will your data be communicated?

To AQUIB.

Your data may be transferred to third party collaborating entities and Administrations, for the correct provision of our services. And in any case, if there is a legal obligation.

In the event that you have given us your consent for the treatment of your name and images and other information, related to the activity of the AQUIB, these data might be disclosed on the website.

International transfers

If it is necessary to carry out international data transfers by AQUIB, they will only be carried out to entities authorized by the US-European Union Privacy Shield agreement, to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements set forth in current regulations on data protection, such as the European Regulation, or when there is legal authorization to carry out the international transfer.

What rights do you have?

1. To know if we are treating your data or not.
2. To access your personal data.
3. To request the rectification of your data if they are inaccurate.
4. To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted.
5. To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations.
6. To carry your data, which will be provided to you in a structured format, commonly used or mechanically readable. If you prefer, we can send them to the new person in charge that you designate. It is only valid in certain cases.
7. To file a claim with the Spanish Agency for Data Protection if you believe that we have not attended you correctly.
8. To revoke the consent for any treatment for which you have consented, at any time.

If you modify any data, we appreciate you letting us know so we can keep the register updated.

Do you want a form for the exercise of your rights?

We have forms for the exercise of your rights. You can ask us by email or if you prefer, you can use those prepared by the Spanish Agency for Data Protection or third parties.

These forms must be signed electronically or be accompanied by a photocopy of the DNI.

If someone represents you, you must attach a copy of their ID, or sign it with their electronic signature.

The forms can be presented in person, sent by letter or by mail at the address of the person in charge at the beginning of this text.

You have the right to file a claim with the Spanish Agency for Data Protection, in the event that you consider that the request for your rights has not been adequately addressed.

AQUIB must give an answer within one month, counting from the effective receipt of your request by us.

You have the right to revoke consent at any time for any of the treatments for which you have granted it.

Do we treat cookies?

If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link from the beginning of our website.

For how long are we going to keep your personal data?

Personal data will be kept as long as you remain connected with us.

Once you disassociate yourself, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a judge or court may require them, taking into account the limitation period for legal actions.

The data processed will be kept as long as the aforementioned legal deadlines do not expire, if there is a legal maintenance obligation, or if that legal deadline does not exist, until the interested party requests its deletion or revokes the consent granted.