Privacy Policy

SERCES (SERCAR Centre for Higher Studies)

Privacy Policy

 

SERCAR Centro de Estudios Superiores S.L. -hereinafter Serces-, in accordance with the provisions of Regulation No 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter RGPD-UE-) and the Organic Law on Data Protection and Guarantees of Digital Rights No 3/2018 of 5 December 2018 (hereinafter LOPDGDDD),  informs you that we respect the privacy of Customers, the secrecy, security, integrity and confidentiality of the personal data we collect by applying the necessary technical and organisational measures in order to guarantee and demonstrate that Serces complies with the regulatory requirements that the processing of personal data requires of it as the party responsible. 

 

Therefore, the privacy policy of Serces aims to inform about the use that the company makes of the personal data that you as a Client (User/Subscriber/Student/Exalumni) provide when accessing and browsing our website.

 

The data obtained by Serces for processing will be exclusively relevant, appropriate and not excessive in relation to the specific, explicit and legitimate purposes for which they have been obtained.

 

The website has SSL Certificate (Secure Socket Layer), in order to ensure the security of data transmission between your browser and our website. By using the SSL protocol it is guaranteed: On the one hand, that the user is communicating their data to the server centre of our website and not to another. And on the other hand, that between the user and our website the data is transmitted in encrypted form, preventing it from being read or altered by third parties. This Privacy Policy does not apply to third party websites, nor to those that can be accessed from our Website through a web link. 

 

The Client declares that all the data provided are true, accurate and correct, undertaking to keep them up to date and to notify Serces of any changes to them. In order to use the contents of the website, Clients must be of legal age.  

Customers may at any time exercise their rights under current legislation easily and free of charge. 

 

  1. Protection of Personal Data. 

 

 1.a. Data controller: Contact details of the data controller: SERCAR Centro de Estudios Superiores S.L. (B06868632) with address at Apartamentos Clipper nº 409, La Manga del Mar Menor (30380) Cartagena (Murcia), telephone 687300404 and, contact e-mail: admisiones@serces.es

 

 1.b. Data Protection Rights -POLIARSO-:  

Data minimisation: Serces will limit the collection of personal data to what is strictly necessary and relevant for the purposes for which it is collected. -Legality: Serces will only collect your personal data for specified, explicit and legitimate purposes, and will not process your personal data in a way that is incompatible with those purposes. Data security: Serces will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected, while keeping your personal data error-free and therefore accurate, correct and up to date. Maintaining data security means protecting the confidentiality, integrity and availability of your personal data: Confidentiality to prevent disclosure to third parties. Integrity so that your personal data is not modified by unauthorised third parties. Availability so that authorised persons can access your personal data when necessary. 

 

How to exercise your rights: Users may send a written communication to the registered office of Serces or to the email address indicated in the heading of this Policy, including in both cases a photocopy of their ID card or other similar identification document, to request the exercise of the following rights:  

  • Right to request access to personal data: you may ask Serces whether it is processing your data. 
  • Right to request its rectification (in case it is incorrect) or deletion.  
  • Right to request the limitation of their processing, in which case they will only be retained by Serces for the exercise or defence of  claims.  
  • Right to object to the processing: Serces will stop processing the data in the way you indicate, unless for compelling legitimate reasons or the exercise or defence of possible claims, the data must continue to be processed.  
  • Right to data portability: in the event that you wish your data to be processed by another firm, Serces will provide you with the portability of your data to the new data controller, provided that your data to the new controller, provided that you have given us your consent and it is technically consent and it is technically feasible (in interoperable format). 
  • Forms, forms and further information on the rights referred to:  https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos  
  • Ability to withdraw consent: Where consent has been given for a specific purpose, you have the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. If you do not wish Serces to process your personal data, you may let us know at any time by notifying us in writing, duly signed, to the following postal and e-mail addresses, providing proof of your identity:  
  • Apartamentos Clipper nº 409, La Manga del Mar Menor (30380) Cartagena (Murcia). 
  • admisiones@serces.es
  • How to complain to the Personal Data Control Authority: If you as a User consider that there is a problem with the way in which Serces is handling your data, you can address your complaints to Serces or to the Spanish Data Protection Agency -AEPD-.

