Política de privacidad

1. Who is the Controller of your data?

[EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL] (hereinafter, "EAE BUSINESS SCHOOL BARCELONA"), with Tax Identification Number B64273956, will be the controller of the personal data that you provide us by completing any of our forms in paper or electronic format, as well as those obtained as a result of the formalisation of enrolment in any of our courses and the relationship arising from said enrolment. This company is located at Av Diagonal, 662, 08034 Barcelona and can be contacted via the e-mail address [email protected].

You may contact our Data Protection Officer by writing to [email protected] or to Grupo Planeta, Attn.: Data Protection Officer, Avda. Diagonal 662-664, 08034 Barcelona.

2. What sources does your data come from?

The enrolment of a student in a Programme.
Contact requests, including requests for information on Programmes and services provided.
The creation of a Business Profile.
Through the various forms available on the websites.
Your subscription to the newsletter.
The communication of information provided by telephone, post, email or via one of our paper forms;
During forums, master classes, trade fairs, through computerised or paper forms filled in by a potential customer or a student.
The performance of our relationship with you.
Those provided by the companies in which you can do curricular or extracurricular internships.
In the event that the company you work for is the company that has contracted the Programme in which you are enrolled, that company may have provided us with certain personal data relating to you, such as contact and identification details.
If you are a minor, your father, mother or legal guardian may have provided us with certain personal data relating to you, such as identification or contact details.
In relation to the courses higher education, we obtain certain personal data from the Department of Education in order to manage the allocation of places according to the cut-off marks. The categories of such data are: contact data, identification data and academic data.
With regard to obtaining scholarships, grants or funding and in relation to the legal guardian and/or parents, it is possible that the student has provided us with certain personal data, for the purpose of assessing the allocation of such scholarships, grants or funding. The categories of such data are: contact data, identification data and financial data.
Use of our website.

EAE BUSINESS SCHOOL BARCELONA may collect your Data directly or indirectly, through other Grupo Planeta entities.

Your communication of the data marked with an asterisk in the enrolment form is necessary for the contracting of educational services and compliance with legal obligations. Consequently, if you do not provide this information, you will not be able to enrol in the Programme you have selected and, therefore, you will not be able to access our educational services.

3. What categories of personal data do we process?

Identity data: surnames, first names, nationality, telephone number, email address, postal address, date of birth, country of residence, identity document, visa application if applicable;
Professional data: level of education and initial field of training, diplomas obtained, professional experience and addresses of the different employers where this professional experience was acquired, data concerning your skills and interests;
Financial data, including bank details, relating to the payment of tuition fees and scholarship applications, or funding arrangements for continuing education;
Data relating to comments/questions collected during the pre-contractual or contractual relationship;
Connection data: IP address, technical and location information generated in connection with the use of our websites and applications;
Cookies: for more information, please see our Cookie Policy.

3.1. Special categories of personal data

Special categories of personal data (hereinafter, “sensitive data”) are personal data which may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person.

EAE BUSINESS SCHOOL BARCELONA will only process sensitive data in accordance with data protection law and if it has a valid legal basis to do so and in very limited circumstances, for example, to identify particular needs to adapt the learning environment to those needs.

4. For what purpose do we process your personal data? What gives us the right to process it and how long will we store your data?

EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL may process your personal data for the following purposes:

