Privacy Policy.

PRIVACY POLICY OF THE WEBSITE OF INSTITUTO SUPERIOR DE DERECHO Y ECONOMÍA, S.A.U.

1. Introduction

The purpose of this Policy is to inform, in accordance with applicable regulations, about the processing that will be carried out regarding the personal data collected through the website https://ISDE.es (hereinafter, “ISDE.es”).

Access to and use of ISDE.es and/or its subdomains grants you the status of user (hereinafter, “User(s)”) and implies knowledge and acceptance of all the conditions included in this Privacy Policy.

We are transparent about what we do with your personal data so that you understand the implications of the uses we carry out or the rights you have in relation to your data. We permanently make all the information available to you in this Privacy Policy, which you may consult whenever you deem appropriate.

2. Who is the Data Controller?

Identity: INSTITUTO SUPERIOR DE DERECHO Y ECONOMÍA, S.A.U. (hereinafter “ISDE”)

Tax ID (NIF): A-60847373

Postal address: C/ Serrano, 208 – Madrid 28002

Email: [dpd@isde.es](mailto:dpd@isde.es)

3. How do we collect personal data?

Users are informed that, as a result of using certain functionalities of ISDE.es, it is necessary to provide certain personal data that will be incorporated into files for which ISDE is responsible. Specifically, ISDE.es will record the following information:

• Data from the contact form that the User interested in obtaining commercial information voluntarily provides to ISDE (first name, last name, email address, and telephone number).
• Data from the form that the User interested in receiving information about news, offers, events, and promotions voluntarily provides to ISDE (first name, last name, email address, and telephone number).
• Telephone contacts with persons interested in receiving commercial information who voluntarily call us or whom we call to inform them will be recorded.
• Data from the registration form for events and activities organized by ISDE.
• Through the recording of online events, when attendees activate their camera and allow the recording of their image and, where applicable, identifying data.
• Data from the form that the User interested in requesting information or admission to an academic program voluntarily provides to ISDE (first name, last name, email address, LinkedIn profile, and telephone number).
• Data from the form that the User interested in applying for Alumni admission voluntarily provides to ISDE (first name, last name, email address, position, company, telephone number, program, and year).
• Data from the form that the interested user voluntarily provides to contact and access ISDE’s recruitment processes in the “Job Board” (first name, last name, email address, and telephone number).

Please remember that when we ask you to fill in your personal data to give you access to any functionality or service on the Website, we will mark some fields as mandatory, as they are data we need to provide the service or give you access to the functionality in question. Please note that if you decide not to provide us with this data, you may not be able to complete your registration as a customer/user or enjoy those services or functionalities.

4. For what purpose do we process your data?

In general, the information recorded through ISDE.es that ISDE obtains from Users will be processed:

• To process and respond to information requests made by Users through the forms available on ISDE.es, by email and/or telephone.
• To send information and other commercial communications, when the User has authorized it (event invitations and information from Digitalent Group).
• To manage the registration process for ISDE academic programs.
• To manage the registration and enrollment process for events and activities organized by ISDE.
• To record online events and activities in which you participate (when you have voluntarily activated your camera) and share them with those who were unable to attend.
• To manage the pre-registration process for students, alumni, professors, experts, and other professionals linked to our activity.
• To manage recruitment processes in which the User participates as a candidate.
• ISDE will carry out monitoring and control actions regarding the use of the website in order to prevent and detect any fraudulent use (such as technical manipulations, code modifications, etc.), to avoid, prevent, and/or detect any unauthorized access, alteration, or loss of information relating to third parties other than the user that may generate civil, criminal, and/or administrative liability for ISDE.

5. Are automated decisions and profiling carried out?

We inform you that no automated decisions, including profiling, are carried out.

6. To which recipients will we disclose your data?

ISDE may disclose user data to Universities or other collaborating educational entities involved in training programs and expressly indicated in each case, who will use them for the informed purposes and in accordance with their respective privacy policies.

• If the program taken is the Digital Master Business Administration, user data will be shared with ISDI – Digitalent Group S.L.
• If the program taken is the Master in Sports Management and Legal Skills, user data will be shared with Futbol Club Barcelona.
• If the program taken is the Global Master in Sports Management and Legal Skills, user data will be shared with Futbol Club Barcelona.
• If the program taken is the Executive Master in Sports Law and Management, user data will be shared with Club Estudiantes, S.A.D.
• If the program taken is the Master in Industrial and Intellectual Property, Competition and New Technologies, user data will be shared with Pons Escuela de Negocios S.L.
• If the program taken is the Master in Representation and Management of Artists and Athletes, user data will be shared with Pons Escuela de Negocios S.L.
• If the program taken is the Legal Practice Access Course, user data will be shared with the Illustrious Bar Association of Tarrasa.