 

1.c. Data retention: 

  • Disaggregated data: Disaggregated data will be retained without a deletion period. 
  • Data subject to Processing: Serces informs its Users that their personal data will be kept for the time strictly necessary for the purposes of the processing for which they have been provided, provided that the User has not revoked their consent and, in any case, following as a criterion the principle of data minimisation contemplated in the applicable regulations and in any case for the legally required minimum periods.

 

Consequently, when their use is not necessary, the personal data will be blocked, remaining only at the disposal of the competent authorities for the time and for the legal purposes established in the applicable regulations. Once this period has elapsed, the data will be deleted. 

 

2º. Origin, Purposes, Legitimacy and Recipients. 

  • E-mail, contact forms, newsletters and traditional means of communication. Web and hosting: The Serces website has encryption that allows the User to securely send their personal data through contact forms and/or subscription to standard newsletters and hosted on the servers that the provider offers Serces. 

Data collected through the website: The personal data collected will be incorporated into the corresponding files for which Serces is the owner and responsible. For these purposes:  

  • We will receive your IP, which will be used to check the origin of the message in order to provide appropriate legal recommendations to the same and to detect possible irregularities, as well as data relating to your ISP. 

You can also provide us with your details by telephone, e-mail and other means of communication as indicated in the contact section. 

 

Email: Our email service provider is Google LLC (“Google”), whose registered office is located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. However, we do enhance certain communications, where appropriate, with other third party providers. 

Other services: It may be the case that some services provided through the Website contain special conditions with specific provisions on the protection of personal data, making it essential to read and accept them prior to requesting the service in question. 

  • Categories of data: Customers (Users/Subscribers/Students and Alumni).

 

The categories of data processed are: 

  • Customer identification data (Users, Subscribers/Subscribers/Students and Alumni)- First names, Surnames, telephone, etc.-. 
  • User identification codes or passwords. 
  • Postal and/or e-mail addresses 
  • Manual and/or electronic signatures 
  • Commercial information 
  • Academic, professional, employment, banking and financial information  
  • No specially protected data are processed

Purpose and Legitimation: At Serces we process the information provided to us by interested parties for the purpose of managing and maintaining the professional, commercial and/or contractual training-teaching relationship that may be established for the course/activity requested, regardless of whether or not this is formalised or subsequently maintained or not, with its Clients, for statistical purposes and for the purpose of sending information,  propaganda, publicity, activities, courses, programmes and any other offer of services and products related to the activity that Serces develops, with respect to new services of an educational, training, editorial, publishing, publications, fairs and events, software and computer services, telecommunications, electronic and audiovisual, leisure and tourism, and others of a financial or investment nature. In order to speed up and facilitate the management of the contracted services, communications via SMS channels and instant messaging apps may be used, for which the interested party has previously given their express consent.  

Legitimation will be based on consent – for example, when you request information about one of our Masters/Course/Event -, on legitimate interest and on the necessity of the execution of a contract to which you are a party (contract or pre-contractual relationship). The processing of your data will be legitimised in the contract that you formalise with Serces when requesting the corresponding order -course/activity- and is essential for the provision of the service. Therefore, we inform you that as the communication of personal data is a legal or contractual requirement and a necessary requirement to enter into the aforementioned contract, you are obliged to provide the personal data necessary for processing by Serces, as it is essential for the provision of the requested service. We also inform you that the basis that legitimises the processing of your data to provide you with information is also the legitimate interest of Serces, based on the reasonable expectations of the customer to receive such communications. When you request information about Serces products or services, your data will be processed in order to provide you with information about Masters, Courses, Events, Offers and even about new products of interest to your academic or professional activity, in which case, the processing of your data will be legitimised by the consent you give us when you send the corresponding form. Finally, when you subscribe to a newsletter, your data will be processed in order to send you the newsletter to which you have subscribed. The processing of your data will be legitimised by the consent you give us when you send the subscription form.

Recipients: For the duration of the processing, Serces will transfer and communicate the personal data between the companies of the Sercar group, as well as to external companies for internships and for the possible employment of the Client or to service providers (Google), as well as to Study Centres or Universities, -e.g., University of Barcelona-, where the student is a student. 

