Privacy Policy

IURNAT University Institute is committed to protecting your privacy and to developing the technology that gives you the safest experience on the website. This privacy statement applies to the website IURNAT University Institute: University cooperation, and to the student's private area on the following websites (accessible by password only):

By accepting the privacy policies, you consent to the practices described in this statement.

Who is the data controller?

We inform you that any personal data you provide through this website will be processed by IURNAT University Institute as data controller. IURNAT University Institute is the owner of this website, and we make available the identifying details of our company:

  • Company name: IURNAT University Institute
  • Tax registration number: NRT L-715839-S
  • Registered address: Avgda. Francesc Cairat 22, Entresòl AD600 Sant Julià de Lòria - ANDORRA
  • Email: info@iurnat.university

Information to highlight: A company domiciled in Andorra, registered in the Companies Register of the Principality of Andorra, sponsored by Universitas Europaea IMF SLU (eUniv - UNIVERSITAS EUROPEA) created under the Andorran universities act, eUniv may deliver studies leading to state degrees in the four cycles of the Qualifications Framework of the European Higher Education Area (QF-EHEA). It is in this context that IURNAT was born, with the mission of articulating the cooperation mechanisms that may allow a transfer of the accumulated scientific capital to other universities, helping to strengthen eUNIV's links within the international university context. IURNAT's preferred territorial scope of action is the countries of Latin America, and most especially the republics of Ecuador, Colombia and Peru. It is also a collaborating centre for Technology Transfer for Universidad del Pacífico, Instituto Superior Universitario San Isidro and MediTeach of Ecuador.

Data Protection Officer: protegemostusdatos@iurnat.university

What data do we collect?

In compliance with the requirements of Law 29/2021, of 28 October, qualified as Personal Data Protection (hereinafter, "LQDP"), and Decree 391/2022, of 28-9-2022, approving the Regulation implementing the LQDP, users of this website are informed that it will only collect the personal data strictly necessary to fulfil the purposes described below, and that such data will be processed with the utmost respect for the principles established in data protection legislation.

Do we collect cookies?

We inform you that this website only collects maintenance cookies necessary for the website to work properly. For the use of other cookies, we will need your express consent to collect them. You can find out more about what cookies are and how we use them by consulting our Cookie Policy

For what purpose do we process your data?

IURNAT University Institute may process your personal data for the purposes described below, provided that you consent to some or all of them. To that end, the content of the record of processing activities is set out below, with which it is intended to comply with the obligation established in article 30 of the General Data Protection Regulation (EU) 2016/679, article 34 of Law 29/2021, of 28 October, qualified as personal data protection, and article 26 of Decree 391/2022, of 28-9-2022, approving the Regulation implementing Law 29/2021, of 28 October, qualified as personal data protection:

