This document governs the Privacy Policy of the MIU CITY UNIVERSITY, INC Website (hereinafter, “MIU” or “Website”), together with the information on data protection to which the data subject may have access.
MIU shall be governed by the provisions of EU Regulation 2016/679 (hereinafter, GDPR) in all matters concerning the personal data processing of the data subjects. This decision was made based on the fact that Florida lacks specific legislation in this regard and there is also no federal law by the U.S. government in existence regarding the processing of personal data of citizens or resident in the EU (under the terms stipulated in article 3.2 of GDPR). Thus, given its nature as a Proeduca Group company, centralizing data processing will be handled by the Group’s parent company, which is established in the European Union.
Information regarding MIU
MIU is a private American university based in the state of Florida (Miami) and belonging to the Proeduca Group. MIU is dedicated to online and on-campus university education.
Data controller
- Business Name: MIU CITY UNIVERSITY MIAMI INC
- CIF: P14000062140
- Address: 111 NE 1st Street, 6th Floor, Miami, FL 33132
- Email: info@miuniversity.edu
Data Protection Officer
- Name and Surnames: Miguel Crespo Toledo
- Telephone no.: +34 915 674 391 (Ext. 3216)
- Address: C/ Almansa 101 – 28049 Madrid (Spain)
- Email: ppd@miuniversity.edu
Application of this Privacy Policy
This Privacy Policy regulates the data processing performed by MIU with regard to users accessing or contacting MIU through its Website: https://www.miuniversity.edu, together with any other processing performed. The above covers the personal data processing of:
- Potential students, students, and alumni
- Professors, associates, researchers, and authors
- Candidates and employees
- Suppliers and/or potential suppliers
This Privacy Policy, therefore, reflects the information on processing with regard to the different categories of data subjects above.
Purposes of the processing and legal grounds
This section sets out the purposes and general legal grounds in accordance with the personal data processing performed by MIU:
Consent of the data subject. (Art. 6.1.a) GDPR):
1- Sending of advertising and commercial information regarding the courses and studies both of MIU and other Proeduca Group companies focused on the education sector.
2- Take part in the selection processes carried out by MIU.
Contractual implementation and precontractual measures (articles 1.b) GDPR):
1 - Execute the service contracted or formalize the relation.
2 - Implement the proposal requested by the data subject.
3 - Communication as necessary to continue the contractual relation.
4 - Hiring of personnel.
5 - Development of educational activities.
Compliance with a legal obligation (article 1.c) GDPR)
Report information to public authorities, regulators, or governmental agencies when it is a legal requirement under local laws or in compliance with regulatory obligations.
Legitimate interest of the data controller (article 1.f) GDPR)
1- Deal with information requests, claims, doubts or suggestions regarding the products and/or services offered by MIU.
2- Sending of advertising and commercial information on the courses and studies offered by MIU via any channel, including digital means, given the existence of a prior contractual relation with the data subject, this being self-advertising.
To offer you maximum transparency, you can see each of the purposes for which we process your data in the following section, in your capacity as a data subject together with the legal grounds that enable the processing of same.
You are hereby informed that all the data requested, or any which may be requested by MIU, is necessary for the purposes set out in this Privacy Policy. Any failure to provide said data shall render it impossible to contact you or manage any possible application by you. For this reason, the fields marked with an asterisk (*) are required.
You vouch for the accuracy of the personal data furnished. Therefore, MIU may periodically request the review and update of your personal data it stores.
We also inform you that browsing the Website may involve the processing of your personal data. To this end, MIU has put in place a cookie information and management system in accordance with the criteria of the GDPR. You can read our Cookie Policy by clicking here.
Rights of the data subjects
You may exercise your rights as acknowledged under the current data protection laws. These are:
- Right to request access to the data subject’s personal data.
- Right to request rectification of inaccurate data.
- Right to request the erasure of data.
- Right to request the restriction of data processing.
- Right to object to the processing.
- Right to data portability.
- Right not to be subject to individualized automated decision-making.
- Revocation of consent.
To facilitate your ability to exercise these rights, we have created a preference center for you to manage them in accordance with your interests, swiftly and simply. You can access to your preference center by clicking here.