Processing	Purpose	Legal basis	Storage period
Request for information	Manage your request for information on the selected training programme.	Consent	Your data will be erased once this information has been provided and/or after two sessions.
Request for information	Create a profile based on the information provided both at registration and while browsing the website in order to target advertising and improve the quality of the enrolment management and process.	Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy.
Enrolment, participation and successful completion of the Programme	- Manage the aforementioned enrolment and enable you to participate in and successfully complete the Programme. - Facilitate access to the Virtual Campus, as well as to materials, databases and other educational resources made available to students. - Send you information, notifications and communications relevant to the delivery of the Programme. - Conduct an ongoing assessment of the knowledge acquired by You in relation to the Programme. - Enable, where appropriate, your participation in the internship programme linked to the educational activity in question, as well as carry out the evaluation of said programme. - Manage, where appropriate, the delivery of the certificate of achievement or final qualification corresponding to the learning activity in which you have enrolled.	Contractual relationship	We will process your data until the end of the contractual relationship.
	- Send you, by any means, commercial communications about the rest of our courses that are similar to the one you have contracted.	Exception of Article 21 of the Law on Information Society Services and Electronic Commerce.	We will process your data until you object to the processing.
Asynchronous class recording	To the extent that online classes delivered as part of the Programme in which you are enrolled may be recorded for later viewing, we may process your image or voice in the event that You participate in or contribute to any of those classes.	Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy.	We will process your data until the end of the contractual relationship.
Online knowledge assessment	In cases where the assessment of your knowledge requires the use of an anti-fraud verification system, such systems will be used solely and exclusively for this control function and never for any other purpose. Depending on the Programme in which you are enrolled, such anti-fraud verification systems may include one or more of the following: front-facing camera with or without facial recognition (biometric verification), screen activity monitoring, and environment verification using a second camera.	Contractual relationship and legitimate interest in the prevention of academic fraud. Further information on legitimate interest can be found in the relevant section of this privacy policy.	We will process your data until the evaluation reports of each test become final.
Application for scholarships, grants or funding	If you apply for a scholarship, grant or funding to pay for the Programme you are enrolled in, we will process your personal data to process your application and the corresponding scholarship, grant or funding.	Contractual relationship	We will process your data until the end of the contractual relationship.
Alumni Club	Alumni Club, we will process your personal data in order to manage your registration and subsequent participation in the club, in accordance with the corresponding conditions of participation. As part of the club, we may send you information about the activities and benefits available to You as a member, as well as information related to the education sector.	Contractual relationship	We will process your data for as long as you remain a member of this club.
Events	Process your personal data, including your image and voice, which may be captured as a result of your participation in a given event.	Consent	As long as you do not revoke such consent or exercise your rights of erasure and objection to the processing of your data.
Commercial surveys	Send you and manage your participation in commercial surveys, in order to find out your opinion and learning preferences and, based on these, to recommend you to take another of our educational programmes and/or other training centres outside of our company.	Consent	As long as you do not revoke such consent or exercise your rights of erasure and objection to the processing of your data.
Employability surveys	Depending on the Programme in which you are enrolled, we will send you and manage your participation in employability surveys, to understand the placement of graduates in the workforce.	Fulfilment of legal obligations arising from education regulations, namely the law 15/2015, de 21 de julio, de la Agència per a la Qualitat del Sistema Universitari de Catalunya.	We will process your data for as long as necessary to carry out the survey or until you object to the processing or we anonymise your data.
Quality or satisfaction surveys	In accordance with our legitimate interest in understanding the satisfaction of our customers or users with regard to our products and/or services and the support provided in connection with our educational services, we may process your personal data to conduct or send you satisfaction or quality surveys. This also benefits You, as it allows us to gather your feedback, assess the quality of our products, services and/or support provided, identify areas for improvement and strengths, and understand the needs and expectations of our customers.	Legitimate Interest Further information on legitimate interest can be found in the relevant section of this privacy policy.	We will process your data for as long as necessary to carry out the quality or satisfaction survey or until you object to the processing or we anonymise your data.
Draws and Competitions	In the event that you participate in a prize draw or competition organised by EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL, your data will be processed in order to manage your participation and, if you are a winner, to deliver the prize to you and, where appropriate, to manage the publication of your identification data through different media such as the EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL website. For each prize draw or competition in which you participate, we will provide you with more detailed information about the processing of your data.	Contractual relationship arising from the execution of the legal terms and conditions of the prize draw or competition.	We will retain your data until the end of the draw, once the prize has been awarded, and for as long as any liability may arise thereafter.