In addition, to fulfill the purposes indicated in this Privacy Policy, properly manage the service provided and the personal data of its users, ISDE will rely on third-party service providers who may have access to your personal data and who will process such data in the name and on behalf of ISDE as a result of providing services. ISDE undertakes to enter into the corresponding data processing agreement with them, imposing, among others, the following obligations: to apply appropriate technical and organizational measures; to process personal data for the agreed purposes and only in accordance with ISDE’s documented instructions; and to delete or return the data to ISDE once the provision of services has ended.

7. What is the legal basis for processing?

The legal basis for processing the collected data is:

• We consider that we have your consent to respond to requests or queries you make through the various existing contact channels (telephone, email), as well as to contact you and record calls for quality purposes, informing you of such recording during the first call. We understand that processing this data is also beneficial to you as it allows us to properly assist you and resolve your queries. When your query is related to the exercise of the rights about which we inform you below, or to complaints related to our services, the legal basis for processing your data is compliance with our legal obligations.
• When you contact us, particularly for admission requests related to your pre-registration/registration through ISDE.es, the processing is necessary for the performance of the contract/pre-contract.
• The legal basis for processing your data for the purpose of sending communications about Digitalent Group products, registration and enrollment in events and activities organized by ISDE, among others, is the consent you provide, for example, when you agree to receive information through various means.
• The legal basis for processing your data for registration and enrollment in events and activities organized by ISDE, as well as for recording online events and activities in which you participate (when you have voluntarily activated your camera), is the consent you provide.
• The legal basis for processing the accreditation survey of ISDE training programs is the contractual relationship with the student.
• We consider that we have the candidate’s consent when they have sent their application through ISDE.es or by sending an email to @ISDE.es addresses.
• We consider that we have the alumnus’ consent when they have sent their application to register as ISDE Alumni.
• We rely on ISDE’s legitimate interest in ensuring the security of its website, systems, and information to process data for monitoring and control of website use.

8. How long will we retain your data?

Personal data will be retained by ISDE only for the time necessary according to the purpose for which it was collected.

• In the case of the contact form, information request, admission request, or by sending emails: for the time necessary to properly handle your request.
• In the case of commercial communications, registration for events and activities of Digitalent Group: until the User revokes the consent given for their receipt.
• In the case of commercial communications, registration for events and activities: until the User revokes the consent given for their receipt.
• For the duration of the pre-contractual/contractual relationship maintained with us and, once ended, for the limitation periods of the obligations arising from data processing.
• In the case of a CV: until the User revokes the consent given or one year from its receipt.
• In the case of the job board: until the User revokes the consent given.
• In the case of Alumni: until the User revokes the consent given.

However, after this period, the data may be blocked and retained by ISDE for the handling of possible liabilities arising from the processing and only for the limitation period of such liabilities. After these periods, the personal data will be deleted by ISDE.

9. Cookies

The processing of data collected through cookies and similar technologies will be carried out in accordance with our Cookie Policy.

10. What are your rights when you provide us with your data?

We undertake to respect the confidentiality of your personal data and to guarantee the exercise of your rights. At ISDE we have agreed that you may exercise them free of charge by sending us an email to a single email address dpd@isde.es, simply indicating the reason for your request and the right you wish to exercise. If we consider it necessary to identify you, we may request a copy of a document proving your identity. The User may revoke the consent given for the processing of their data at any time.

In particular, regardless of the purpose or legal basis under which we process your data, the User may, at any time, request confirmation from ISDE as to whether their personal data are being processed by our Company and, if so, access them. Likewise, you may request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Likewise, in certain circumstances, the User may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims. You may also object to the processing of your data in certain circumstances. ISDE will stop processing the data, except for compelling legitimate grounds or the exercise or defense of possible claims. Finally, where appropriate, the User may exercise the right to data portability to obtain the data in electronic format or have them transmitted to another entity.

For these purposes, you may use the following channels, always attaching a photocopy of your ID card or any other document that proves your identity:

• By letter to the address: C/ Serrano, 208 – Madrid 28002
• By email to dpd@isde.es

Finally, you are informed that you may lodge a complaint with the Spanish Data Protection Agency (the competent Supervisory Authority in this matter), especially when you have not obtained satisfaction in the exercise of your rights, by writing to C/ Jorge Juan, number 6, 28001 – Madrid or through the website: https://www.aepd.es

11. Updates and changes to the Privacy Policy

ISDE reserves the right to introduce modifications to this Privacy Policy; therefore, Users are advised to review it periodically. When significant changes occur in this Privacy Policy, they will be communicated to Users for acceptance through notices on ISDE.es or through any other appropriate procedure depending on the circumstances.