You can always inform us by writing to MIU CITY UNIVERSITY MIAMI, INC, with registered offices in 111 NE 1st Street, 6th Floor, Miami, FL 33132, or the following email address ppd@miuniversity.edu, attaching a copy of your DNI or other proof of identity document.
Lastly, despite the fact that MIU is located in the state of Florida (USA), it is engaged to comply with the provisions set forth in the GDPR, together with implementing the Spanish laws that develop it (Organic Law 3/2018, 5 December, on Personal Data Protection and safeguarding of digital rights). To this end, as a Proeduca Group company, should you need more information concerning your rights regarding data protection or to lodge a claim, you can contact the Spanish Data Protection Agency with registered offices in Calle Jorge Juan, 6, 28001, Madrid (www.aepd.es).
Data storage times
Pursuant to article 5.1.e) of the General Data Protection Regulation, the storage period of your data will depend on the duration of your relationship with MIU and the legally provided timeframes. In this respect, MIU’s criteria for establishing the storage periods of your data were determined in accordance with the requisites set forth in the applicable laws, regulations, and legal guidelines, together with the operational requisites of MIU with regard to appropriate management of its relations with the different categories of data subjects. Your data will be stored for the duration of any commercial or contractual relation with MIU.
Upon conclusion of this relation, your personal data will be erased when all the necessary actions to manage and finalize any obligation that may exist between the parties. During this period, all the necessary administrative formalities shall be carried out, except when you have provided your express consent to receive commercial communications or participate in the selection processes of the rest of the group companies, in which case your data will be stored until you express your objection to same.
Without detriment to above, your data will be stored and duly blocked during such time as any liabilities may arise from the execution of our contractual or precontractual relation, and to comply with other legal obligations to which MIU is subject. In this regard, MIU warrants that it will not process this data unless necessary to present, exercise or defend against any claims or when MIU is required to furnish same to the Public Administration or the Courts during the statute of limitations on your rights or legal obligations.
If you wish to read the storage policy of MIU, please write to 111 NE 1st Street, 6th Floor, Miami, FL 33132, or e-mail: ppd@miuniversity.edu
Recipients of your data and international data transfer
The personal data you provide to MIU may be disclosed to third parties to which MIU is obliged to convey information, such as the public authorities, in order to comply with the requirements of said authorities and the applicable law.
In turn, they shall be disclosed to those third-party companies or suppliers who require personal data to render their services to MIU. The appropriate data processor contracts have been signed with such companies as stipulated in article 28 and 29 of the GDPR.
Lastly, if you have lent your consent, your data shall be disclosed to the other Proeduca Group companies between which an international data transfer may take place.
In short, we wish to inform you that these companies comply with all the criteria set forth in the General Data Protection Regulation.
Origin
The personal data processed by MIU shall be from the data subject. However, if they have given their consent, their data may also be provided by any of the companies of the Grupo Proeduca.
Data security
MIU has in place apropiate policies and technical and organizational measures to safeguard and protect your personal data from undesirable activities such as illegal or non-authorized access, loss or accidental destruction, damage, illegal or non-authorized disclosure. MIU shall also take all reasonable precautions to ensure that the employees with access to your personal data have received adequate training.
In any event, you are informed that any data transmission via the Internet is not wholly secure and as such, it is performed at your own risk. Although we will make our best efforts to protect your personal data, MIU cannot guarantee the security of the personal data transmitted via our Website.
Controlling authority
As a Proeduca Group company, should you need more information concerning your rights regarding data protection or wish to lodge a claim, you can contact the Spanish Data Protection Agency with registered offices in Calle Jorge Juan, 6, 28001, Madrid (www.aepd.es).
Information on the profiling of personal data
We hereby inform you that when requesting information about any of our courses using any of our website forms your personal data will be profiled.
The purpose of this profiling is to offer you information which, in accordance with such data, may be of interest to you with regard to your concerns, preferences and needs.
This profiling shall take place at the time you submit the form. At the same time, and if you consider it appropriate, you may exercise your right to object via your preference centre which you can enter by clicking here.
The legal grounds for this processing are the legitimate interest of the controller. In keeping with this, an assessment has been made with regard to the fundamental rights and freedoms of the data subjects together with an evaluation of the level of intrusion into their privacy. As a result of both of these procedures, it has been found that at no time does any intrusion of the data subject’s privacy occur as it conforms to any reasonable expectations they may have. Should you wish to have any further information, please do not hesitate to contact us at: ppd@miuniversity.edu.
