Privacy Policy - Institución Internacional SEK

Privacy Policy

Definitions and acronyms.

“Policy” – This privacy and personal data protection policy.

“The Website” – Our website https://www.sek.net

“GDPR” – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

“LOPD” – Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.

“SEK” – SEK International Institution, S.A., of Costa Rican nationality, with legal entity identification number 3-101-199900 and Spanish Tax Identification Number N4361430D.

“DPO” – SEK Data Protection Officer.

SEK respects your right to privacy when you use the Website. To ensure that you are properly informed, we have developed this Policy. This Policy will allow you to understand how we obtain, process, and securely protect the personal data you provide or we collect through the Website, so that you can freely and voluntarily decide whether you wish us to process it.

When you contract services with SEK, your personal data will be processed in accordance with the provisions of the corresponding document.

This Policy informs you about the processing of information that SEK obtains through the Website. It does not apply to information that may be obtained by third parties on other websites, even if these are linked to the Website.

Please also note that the principles set forth in this Policy were developed for use in Spain.

We remind you of the importance of reading this Policy each time you use the Website, as it may be modified to adapt to regulatory changes.

What is the GDPR? The General Data Protection Regulation (GDPR) is a European regulation that adapts the management of personal data to new digital environments, such as the internet and apps. Its objective is to ensure that you, as a user, own your data and have control over what entities do with it.

The European Union approved the Regulation in 2016. Spain has implemented it since May 25, 2018.

What changes does it mean for you as a user? The GDPR grants you new rights than those previously available in Spain (such as the right to data portability) and expands your existing rights (access, rectification, erasure, and objection).

Furthermore, under the GDPR, we will require your consent to process your personal data and will inform you at all times of what is being done with it, using language that we hope you will find clear and accessible.

What is the LOPD? The Organic Law on the Protection of Personal Data and the Guarantee of Digital Rights is the Spanish law created to adapt the country to the GDPR and complete its provisions and to guarantee digital rights.

What is personal data? What personal data does SEK collect on the Website and how does it obtain it? Personal data is any information relating to an identified or identifiable natural person.

We only collect personal data that you provide to us or information that you have consented to provide through access, use, and browsing of the Website, such as (i) data provided when using the service; (ii) data derived from communications you maintain with us; (iii) data derived from your browsing, such as cookies; (iv) data you provide by submitting forms; and (v) any other data that you authorize or have authorized us to process.

Do you have to accept consent? Consenting to all processing allows SEK to offer a service that is as tailored to your needs as possible, but you may decline to do so. Even so, if you opt for the latter, SEK is required to process your personal data to maintain the service you have contracted with us and/or to comply with certain laws.

Is not giving consent the same as not completing the form? In practice, yes. If you do not complete the consent forms, it will be deemed as if you have rejected all of them, and you will not receive communications that can only be personalized by consent.

What is personal data processing? Data processing is considered to be any use made of personal data, from collection, recording, storage, processing, modification, consultation, use, blocking, modification, or deletion, to data transfers resulting from communications, consultations, interconnections, and transfers.

What do we use your personal data for? The data requested in the website forms are generally mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if you do not provide them or do not provide them correctly, they cannot be fulfilled, without prejudice to your ability to freely view the content of the website.

We use your personal data:

(i) To manage your browsing on the website in accordance with the Cookie Policy.

(ii) For the purposes and with the legitimacy indicated in each of the personal data collection forms on the Website.

(iii) To provide you with personalized information about products, services, events, courses, programs, promotions, and relevant news, by sending commercial communications by electronic and traditional means.

(iv) To manage registration for the corresponding event, when you have provided your data for this purpose. In this regard, you are informed that SEK reserves the right to take photographs and videos of users who attend events organized by or with the participation of SEK, in order to promote its activities. If you do not wish your data to be processed for this purpose, please do not expose yourself to photographic or audiovisual presentations taken during the event.

(v) To manage the admissions process, including any necessary arrangements with organizations and student admissions tests, which will also include profiling, if you initiate the SEK Admission Application process.

Your data will be retained by SEK for the time necessary to fulfill the aforementioned purposes or until you object or revoke your consent, as described below in this Policy.