Data ControllerIURNAT University Institute is the owner of this website, a company domiciled at Avgda. Francesc Cairat 22, Entresòl AD600 Sant Julià de Lòria - ANDORRA, registered in the Companies Register of the Principality of Andorra with tax registration number NRT L-715839-S.
info@iurnat.university
Processing ActivityWebsite management
Description of the purpose of the processingWebsite management, statistics.
Data Protection Officerprotegemostusdatos@iurnat.university
Legal basis for the processingLegitimate interest.
Categories of Data SubjectsCategories of identified or identifiable natural persons to whom the personal data being processed correspond:
Interested persons.
Description of data processorsIT company.
Marketing company.
Information provided to data subjectsBy means of information clauses in accordance with article 13 GDPR, intended to obtain their consent.
International data transfersNone envisaged.
Retention periodIndefinite. The data will only be kept for archiving purposes for as long as the applicable document management legislation determines.
Security and organisational security measuresUser identification and authentication systems for access to automated personal data.
Backup systems for automated personal data.
Confidentiality is guaranteed.
Protection systems for the internet connection (firewalls, intrusion detection systems, antivirus software, software updates).
Contracts with personal data processors.
Incident management and logging procedure.
Physical access control systems for personal data.
Recovery procedures for automated personal data.
List of authorised staff according to their role and the personal data they process.
Data ControllerIURNAT University Institute is the owner of this website, a company domiciled at Avgda. Francesc Cairat 22, Entresòl AD600 Sant Julià de Lòria - ANDORRA, registered in the Companies Register of the Principality of Andorra with tax registration number NRT L-715839-S.
info@iurnat.university
Processing ActivityContact and enquiry management
Description of the purpose of the processingEnquiry management, and statistics.
Data Protection Officerprotegemostusdatos@iurnat.university
Legal basis for the processingConsent of the data subject and Law 29/2021, 28 October, qualified as personal data protection.
Categories of Data SubjectsCategories of identified or identifiable natural persons to whom the personal data being processed correspond:
Interested persons.
Categories of personal dataName and surname, email address and telephone number.
Description of data processorsIT company.
Marketing company.
Information provided to data subjectsBy means of information clauses intended to obtain their consent.
International data transfersIf the operation of its services so requires, IURNAT University Institute may have to deal with contacts located outside the country in which you reside or in which services are provided to you or to the organisation or entity you work for.
If the contact person is located outside Andorra or the European Union, the applicable legislation may not be equivalent to that applied in Andorra. In this case, IURNAT University Institute guarantees an adequate level of protection of Personal Data.
Retention periodIndefinite. The data will only be kept for archiving purposes for as long as the applicable document management legislation determines.
Security and organisational security measuresUser identification and authentication systems for access to automated personal data.
Backup systems for automated personal data.
Confidentiality is guaranteed.
Protection systems for the internet connection (firewalls, intrusion detection systems, antivirus software, software updates).
Contracts with personal data processors.
Incident management and logging procedure.
Physical access control systems for personal data.
Recovery procedures for automated personal data.
List of authorised staff according to their role and the personal data they process.
Data ControllerIURNAT University Institute is the owner of this website, a company domiciled at Avgda. Francesc Cairat 22, Entresòl AD600 Sant Julià de Lòria - ANDORRA, registered in the Companies Register of the Principality of Andorra with tax registration number NRT L-715839-S.
info@iurnat.university
Processing ActivityAcademic Management.
Ecuadorian students.
Description of the purpose of the processingWe inform you that the purpose of processing your personal data is the management of your pre-enrolment and/or enrolment and your participation as a student in the courses and training delivered by IURNAT University Institute, as well as the resulting administrative tasks.
Data Protection Officerprotegemostusdatos@iurnat.university
Legal basis for the processingConsent of the data subject and Law 29/2021, 28 October, qualified as personal data protection.
Pursuant to the Fifth Supplement to Official Register 459 of 26 May 2021, approving the Organic Law on Personal Data Protection, the student states that they have been informed by the Controller of IURNAT University Institute of the following information regarding the processing of personal data:
IURNAT University Institute acts as the Controller of the data of which the student is the owner, and may collect, use and process the personal data. The data has been provided by the student.
The legal basis for the processing of your data is your consent, and the performance of pre-contractual measures and/or the performance of a contract, as well as compliance with legal obligations. No profiling is carried out, and no automated assessments and/or decisions are made.
Categories of Data SubjectsCategories of identified or identifiable natural persons to whom the personal data being processed correspond:
Interested persons.
Categories of personal dataAcademic management of the student.
Description of data processorsIT company.
Marketing company.
Academic Entities.
Information provided to data subjectsBy means of information clauses, intended to obtain their consent.
International data transfersWe inform you of the existence of international data transfers to IURNAT University Institute in Andorra, a country with an adequate level of regulatory compliance in data protection matters. Where the necessary security, technical and organisational measures have been established to ensure the confidentiality, integrity and availability of the data. The transfer is necessary for the optimal provision of the service and the performance of a contract to which you are party.
Retention periodIndefinite. The data will only be kept for archiving purposes for as long as the applicable document management legislation determines.
Security and organisational security measuresUser identification and authentication systems for access to automated personal data.
Backup systems for automated personal data.
Confidentiality is guaranteed.
Protection systems for the internet connection (firewalls, intrusion detection systems, antivirus software, software updates).
Contracts with personal data processors.
Incident management and logging procedure.
Physical access control systems for personal data.
Recovery procedures for automated personal data.
List of authorised staff according to their role and the personal data they process.
Data ControllerIURNAT University Institute is the owner of this website, a company domiciled at Avgda. Francesc Cairat 22, Entresòl AD600 Sant Julià de Lòria - ANDORRA, registered in the Companies Register of the Principality of Andorra with tax registration number NRT L-715839-S.
info@iurnat.university
Processing ActivityRestricted student area.
Description of the purpose of the processingStudent assessment.
KeyIdentity. Keystroke pattern recognition is based on measuring the force with which the user types, the key press duration and the interval that elapses between two keystrokes. To this end, JavaScript technology is used to capture the flight and press times of each key. Under no circumstances is the content typed recorded.
FaceIdentity. The facial recognition system makes it possible to identify a person by means of the biometric characteristics of their face. The system uses a set of biometric data that identifies people by measuring strategic points in the unique shape and structure of their faces. For each face detected, the facial features are extracted and the information is stored as numerical codes in a database. It does not keep the actual images.
Data Protection Officerprotegemostusdatos@iurnat.university
Legal basis for the processingConsent of the data subject and Law 29/2021, 28 October, qualified as personal data protection.
Categories of Data SubjectsCategories of identified or identifiable natural persons to whom the personal data being processed correspond:
Interested persons.
Categories of personal dataFacial recognition system. Examinations.
Description of data processorsIT company.
Information provided to data subjectsBy means of information clauses, intended to obtain their consent.
International data transfersWe inform you of the existence of international data transfers to IURNAT University Institute in Andorra, a country with an adequate level of regulatory compliance in data protection matters. The necessary security, technical and organisational measures have been established to ensure the confidentiality, integrity and availability of the data. The transfer is necessary for the optimal provision of the service and the performance of a contract to which you are party.
Retention periodIndefinite. The data will only be kept for archiving purposes for as long as the applicable document management legislation determines.
Security and organisational security measuresUser identification and authentication systems for access to automated personal data.
Backup systems for automated personal data.
Confidentiality is guaranteed.
Protection systems for the internet connection (firewalls, intrusion detection systems, antivirus software, software updates).
Contracts with personal data processors.
Incident management and logging procedure.
Physical access control systems for personal data.
Recovery procedures for automated personal data.
List of authorised staff according to their role and the personal data they process.