Proeduca Group
The Proeduca Group is comprised of different companies, one of them being PROEDUCA ALTUS, S.A. (hereinafter, Proeduca Group), which, amongst others, is responsible for its data processing activities and technology management, together with the implementation of technical and organizational security measures.
The aim of the Proeduca Group is to have centralized, unified management with regard to regulatory compliance. This requires that, irrespective of the company to which you may have furnished the data, these be disclosed to the Group. This disclosure is carried out at all times in accordance with the strictest security and confidentiality guarantees. The purpose is none other than the administrative management of personal data and any processing; therefore, the processing is based on the legitimate interest of the controller.
As you can see, although the Group comprises different companies, irrespective of which it may be, we aim to offer you the highest standards as regards quality, compliance and security. Yet, at the same time, we also wish to attend to any concerns you may have and to your interests. For this reason, your personal data will be processed in a centralized manner, and with your consent we will contact you from any of the Group companies engaged in educational matters to assist you in choosing the best options in accordance with your profile and requirements. You can find the companies operating in the educational sector by clicking here.
Contact MIU
If you have any doubts or questions for MIU concerning the processing of your personal data you can write to MIU CITY UNIVERSITY MIAMI, INC, with registered offices in 111 NE 1st Street, 6th Floor, Miami, FL 33132 or the following e-mail address: ppd@miuniversity.edu
Privacy Policy
To offer you maximum transparency, you can see each of the purposes and the legitimate bases that underly the data processing in accordance with your capacity as a data subject in the section below:
POTENTIAL STUDENTS
Consent of the data subject (article 6.1.a) GDPR)
- Sending of commercial information regarding other degrees offered by the data controller or any Proeduca Group company.
Precontractual measures (article 6.1.b) GDPR)
- Handle and manage the data subject’s information requests via different channels.
- Verify the admission requirements for the degree applied for.
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Disclosure of data via the sections: “Suggestions mailbox, “Request information, “Contact us (Shall we call you?)”.
- Profiling of the subjects’ personal data so as to personalize the sending of information according to their interests. Should you wish to access further information, click here.
STUDENTS
Consent of the data subject (article 6.1.a) GDPR)
- Sending of commercial information concerning other degrees offered by third party entities belonging to the Proeduca Group that operate in the academic sector.
- Live broadcast of academic communications or marketing events (graduations, conferences, seminars, congresses, etc.), for the publication of the data subject’s image.
- Management of events through the recording of the event in question and its publication on the webpage, corporate platforms, and social networks for the publication of the data subject’s image.
- Publication of photos, videos, and student information on Social Networks (YouTube and Facebook Live) to promote student enrollment, for the publication of the data subject’s image.
- Publication of photos, videos, and former student information on Social Networks (YouTube and Facebook Live) to promote student enrollment, for the publication of the data subject’s image.
- Streaming of classes and delayed coverage when an indeterminate group of persons specifically appears.
- Management of national and international mobility programs for students.
- Publication of students’ comments in surveys concerning the services.
- Process the enrollment of students in the volunteer work program in the Campus Solidario (Humanitarian Schemes).
Precontractual measures (article 6.1.b) GDPR)
- Verify the admission requirements for the degree applied for prior to student pre-admission.
Contractual implementation (article 6.1.b) GDPR)
- Management of student registration and completion of academic record.
- Manage certain student services by means of the university card.
- Management of email accounts and access to the campus.
- Assist the student with regard to their academic needs via the student pedagogy and orientation service.
- Process tutorials.
- Academic and logistical management of curricular practices.
- Management and supervision of curricular and extra-curricular practices, together with the management of the employment service during the degree course.
- Management of economic assistance and grants.
- Registration of guests at events.
- Student collection of university or master’s degree.
- Processing of user registration and access to the webpage.
- Manage subsidized online training activities.
- Manage payment of training activity fees.
- Manage student certificates as volunteers for acknowledgement of credits.
- Student service regarding special academic needs, such as disabilities or accessibility issues.