Sending of commercial communications on our behalf and on behalf of third parties	If you give us your consent, we may send you personalised commercial communications about our own products and/or services, or those of third-party partner companies, which may relate to the following sectors: publishing, education, culture, leisure, collectibles, textiles, private insurance, consumer goods, jewellery, telecommunications, banking and finance, travel, technology, and legal services. In addition, certain social media, applications or third-party websites allow commercial communications or targeted advertising to be sent to specific users. With this information, the social media platform or application verifies whether the user has an account, allowing EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL to carry out what is known as "Custom audience" consisting of users who have agreed to receive commercial communications under this privacy policy and who also have an account on the relevant social media platform. This allows targeted advertising to be shown directly to them on those platforms. This type of activity can be carried out in different platforms, particularly on social media such as Facebook (Custom audience), Twitter (Tailored audiences) or Google (Customer Match).	Consent	We will process your data until you unsubscribe or revoke your consent.
Communication to Grupo Planeta companies for the sending of commercial communications	Furthermore, you may give us your consent through the box provided for this purpose so that we may communicate your personal data to Grupo Planeta companies so that they may send you personalised commercial communications about their own products and/or services. The sectors of the Grupo Planeta companies are the following: publishing, education, culture, leisure, collecting, textiles, private insurance, mass consumption, jewellery, telecommunications, banking and finance, travel, technology and legal activities.	Consent	We will process your data until you unsubscribe or revoke your consent.
Contact Us	We may process your data in the event that you contact us through the different channels established for this purpose to manage doubts or queries and/or complaints.	Consent	Until your query, request and/or complaint is answered.
Fraud prevention and management	When making the payment, we may process your data in order to check for possible fraudulent transactions, which may involve the communication of data to suppliers with expertise in fraud prevention and management, in accordance with what is indicated in the section To which recipients will your data be communicated? Such processing will be carried out on the basis of legitimate interest. It is in [INDICATE GP COMPANY]'s interest to be able to manage and control any potentially fraudulent transactions. The benefit that this generates for [GP COMPANY] is to control financial losses, and to increase the trust that customers place in us and the reputational value of the company, which has a benefit for You as it provides you with greater transparency and trust in [GP COMPANY], preventing, as far as possible, fraudulent transactions in which you may participate and improving your experience as a customer. Further information on legitimate interest can be found in the section "Do we carry out processing based on legitimate interest?" of this privacy policy.	Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy.	Your data will be processed for as long as necessary to prevent and manage possible fraudulent transactions, or until you object to the processing.
Cookies	We may obtain information about you through cookies. This information will be used in order to improve the operation and performance of the website, analyse traffic and use of the website, evaluate navigation, understand and determine the areas of greatest interest and manage the advertising space on our website and the advertising to be displayed on other websites, according to those aspects that we consider may be of interest to you. For further information on cookies, see the Cookies Policy.	Consent (except for strictly necessary Cookies)	They can last up to 2 years (in any case, please check the information provided in our Cookie Manager).
Advertising on social media or third-party services	Certain social media, applications or third-party websites allow commercial communications or targeted advertising to be sent to specific users. This type of activity can be carried out in different platforms, particularly on social media such as Facebook (Custom audience), Twitter (Tailored audiences) or Google (Customer Match). These social media platforms or applications allow the sharing of user data to find or identify what are called “lookalike audiences”, i.e. users who have a similar profile to you on that social media platform or application, but who are not EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL users. This type of activity is often done especially through social media platforms such as Facebook (Lookalike audience), Twitter (Tailored audiences) and Google (Similar Audiences). In this case, since advertising is not delivered directly to our own users, the basic data of all users may be used, including those who have not consented to receive commercial communications. With regard to the data shared with such third parties, we consider it important for our users to know that only their email address or telephone number will be shared, and that it will be transmitted in encrypted form, ensuring the confidentiality and security of their data. The entire process is secured using the tools provided by the respective platform, which enable it to identify the user within its database. Please note that if you do not wish to receive advertising via the social media platform or third-party application, you must restrict it through your user profile settings, in accordance with the privacy policies of each platform. These social media platforms and/or applications will only provide us with anonymised and aggregated statistical data, and we will not be able to re-identify you or infer any new interests, unless you interact with one of our advertisements through the respective platform. We also inform you that we carry out the processing on the basis of legitimate interest. It is in EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL is interest to target advertising messages based on user segments that may be interested in our products and services. The benefit for EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL is savings in advertising costs. The benefit for users is that they do not receive indiscriminate advertising for products and services that are not of interest to them. Further information on legitimate interest can be found in the relevant section of this privacy policy.	Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy.	The data will be processed for as long as you have accepted marketing communications or until you object to the processing.
Video surveillance	Video surveillance to ensure the security of the users and the premises. Personal data processing activities whose main purpose is to capture and/or process images for surveillance purposes.	Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy.	1 month