How long will my data be kept?

IURNAT University Institute will keep your personal data for as long as necessary and for the purposes described above. Should there be legislation requiring IURNAT University Institute to keep your personal data, IURNAT University Institute will keep your personal data for that additional period, but it will be blocked and processed solely to ensure its preservation. Once these periods have elapsed, the personal data will be deleted or blocked in order to address academic, administrative or jurisdictional liabilities.

What rights do you have?

In compliance with the LQPD, and Decree 391/2022, of 28-9-2022, approving the Regulation implementing the LQDP, Universitas Europaea IMF SLU informs you that you have, at no cost, the rights of access, rectification, restriction of processing, portability, erasure and objection regarding your personal data, as recognised in the aforementioned legislation. To exercise them you must send an email to protegemostusdatos@iurnat.university, to which you must attach a copy of your passport or other national identity document.

In the event of any infringement of your rights, especially where you have not obtained satisfaction in exercising them, you may lodge a complaint with the Andorran Data Protection Agency. You can also obtain more information about the rights available to you by contacting the Andorran Data Protection Agency (APDA) on the WEB:

https://www.apda.ad/drets

Can I withdraw my consent?

The consent given for a specific purpose may be withdrawn at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. In such cases IURNAT University Institute will stop processing the personal data or, where applicable, will stop doing so for that specific purpose, except on compelling legitimate grounds, or for the exercise or defence of possible claims.

What security measures will we use to protect your data?

IURNAT University Institute guarantees that the processing it carries out of your personal data is subject to the strictest duty of confidentiality, and that the necessary measures, both technical and organisational, have been established to guarantee the security of your personal data and to prevent its alteration, misuse, loss, theft and unauthorised processing and/or access.

Possible changes to the privacy policy?

This privacy policy is subject to possible changes in accordance with the legislation applicable at any given time. In any case, any modification of this Privacy Policy will be duly notified to you so that you are informed of the changes made and can give your express consent to those changes.

Last updated: 4 June 2024