Compliance with a legal obligation (article 6.1.c) GDPR)
- Handle students via the Students’ Ombudsman and process their complaints, claims, or suggestionsAnalysis of the satisfaction with, and quality of, the services and products by means of surveys conducted by the data controller and the National Agency for Quality Assessment and Accreditation (ANECA), in keeping with the Organic Law on Universities.
- Assist the students with regard to any special academic needs, such as disabilities or accessibility issues, so as to ensure correct access and progress of students with accessibility issues of disabilities (Law 10/2014, 3 December, on accessibility and the Organic Law on Universities).
- Recording voices and images during the presentation of the doctoral theses as part of the management and archiving for academic purposes pursuant to the provisions of the Organic Law on Universities and Royal Decree 99/2011 dated 28 January covering official doctoral teaching.
Fulfillment of a mission in the public interest or in the exercise of public powers conferred on the data controller (article 6.1.e) GDPR)
- Recording and dissemination of images at public events organized by the university, together with the subsequent dissemination of the images on the university’s webpage with regard to public University events, in accordance with the University Protocol Manual drawn up by CRUE on Solemn Acts (Opening of the Academic Year, Doctorate Honoris Causa and acts so categorized, in line with the university bylaws), Administrative acts (Inaugurations, Signing of agreements), Academic Acts (Graduations, Institutional Awards, Homages) and other Acts (Inaugurations, Seminars/Congresses/Symposiums/Forums, Book Presentations, Press conferences, and others).
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Recording of and listening to conversations between students and tutors to monitor them and enhance the quality and security of the service.
- Sending of commercial information regarding courses and studies similar to those already chosen by the student.
- Recording of classes streamed, and delayed viewing of same, when an indeterminate group of persons appears in general In this case, the interest of the data controller shall prevail, but under no circumstance may they seek to capture a particular person but only the students participating in the classes.
- Live broadcast of academic, communications and marketing events (graduations, conferences, seminars, congresses, etc.), when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they seek to capture a particular person but simply to promote the activity.
- Events management by recording the event in question and publishing it on the webpage, corporate platforms, and Social Networks when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they seek to capture a particular person but simply to promote the activity.
- Publication of photos, videos, and student information on Social Networks (YouTube and Facebook Live) to promote student enrolment, when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they seek to capture a particular person but simply to promote the activity.
- Processing of disciplinary proceedings in the event of a breach by students.
- Analysis of student data and registrations for the continuous improvement of the services and products offered by the data controller.
- Recording of voice and images of interviews during the university entrance test as part of the management and archiving for academic purposes.
- Sending of notices to students individually or as a group by email, WhatsApp, and SMS so as to coordinate and carry out the activities the student is involved in.
- Disclosure of data via the section: “Suggestions mailbox”.
- Recording of voice and images of the Final Project presentations and master’s dissertations as part of the management and archiving for academic purposes together with the documentation generated, i.e., the minutes.
ALUMNI
Consent of the data subject (article 6.1.a) GDPR)
- Take part in the Alumni Directory using the form on the webpage.
- Sending of commercial information concerning other degrees offered by companies belonging to the Proeduca Group that operate in the academic sector.
- Publication of photos, videos, and former student information on Social Networks (YouTube and Facebook Live) to promote student enrollment, for the publication of the data subject’s image.
- Process the enrollment of alumni in the volunteer work program in the Campus Solidario (Humanitarian Efforts).
Contractual implementation (article 6.1.b) GDPR)
- Processing of the enrollment of former students in the Alumni program.
- Management and administration of the Alumni Portal and provision of the service to graduates.
- Management of the employment service for postgraduates.
Fulfillment of a mission in the public interest or in the exercise of public powers conferred on the data controller (article 6.1.e) GDPR)
- Recording and dissemination of images at public events organized by the university together with the subsequent dissemination of the images on the university’s webpage with regard to public university events, in accordance with the University Protocol Manual drawn up by CRUE on Solemn Acts (Opening of the Academic Year, Doctorate Honoris Causa and acts so categorized, in line with the university bylaws), Administrative Acts (inaugurations, signing of agreements), Academic Acts (Graduations, institutional awards, homages) and other Acts (Inaugurations, Seminars/Congresses/Symposiums/Forums, Book Presentations, Press conferences, and others).