5. Processing based on compliance with legal obligations

In addition to the processing specified in the table above, EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL will need to process the user's personal data in order to comply with the different legal obligations of an accounting, legal, fiscal and administrative nature that may be required of it at any given time. We refer, principally and among others, to those provided for in the following rules:

- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR").

- Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, which obliges EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL as the entity legally responsible for the processing of your personal data to attend to requests, exercises of rights and claims that are submitted in matters of data protection.

- If we are requested to do so by any Court or Tribunal, the State Security Forces or any other competent Public Authority or Administration, we may also have to provide it with your personal data, as we are legally obliged to do so.

- Royal Legislative Decree 1/2007, of 16 November, approving the revised text of the General Law for the Defence of Consumers and Users and other complementary laws, to deal with requests, exercise of rights and claims presented by you when you are a consumer.

These obligations of a legal nature will be fulfilled by EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL during the periods imposed on us in each case by the legislation in force.

6. To which recipients will your data be disclosed?

Your personal data may be disclosed to:

The companies in which, if applicable, the corresponding curricular internships will be carried out, with this disclosure being necessary in order to be able to carry out the said internships.
To the educational centres outside the centre itself to which it is necessary to transfer your record as a consequence of you choosing to do part of the Programme there, participating in an international training programme, or when you decide to do any other training programme there and request the aforementioned record transfer.
To the bodies or entities that manage the scholarships, grants or funding that, if applicable, may be requested to pay for the Programme in which you are enrolled, with this notification being necessary in order to manage and process the scholarship, grant or funding requested.
To the Department of Education and relevant authorities when we are legally obliged to do so.
To third parties if you have given your consent.
If you are a minor, or if you are of legal age on the basis of your consent, your academic record may be disclosed to your guardians and/or parents.

In the event that you give us your consent, your personal data and, as the case may be, your commercial profile will be disclosed to other Grupo Planeta companies for the purposes indicated in the section “For what purpose do we process your personal data?” of this privacy policy. You can consult the list of Grupo Planeta companies at the following link www.planeta.es. These companies operate in the publishing, education, culture, leisure, collecting, textile, private insurance, consumer goods and jewellery sectors.

We also inform you that, in the event of a legal obligation that requires us to do so, your data will be transferred to the administrations, authorities, public bodies or courts and tribunals indicated by the corresponding legislation.

We also inform you that EAE BUSINESS SCHOOL BARCELONA contracts various services from third-party providers, who may have access to your personal data for the provision of such services in which case such providers will always process the data on our behalf, under a processor agreement, and never for their own interests. Specifically, EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL may contract the provision of services by third-party suppliers that carry out their activity, by way of example, in the following sectors: logistics services, legal consultancy, supplier approval, multidisciplinary professional services companies, maintenance-related companies, technology service providers, IT service providers, instant messaging service providers, infrastructure management and maintenance companies.