University of Barcelona-, where the student has applied to enrol in order to obtain their higher academic training course so that they can manage their enrolment/registration, access to the online and virtual campus, fulfilment of requirements, as well as any other administrative management that is necessary to manage with the aforementioned Centres, including the processing of the Client’s personal data. Your data may be communicated to the Tax Administration and to the banking entities necessary to carry out said management. Apart from these cases, Serces will not transfer or communicate your data, unless legally obliged to do so. Please note that these third parties may also collect your personal data separately, in which case they are solely responsible for the control of such personal data and your dealings with them will be governed by their notices, policies, terms and conditions. 

 

International Transfers will be made to Companies providing IT services to Serces, as Data Processors outside the EU. The Data Controller contracts its virtual infrastructure according to a cloud computing model through the provider Google Inc., complying with the requirements of the GDPR when applying the Standard Contractual Clauses.

 

3º. Social Networks and Newsletters. 

-Presence in networks: Serces has a profile in some of the main social networks on the Internet (Twitter, Instagram, Facebook, LinkedIn, Pinterest, YouTube). 

-Purpose and legitimacy: The treatment that Serces will carry out with the data within each of the aforementioned networks will be, at most, that which the social network allows the corporate profiles.  Thus, Serces will be able to inform, advertise or manage when the law does not prohibit it, to its followers by any means that the social network allows about its activities, presentations, offers, as well as provide personalised customer service. 

-Data extraction: In no case, -except to perform non-automated statistical analysis-, Serces will extract data from social networks unless the Client’s consent to do so was obtained punctually and expressly.  

-Rights: Where, due to the very nature of social networks, the effective exercise of the follower’s data protection rights is subject to the modification of the follower’s personal profile, Serces will assist and advise the follower to that end to the best of its ability. 

 

The Social Media Privacy Policy is as follows: 

1-. User information: Who is responsible for the processing of your personal data? SERCAR Centro de Estudios Superiores S.L., hereinafter, Responsible, informs the User that it has proceeded to create a profile on the Social Networks Facebook, Instagram, Twitter, LinkedIn, Youtube, Vimeo, which is responsible for the processing of the User’s personal data carried out on these social networks and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and the Organic Law 3/2018 of 5 December (LOPDGDD), so it is provided with the following information on the treatment: 

What do we process your personal data for? The purpose of the processing: is to maintain a relationship between the User and the Controller, which may include the following operations:

– To process requests and enquiries made to the Controller. 

– To inform about activities, courses and events organised by the Controller. – To inform about products or services offered by the Controller. 

– Interacting through official profiles. 

Why may we process your personal data? Legal basis for processing: Article 6(1)(a) GDPR, the data subject has consented to the processing of his or her personal data for one or more specific purposes. The User has a profile on the same social network and has decided to join the social network of the Controller, thus showing interest in the information published therein, therefore, at the time of requesting to follow our official profiles, he/she gives his/her consent to the processing of those personal data published on his/her profile. 

The User may at any time access the privacy policies of the social network itself, as well as configure their profile to ensure their privacy. The Controller has access to and processes the User’s public information, in particular, his/her contact name. This data is only used within the social network itself and will only be incorporated into a file of the Controller when necessary to process the User’s request. 

How long will we keep your personal data? Data retention criteria: the data will be kept for as long as the User does not revoke the consent given as indicated in this privacy policy. 

To whom do we provide your personal data? Communication of data: the information provided by the User through the Responsible Party’s social networks, including their personal data, may be published, always depending on the services that the User uses, and may therefore be publicly available to other third party users of the social networks. From the profile of each social network, the User can configure what information he/she wishes to make public in each case, view the permissions that have been granted, delete them or deactivate them, such as any third-party application that he/she no longer wishes to use. 

No communication of personal data to third parties outside the social network is foreseen except, if essential for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the Controller has signed the confidentiality and data processor contracts required by current privacy regulations. 

What are your rights? Rights that assist the User: can only be satisfied in relation to information that is under the control of the Controller: ∙ Right to withdraw consent at any time. 