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Sending of commercial information regarding courses and studies similar to those already chosen by the student.
- Publication on Social Networks (YouTube and Facebook Live) photos, videos, and student information to promote student enrollment, when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they aim to capture a particular person but simply to promote the activity.
PROFESSORS
Consent of the data subject (article 6.1.a) GDPR)
- Use of their image at events or courses given or taught.
Contractual implementation (article 6.1.b) GDPR)
- Management of the contract signed for provision of the service.
- Process the student-tutor meetings for course orientation.
- Coordination of tutorials.
Fulfillment of a mission in the public interest or in the exercise of public powers conferred on the data controller (article 6.1.e) GDPR)
- Recording and dissemination of images at public events organized by the university together with the subsequent dissemination of the images on the university’s webpage with regard to public university events, in accordance with the University Protocol Manual drawn up by CRUE on Solemn Acts (Opening of the Academic Year, Doctorate Honoris Causa and acts so categorized, in line with the university bylaws), Administrative Acts (inaugurations, signing of agreements), Academic Acts (Graduations, institutional awards, homages) and other Acts (Inaugurations, Seminars/Congresses/Symposiums/Forums, Book Presentations, Press conferences, and others).
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Recording of the images and voice of tutorials with students to monitor and manage the quality of the service.
- Use of your image at events or courses held or taught when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they aim to capture a particular person but simply to promote the activity.
RESEARCHERS
Consent of the data subject (article 6.1.a) GDPR)
- Use of their image at events or courses given or taught.
Contractual implementation (article 6.1.b) GDPR)
- Management of the contract signed for provision of the service.
- Present the progress achieved with the research project being carried out.
- Publication of the results of the research project.
Fulfillment of a mission in the public interest or in the exercise of public powers conferred on the data controller (article 6.1.e) GDPR)
- Processing of the personal data used in the research project for scientific or historic research purposes (articles 5.1.b), 9.1.j) and 89 GDPR, with regard to Law 14/2011, 1 June, on Science, Technology, and Innovation).
- Recording and dissemination of images at public events organized by the university together with the subsequent dissemination of the images on the university’s webpage with regard to public university events, in accordance with the University Protocol Manual drawn up by CRUE on Solemn Acts (Opening of the Academic Year, Doctorate Honoris Causa and acts so categorized, in line with the university bylaws), Administrative Acts (inaugurations, signing of agreements), Academic Acts (Graduations, institutional awards, homages) and other Acts (Inaugurations, Seminars/Congresses/Symposiums/Forums, Book Presentations, Press conferences, and others).
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Use of your image at events or courses held or taught when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they aim to capture a particular person but simply to promote the activity.
COLLABORATORS
Consent of the data subject (article 6.1.a) GDPR)
- Use of their image at events or courses given or taught.
Contractual implementation (article 6.1.b) GDPR)
- Management of the contract signed for provision of the service.
Fulfillment of a mission in the public interest or in the exercise of public powers conferred on the data controller (article 6.1.e) GDPR)
- Recording and dissemination of images at public events organized by the university together with the subsequent dissemination of the images on the university’s webpage with regard to public university events, in accordance with the University Protocol Manual drawn up by CRUE on Solemn Acts (Opening of the Academic Year, Doctorate Honoris Causa and acts so categorized, in line with the university bylaws), Administrative Acts (inaugurations, signing of agreements), Academic Acts (Graduations, institutional awards, homages) and other Acts (Inaugurations, Seminars/Congresses/Symposiums/Forums, Book Presentations, Press conferences, and others).
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Use of your image at events or courses held or taught when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they aim to capture a particular person but simply to promote the activity.
AUTHORS
Consent of the data subject (article 6.1.a) GDPR)
- Use of their image at events or courses given or taught.
Contractual implementation (article 6.1.b) GDPR)
- Management of the contract signed for provision of the service.
- Publication of the work.
Fulfillment of a mission in the public interest or in the exercise of public powers conferred on the data controller (article 6.1.e) GDPR)
- Recording and dissemination of images at public events organized by the university together with the subsequent dissemination of the images on the university’s webpage with regard to public University events, in accordance with the University Protocol Manual drawn up by CRUE on Solemn Acts (Opening of the Academic Year, Doctorate Honoris Causa and acts so categorized, in line with the university bylaws), Administrative Acts (inaugurations, signing of agreements), Academic Acts (Graduations, institutional awards, homages) and other Acts (Inaugurations, Seminars/Congresses/Symposiums/Forums, Book Presentations, Press conferences, and others).
