Privacy declaration

Who is responsible for processing your data?

Corporate name: FUNDACION CURSOS DE VERANO DE LA UPV EHU Tax Nº: G20448056
Corporate address: Palacio Miramar. Paseo Miraconcha 48, 20007 San Sebastian (Gipuzkoa)
Entered in the Foundations Register withl Nº GIP-49
Telephone: 943219511
Fax: 943219598

If you wish you can also approach the data protection delegate of the Summer Course Foundation, at the same contact addresses.

For what purposes do we process your personal data?

FUNDACION CURSOS DE VERANO DE LA UPV EHU  processes subjects' data in pursuit of its statutory purposes and in general for the following purposes:

  • Managing the data collected through forms on the website.
  • Managing contacts.
  • Commercial communication, advertising or promotional actions, as well as sending information about the organisation that might be of interest to you.
  • Responding to enquiries and suggestions.
  • Allowing the data subject to enrol on a course or other training activity.  Handling enrolments and participation in events, conferences, talks, courses and training activities. Sending information about new related activities.
  • Accounting, fiscal and administrative management and maintenance of the relationship.

How long will we keep your data?

The personal data collected are stored while the data subject does not request their deletion and this is in order, and while they are necessary - including the need to keep them for the applicable prescription periods - or pertinent to the purpose for which they were collected or recorded. Storage of the data will be determined by FUNDACION CURSOS DE VERANO DE LA UPV/EHU's legal obligation to keep them. After these periods the data will be destroyed or deleted, carrying out the deletion, elimination or destruction in such a way that the information contained on the media is not retrievable.


The legal basis for processing the data is the consent given by the data subject,  or because it is necessary to execute a contract to which the data subject is a party, or to take pre-contractual measures at the data subject's request (art. 6.1.a & b of the GDPR). This consent can be withdrawn at any time.
In cases where personal data are requested to manage and carry out a training activity, and in contact forms, all the data requested must be supplied. If not all the fields are filled in, it may not be possible to meet the request or provide the service.

To what addressees will your data be passed?/h3>

As a consequence of handling for the purposes authorised, your data may be passed on to organisations or people directly related to FUNDACION CURSOS DE VERANO DE LA UPV/EHU and the services it provides. These people or organisations will be linked to the provision of a service under contract to the entity, and may not use the data for any other purposes.

Your identifying, contact and professional details may be passed on to the organisers, speakers and participants in events organised by the section for teaching the courses only, and they may not be used for any other purposes.

No international transfers of data are planned.

Your data may not be transferred without their consent except in the cases stipulated by law.

Where do your data come from?

The personal data processed by FUNDACION CURSOS DE VERANO DE LA UPV/EHU are supplied by the data subject, though they may be supplied by another person acting on their behalf or the company or organisation for which the said person works.

What categories of data does FUNDACION CURSOS DE VERANO DE LA UPV/EHU process?

FUNDACION CURSOS DE VERANO DE LA UPV/EHU will process the data supplied to it, which can be in the following categories:

  • Identifying and contact details;
  • Academic and professional details
  • Detailed employment data
  • Economic, financial and insurance data
  • Commercial information
  • Images of participants in its activities

What are your rights?

Any person is entitled to obtain confirmation of whether or not FUNDACION CURSOS DE VERANO DE LA UPV/EHU is processing personal data concerning them.

Data subjects are entitled to access their personal data and to obtain a copy of the personal data processed, and to update them, as well as requesting the correction of inaccurate data or, where appropriate, requesting their deletion where, among other reasons, the data are no longer necessary for the purposes for which they were collected.

n certain circumstances and for reasons related to their own situation, data subjects may object to the processing of their data. FUNDACION CURSOS DE VERANO DE LA UPV/EHU will cease processing of their data, except for legitimate imperative reasons or the defence of possible complaints.

Furthermore, in certain circumstances, provided for in article 18 of the GDPR, data subjects may request limitation of the processing of their data, in which case FUNDACION CURSOS DE VERANO DE LA UPV/EHU will process them, with the exception of their storage, with the consent of the data subject or for the formulation, lodging or defence of complaints, or with a view to protecting the rights of another individual or organisation or for reasons of substantive public interest in the Union or in a particular member state.

Were it to be applicable, as a consequence of the application of the right of deletion or objection to processing personal data in the online environment, data subjects have the right to be forgotten under the jurisprudence established by the Court of Justice of the EU.

By virtue of the right of portability, data subjects are entitled to obtain the personal data pertaining to them in a structured, commonly-used, machine-readable format and to pass them on to another data controller.

Any data subject is entitled not to be the subject of a decision based solely on automatic processing, including the creation of profiles, which has legal consequences for them or significantly affects them in a similar way, with the exceptions stipulated in art. 22.1 of the GDPR.

The data subject is entitled to have their data deleted when the purpose for their processing or collection ceases to exist, when they withdraw their consent in the case that this was what legitimised the processing, or for the other reasons set forth in article 17 of the GDPR. This erasure will be by high-level deletion of the data stored on automatic media and the physical destruction of non-automatic media.

  How can these rights be exercised?

By writing, always enclosing a copy of the identity document or other proof of the identity of the data subject, to the addresses shown at the top, for the attention of the data protection delegate.

What channels for complaints exist?

 If you feel your rights have not been properly upheld, you are entitled to lodge a complaint with the Spanish Data Protection Agency, the contact details of which are: Telephone: 901 100 099 / Postal address: C/ Jorge Juan,6 Madrid