PRIVACY POLICY
Data Controller
The Data Controller of the personal data collected through this website is INSTITUT NÒRDIC, SL, and can be contacted:
- By postal mail, at the address: Carrer d’Aribau 87, Principal 1ª – 08036 Barcelona
- By email, at the address: info@institutnordic.com
- By phone: 934 519 878
Purpose of Processing
The purpose of the processing of personal data collected is:
- To fulfill the obligations arising from the corresponding contracts with our clients (students).
- To allow responding to information requests received from interested parties.
- Enable subscription to the company’s newsletter or receipt of company news and periodic offers.
- To conduct personnel selection processes.
If the interested party does not provide the required personal data, INSTITUT NÒRDIC may not be able to fulfill the corresponding contractual obligations or assignments, include the interested party in selection processes, or provide the information requested by the interested party.
Data whose processing is necessary for the fulfillment of contractual obligations will be kept while the contractual relationship is in force. After this period, they will be additionally kept for the time necessary to comply with any legal obligations (fiscal, etc.).
Data whose processing is necessary for newsletter subscription will be kept as long as the interested party does not unsubscribe.
Data collected or received for personnel selection processes will be kept for a maximum period of two years, after which they will be considered outdated and, under the principle of data quality, will be deleted.
The same treatment will be given to contact data of individuals without a contractual relationship with INSTITUT NÒRDIC, i.e., those who are not clients or suppliers or are not subscribed to the newsletter.
The data processed by INSTITUT NÒRDIC will not be used for automated decision-making or profiling.
Legitimacy of Processing
The legal basis for the data processing carried out by INSTITUT NÒRDIC is the necessity of such processing for the execution of contracts with our clients or suppliers, in which they are a party.
For personal data collected through the forms contained on this website, the legitimacy of their processing is based on the consent given by the interested parties at the time of submitting the data.
For data received for personnel selection processes, the legitimacy of processing is based both on the legitimate interest of INSTITUT NÒRDIC to conduct personnel selection processes using data voluntarily provided by candidates and on the consent given by them.
Data Recipients
INSTITUT NÒRDIC will not transfer to third parties or transfer to third countries the data obtained through this website or any other data for which it is responsible or in charge of processing, with the possible exception of the newsletter sending service, as indicated below.
Your data may be hosted in the United States with MAILCHIMP for our newsletter mailing service, under the EU-US “Privacy Shield” agreement available at: https://www.privacyshield.gov/participant?id=a2ztOOOOOOOT06hAAG&status=Active
Rights of Interested Parties
The owners of the data processed by INSTITUT NÒRDIC have the following rights:
- Right of access
- Right of rectification
- Right of erasure
- Right of portability
- Right of limitation
- Right of opposition
Additionally, and as provided by data protection legislation, they also have the right to withdraw the consent given for the processing of their data, as well as the right to file a complaint with the Spanish Data Protection Agency (www.agpd.es) if they believe any of the rights listed above have been violated.
How to Exercise Your Rights
The owners of the data processed by INSTITUT NÒRDIC can exercise their rights in any of the following ways:
- By postal mail, at the address: Carrer d’Aribau 87, Ppal. 1ª, 08036 Barcelona
- By email, at the address: info@institutnordic.com
In any case, when exercising their rights, data subjects (regardless of the method they have chosen to exercise them) must provide the necessary information for their correct identification, as well as to enable a response to their request.