Who is the Controller of your personal data? The Controller is Institución Internacional SEK, S.A. (which we have previously referred to as “SEK”).

Where and how does SEK store your personal data? At SEK, we treat your personal data with absolute confidentiality. We are committed to maintaining your data confidentiality and ensuring our duty to store it in compliance with applicable regulations. We adopt all necessary technical and organizational security measures to prevent alteration, loss, and unauthorized processing or access to your data.

Your personal data is stored in databases for which SEK takes all necessary measures to ensure its private and secure protection in accordance with the high security standards established by European Union regulations. These databases are only accessible to our employees and authorized third parties, thereby ensuring their confidentiality.

SEK has established retention periods for your personal data to comply with the regulations that apply to them.

Will SEK send you commercial communications? One of the purposes for which SEK will process the personal data you provide is to send you personalized electronic communications with information regarding products, services, events, courses, programs, promotions, and news relevant to you. Whenever any communication of this type is made, it will be addressed solely and exclusively to you unless you have previously expressed your objection to receiving it.

To achieve this purpose, a commercial profile will be created based on your preferences, obtained from the information you provide, including from external sources.

If at any time you do not wish to receive communications of this nature, you may revoke your consent by sending a notification to the following address: dpo@edusek.net, providing a copy of a document (ID, passport, etc.) that proves your identity.

What are your responsibilities? You are responsible for each piece of data you provide to SEK, for any untruthfulness, inaccuracy, lack of validity, and authenticity thereof, as well as for the consent you provide for its use and/or processing. You are also responsible for the data of third parties that you provide to us and for which you are required to obtain their consent.

What rights do you have regarding the use of your data? At any time, you may exercise a series of rights regarding the processing of your personal data, known in Spain as ARCO Rights.

If you wish to exercise any of the rights described below, (i) send us an email to dpo@edusek.net with the subject line: “ARCO ONLINE USERS” to help us identify and prioritize your request; (ii) attach a copy of your ID or equivalent document proving your identity to your request; and (iii) complete the form corresponding to the right you are exercising:

• Right of access. You can obtain information regarding which of your personal data is being processed, the purpose of the processing, the source of the data, and the communications/transfers made or planned through the following form [https://sek.net/wp-content/uploads/2019/12/FORMULARIO-1_DERECHO-DE-ACCESO-1.docx].

• Right of rectification. You can correct or modify your data if it is inaccurate or incomplete through the following form [https://sek.net/wp-content/uploads/2019/12/FORMULARIO-2_DERECHO-DE-RECTIFICACION.docx].

• Right of erasure. This allows you to request the deletion of your data by contacting SEK when it is no longer necessary, when you withdraw your consent, or if it has been unlawfully processed, etc. In that case, SEK will block the data and subsequently delete any copies, links, and replicas of the data. This is provided that this is not prevented by a legal obligation or is necessary for the exercise or defense of legal claims. Exercise your right through the following form [https://sek.net/wp-content/uploads/2019/12/FORMULARIO-3_DERECHO-DE-SUPRESION.docx].

• Right to object. You may request that we not process your data or that we stop doing so when your consent is not required for processing. Please note that under European regulations, you may only object to data processing carried out for legitimate interest; therefore, you must indicate your legitimate interest in not processing your data. Exercise your right through the following form [https://sek.net/wp-content/uploads/2019/12/FORMULARIO-4_DERECHO-DE-OPOSICION.docx].

• Right to Data Portability. You can request SEK to provide your data to another entity, or to yourself, in a structured, commonly used, and machine-readable format. This request may only be made for data processed based on consent or a contract, and provided that the processing is carried out by automated means. Exercise your right through the following form [https://sek.net/wp-content/uploads/2019/12/FORMULARIO-5_DERECHO-DE-PORTABILIDAD.docx].

• Right to Restriction of Processing. You may request that the processing operations that would apply in each case not be applied to your personal data. This right may only be exercised in certain restrictive cases. Exercise your right through the following form [https://sek.net/wp-content/uploads/2019/12/FORMULARIO-6_DERECHO-A-LA-LIMITACION-DEL-TRATAMIENTO.docx].

You can contact us at any time for any further clarification regarding our Policy by contacting our DPO at the following email address: dpo@edusek.net