Indeed individuals providing their personal data to Geneva Business School (hereafter GBS) should be aware who the data controller is, what will be done with their data and their rights.
GBS is committed to complying with the General Data Protection Regulation in transparent and secure ways both as an academic institution and an employer.
In order to do this we will:
- Obtain consent when collecting personal data (opt-in with notice) or rely on appropriate legal grounds for processing personal data
- Inform people what is being done with their data
- Keep personal data safe and secure
- Observe the rights of individuals under the GDPR
- Ensure staff are appropriately trained in managing personal data
- Ensure that records containing personal data are effectively managed and comply with the law in terms of accuracy, simplicity, veracity, relevancy and update.
Who we are
We are Geneva Business School Barcelona Campus, S.L. You can find our contact details at the end of this policy.
We are the Data Controller of your personal data according to this policy.
Whose personal data we collect?
We can use your personal data in these cases:
- You are a student, agent or supplier.
- You use our services.
- You work for one of our agents or suppliers or for someone using our services.
- You are a prospective student or someone to whom we want to show or sell our services and inform about our events and news. In such case, we have collected your data from our website, fair, agent or directly at campus.
Which personal data we collect:
Good records management is essential to comply with the GDPR. GBS will ensure that the personal data kept is:
- Adequate, relevant and not excessive for the purposes it has been collected for
- Accurate and up‐to‐date
- Kept only for as long as is necessary
We can treat personal data about you that we have obtained from you or from another source. This may include the following:
- Your name.
- Your age and sex
- Who you work for and your function or department.
- Your address, phone number, email address or other contact information (this information may refer to your work or to you personally, depending on the nature of our relationship with you or the person for whom you work).
- Your studies background
- Your career and current position
- Your language
Information we obtain from communications with us:
- Information about you that you give us by communicating with us by phone, email, through our website, social networks or otherwise.
- Information you give us or we obtain when you use our website, apply for information or to join our educational institution, provide us with goods or services, ask about a product, place an order, participate in a survey or promotion, contact us to report a problem, or do any of these things on behalf of the person for whom you work.
- Information regarding our relationships with you or the person for whom you work
We can discuss information regarding our relationships with you or the person for whom you work, such as:
- Information regarding transactions with us related to you or the person for whom you work (for example, information about goods or services that we have provided to you or the person for whom you work or that we have obtained from you or the person for whom you work).
- Information about events to which you or the people related to you are invited, and your preferences and personal information to the extent that such information is pertinent to organize and manage these events (for example, dietary requirements).
What personal data do we treat when you use our website?
The information we obtain from you when you use our website includes:
- Technical information, such as the Internet Protocol (IP) address that has been used to connect your computer to the Internet, your logon information, browser type and version, time zone settings, types and versions of the Browser, operating system and platform.
- Information about your visit, such as URL addresses (Uniform Resource Locators), clickstream information (traffic) from and to our website, and through it (including time and date), products you have searched or seen, response times of pages, download errors, duration of visits to certain pages, information about interaction with pages (such as scrolling, clicking and hovering over something), methods used to navigate off the page and any email address you leave to be contacted (more information or newsletter).
In such cases, consent should be obtained using an ‘opt‐in’ with notice by the data subject.
GBS will not assume consent has been given simply by the absence of an objection or in a tacit way.
What is the use of your personal data?
Any data voluntary provided will be incorporated and compiled into an archive of personal data, becoming the responsibility of the data collector, Geneva Business School.
Your personal data may be used for any of these purposes:
- To handle the documentation relevant to students and prospective students (leads) to set the application process
- To inform our students and prospective students (leads) about our courses, programs, events and activities. This can be done by mail or by phone.
- To sign contracts with you or the person you work for:
- To offer services
- To obtain services from suppliers
- To administer our website in accordance with our terms and for internal operations, including problem solving and data analysis, testing, research and statistical and survey-making purposes.
- To improve our website and ensure content is presented in the best way for you and your computer.
- To keep safe and secure our website and other systems.
- To measure or understand the effectiveness of the advertising we provide to you and other people, and to offer relevant advertising.
Who we can share your personal data with?
Your data may be transferred to the third parties listed below, for the following reasons:
- Public administrations: For the fulfillment of the legal obligations GBS is required because of its activity.
- Suppliers who require access to their data for the provision of services that GBS has contracted to those suppliers, and with whom GBS has subscribed the confidentiality contracts and the treatment of personal data necessary and required by law.
- Any member of our group, thus our campus and headquarters.
Should GBS make further personal data transfers, you will be duly informed.
Do we carry out international data transfers?
GBS may contract the services of technological suppliers located in countries that do not have the norms equivalent to the European (“third countries”). These suppliers have signed with GBS the confidentiality and data processing contracts required by the regulations for suppliers located in third countries, applying the guarantees and safeguards necessary to preserve their privacy.
For more information on the guarantees of your privacy, you can contact the data protection delegate as per details at the end of this policy.
What is the legal basis for the treatment of your personal data?
The legal basis for the treatment of your personal data is related to:
- The maintenance of your relationship with GBS as a partner, supplier, current or prospective student in order to comply with the contractual obligations arising from such relationship.
- The treatment of your personal data for sending promotional information about GBS activities, campaigns or initiatives similar to those you have participated in, in accordance to the legitimate interest of our entity.
How long do we treat personal data?
We only treat personal data for the period of time necessary for the purpose or purposes for which they were originally collected. They will then be deleted or archived, except to the extent that we need them to continue by treating them to comply with the legal obligations that correspond to us or other legitimate and legal purposes.
What are your rights?
You have the following rights in relation to the personal data we discuss about you:
- You can request access to the personal data in question (see the section on exercising your right to access your personal data below).
- You may request that the incorrect personal data we treat be rectify.
- Under certain circumstances (usually when you have provided personal data and no longer need to continue by treating them), you may request that we delete the personal data in question.
- If we treat personal data concerning you in accordance with the prior consent you have given for such treatment, you may withdraw your consent at any time, and thereafter the treatment in question will be terminated.
- If you have a complaint about the treatment of your personal data we have done, you can contact us or file a complaint with the Spanish data protection Agency.
How to exercise your rights.
To exercise your rights of access, rectification, cancellation, opposition, restriction and portability established by law you can:
- Send an email to firstname.lastname@example.org
- Write to the address below
Please bear in mind you might be requested further details to confirm your identity before providing the requested information.
Geneva Business School Barcelona Campus, S.L.
Gran Via de les Corts Catalanes, 617 Principal
Email address: email@example.com
Geneva Business School Geneva Campus.
Chemin de la Voie-Creuse, 16,
Phone number +41 22 906 94 94
Email address: firstname.lastname@example.org