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Use of your image at events or courses held or taught when an indeterminate group of persons appears in general. In this case, the interest of the data controller shall prevail as the images will be taken during activities carried out by the latter, but under no circumstance may they aim to capture a particular person but simply to promote the activity.
CANDIDATES
Consent of the data subject (article 6.1.a) GDPR)
- Reception and management of candidatures via the following channels: physical, personnel selection agencies, job portals, the “Join Us” section of the webpage, etc. Both by the data controller and any of the Proeduca Group companies.
Precontractual measures (article 6.1.b) GDPR)
- Manage involvement in all the different stages of the selection processes.
EMPLOYEES
Consent of the data subject (article 6.1.a) GDPR)
- Use of their image as a data controller employee.
- Use of their fingerprint as a clocking in/out system.
- Process the enrollment of students in the volunteer work program in the Campus Solidario (Humanitarian Efforts).
Contractual implementation (article 6.1.b) GDPR)
- Formalization of the hiring of employees.
- Management of corporate benefits and flexible remuneration scheme.
- Management of employee parking.
- Organization of employee travel and per diems.
- Management of employee profiles, access accounts, platforms and applications.
- Management of employee training activities.
- Sending of communications and internal newsletters.
- Event management and attendance.
- Assessment of objective-targeted professional performance.
Compliance with a legal obligation (article 6.1.c) GDPR)
- Payroll management, consisting of processing remuneration payments for the employee, in keeping with the legal obligations contained in the Workers’ Statute together with any other regulations applicable for employer SS contributions and withholdings on account. When necessary, to report information to the public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
- Payment calculation and management of business and variable commission as applicable, in keeping with the legal obligations contained in the Workers’ Statute together with any other regulations applicable for employer SS contributions and withholdings on account. When necessary, report information to public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
- Management of applications for reduced working hours for childcare, care of dependent people or persons with serious illnesses, in compliance with the legal obligations contained in the Workers’ Statute together with any other regulations applicable for employer SS contributions and withholdings. When necessary, report information to public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
- Management of occupational risk prevention in compliance with the legal obligations of the Law on Occupational Risk Prevention. When necessary, report information to public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
- Adaptation of workstations for special needs employees or pregnant women in accordance with their condition, in compliance with the legal obligations contained in the Law on Occupational Risk Prevention. When necessary, report information to public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
- Management of sick leave and substitutes via provisional contracts in compliance with the legal obligations of the General Law on the Social Security together with any other applicable regulations. When necessary, report information to public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
- Management of the reporting channel and assurance of compliance with the code of ethics and absence of harassment in the workplace, together with any other illegal practice, for the management of the organization and management models that include appropriate surveillance and control measures to prevent crimes of a similar nature or materially reduce the risk of same pursuant to article 31 of the Criminal Code.
- Control of employee attendance during working hours in compliance with the legal obligations of the Workers’ Statute together with any other applicable regulations for the purpose of employee SS contributions and withholdings. When necessary, report information to public authorities, regulators or governmental agencies when it is a legal requirement, under local laws or in compliance with regulatory obligations.
Legitimate interest of the data controller (article 6.1.f) GDPR)
- Publication of photos and videos on the webpage or Social Networks when deemed necessary, provided they are generic in nature.
- Events management via the recording and publication of same on the webpage, corporate platforms, and Social Networks provided they are generic in nature.
- Security management of the facilities, property, and persons using video-surveillance systems.
SUPPLIERS AND POTENTIAL SUPPLIERS
Precontractual measures (article 6.1.b) GDPR)
- Assessment, analysis, and proposal of future suppliers for the service in addition to their internal management,
Contractual implementation (article 6.1.b) GDPR)
- Maintenance of relations between the Parties.
INVESTORS AND POTENTIAL INVESTORS
Precontractual measures (article 6.1.b) GDPR)
- Assessment of future investors in light of current requirements.
Contractual implementation (article 6.1.b) GDPR)
- Maintenance of relations between the Parties.