∙ Right of access, rectification, portability and deletion of your data, and limitation or opposition to its processing. 

∙ The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force. 

 

Contact details for exercising your rights, -attaching a copy of your ID card for correct identification- to: SERCAR Centro de Estudios Superiores S.L. (B06868632) with address at.

Apartamentos Clipper nº 409, La Manga del Mar Menor (30380) Cartagena (Murcia), or via Email: admisiones@serces.es 

2-. Use of the Profile. The Responsible will carry out the following actions: – Access to the public information of the profile. 

– Publication in the User’s profile of all information already published in the Responsible Party’s social network. 

– Sending personal and individual messages through the social network channels. – Updates on the status of the page to be published on the User’s profile. The User can always control their connections, delete content that is no longer of interest to them and restrict who they share their connections with; to do so, they must access their privacy settings. 

3-. Publications. The User, once he/she is a follower or has joined the social network of the Controller, may publish comments, links, images, photographs or any other type of multimedia content supported by the same. The User, in all cases, must be the owner of the content published, hold the copyright and intellectual property rights or have the consent of the third parties concerned. 

Any publication on the social network, be it texts, graphics, photographs, videos, etc., is expressly prohibited. That violate or are likely to violate morals, ethics, good taste or decorum, and/or that infringe, violate or infringe intellectual or industrial property rights, the right to image or the law. In such cases, the Controller reserves the right to immediately remove the content, without prior notice, and may request the permanent blocking of the User. 

The Controller shall not be held responsible for the content freely published by a User. The User must bear in mind that their publications will be known by other users, so that they themselves are primarily responsible for their privacy. 

The images that may be published on any social network will be stored in a file by the Controller, in addition to remaining on the corresponding social network. 

4-. Data of Minors or Persons with Special Abilities. Access and registration through the Responsible’s social networks is forbidden to minors under 18 years of age. If the User has special abilities, the intervention of the holder of his or her parental authority or guardianship, or of his or her legal representative by means of a valid document accrediting representation, will be required. 

The Responsible Party shall be expressly exonerated from any liability that may arise from the use of the social networks by minors or persons with special abilities. The Responsible Party’s social networks do not knowingly collect any personal information from minors; therefore, if the User is a minor, he/she should not register or use the Responsible Party’s social networks or provide any personal information.  In the event that a minor performs such actions, Serces will delete the data as soon as possible upon becoming aware of such circumstances.

 

The Privacy Policy for Newsletters is as follows: 

1.-Responsible: SERCAR Centro de Estudios Superiores S.L., with registered address: Apartamentos Clipper nº 409, La Manga del Mar Menor (30380) Cartagena (Murcia), and contact email: admisiones@serces.es 

2.-Purpose of the treatment: The possibility of sending the subscriber by electronic means information and formative-educational communications about our activities, courses, programmes and any other offer of services and products related to the activity that Serces develops -such as publications, fairs and events- as well as about existing promotions about them and that may be of interest to them based on their condition of subscriber, student or former student, their browsing and online shopping habits. If you have told us your preferences, we will use them to better and more effectively target the information we send you. We will retain your personal data for as long as there is a mutual interest in maintaining the purpose of the processing, or when you exercise your right to erasure, cancellation or objection. 

3.-Legitimation: The lawfulness and possibility to carry out the processing of your data is determined by your consent, which has been given and obtained through your subscription. 

Recipients: No data is communicated to third parties unless legally required or necessary for the provision of the service or product requested. 

Rights: the subscriber has the right to request access, rectification, deletion, limitation and portability of their personal data. They also have the right to oppose the processing, for this reason and to facilitate the exercise of the same in each of the communications received and at the end of the mail will have a link to unsubscribe automatically. 

To exercise these rights, you can send a copy of your ID card or passport for correct identification, by means of a reliable communication by post to: SERCAR Centro de Estudios Superiores S.L., with registered office at Apartamentos Clipper nº 409, La Manga del Mar Menor (30380) Cartagena (Murcia), or by sending an e-mail to: admisiones@serces.es. 

  

You can file a complaint before the Spanish Data Protection Agency, when you understand that your rights have not been respected, whose web page is: https://www.aepd.es