7. Do we carry out international data transfers?

In the event that you choose to do part of the Programme in an educational centre located outside the European Economic Area or participate in an international educational programme, your data will be transferred internationally. In such cases, EAE BUSINESS SCHOOL BARCELONA shall adopt appropriate safeguards for the regularisation of such international transfers.

In addition, as noted in the previous point, EAE BUSINESS SCHOOL BARCELONA contracts various services from third-party providers, some of which are located outside the European Union or the European Economic Area. Accordingly, EAE BUSINESS SCHOOL BARCELONA has signed the corresponding standard contractual clauses approved by the European Commission with these providers, along with any additional safeguards required in each case.

8. Do we carry out processing based on legitimate interest?

As indicated in this Privacy Policy, some processing may be based on legitimate interest. In order to assess the legitimate interest, a weighting has been carried out in which we have analysed our own benefits as data controller, as well as the benefits of third parties, and in which we conclude that our legitimate interest in the processing prevails over the interests, rights and freedoms of users and/or third parties.

You may at any time request further information about the weighting of legitimate interest by contacting our Data Protection Officer.

We would also like to take this opportunity to remind you that you have the right to object to processing on the grounds of legitimate interest.

9. How long will we store your data?

All data provided will be processed for the period of time set out in section four of this Privacy Policy ("For what purposes do we process your personal data? What gives us the right to process it and how long will we store your data?). However, once the aforementioned time periods have expired, the data will be kept blocked, thus preventing their processing. The exception will be the availability of the data to judges and courts, the Public Prosecutor's Office or the competent Public Administrations, for the claim of possible liabilities derived from the processing and only for the corresponding statute of limitations period. Once the aforementioned period of time has elapsed, the data will be deleted.

Without prejudice to these time periods, where possible, your data may be kept in an anonymised form for statistical or market research purposes.

10. What security measures do we apply to protect your data?

We take the necessary measures to ensure that your personal data collected through the website is not lost, consulted, modified or disclosed by unauthorised third parties.

To this end, we have put in place technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, alteration or loss, misuse and unauthorised access, alteration or disclosure.

In addition, organisational measures (such as data access authorisation management systems, etc.) help to preserve the confidentiality of your data. For example, access to your personal data is strictly limited to the expressly authorised personnel of EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL and to our partners and subcontractors, who act according to our instructions and in accordance with our contractual provisions and applicable legislation.

11. What are the rights granted by the regulations in force?

Any person has the right to obtain confirmation as to whether or not EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL is processing personal data concerning them.

Furthermore, data subjects have the right to access their personal data, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only store such data for the exercise or defence of legal claims.

At any time, the persons concerned have the right to withdraw any consent they may have given us. This will not prejudice the contractual relationship with EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL or the legality of what we have carried out up to that moment: that is to say, the withdrawal of their consent does not have retroactive effects, but only applies from that moment onwards.

In certain circumstances, on grounds relating to their particular situation, data subjects may object to the processing of their data. EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL will cease to process the data, except on compelling legitimate grounds for the exercise or defence of legal claims.

Data subjects shall also have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller.

In the event that we carry out an automated process, you have the right to challenge the decision that has been taken, to request the personal intervention of one of our analysts and to express your point of view, so that your request is re-evaluated. You may do so by sending an e-mail to EAE BUSINESS SCHOOL BARCELONA.

You may revoke your consent, where applicable, as well as exercise your rights of access, rectification, erasure and portability of your data, of limitation and objection to its processing before EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL by letter addressed to Apartado de Correos 221 de Barcelona or by sending an e-mail to [email protected].

You may also lodge a complaint with the Spanish Data Protection Agency whenever you consider it appropriate, especially if you believe that we have not properly addressed the exercise of your rights.

12. Changes to the Privacy Policy

This policy was last updated on 21/01/2025.

EAE INSTITUCIÓN SUPERIOR DE FORMACIÓN UNIVERSITARIA SL recommends that you review this document whenever you access the website so that you are properly informed about the processing of your personal data and aware of any changes that may occur.