Privacy Policy
At IESE Business School, we are committed to ensuring the confidentiality and security of all our users. We take privacy seriously and pledge to collect only the data that is strictly necessary.
This Privacy Policy outlines how we manage personal data for all users who access or contact us through our website or via email. Below, we provide detailed information on our Privacy Policy regarding the personal data we process, answering the following questions:
Who is responsible for processing my data?
IESE Business School, Universidad de Navarra (R-3168001J)
Avenida Pearson, 21
08034 Barcelona (Spain)
Email: gdpr@iese.edu
Data Protection Officer (DPO): dpo@iese.edu
For what purposes are my data processed, and what is the legal basis for processing?
All personal data collected by IESE are necessary for our activities and to provide our services properly. Failure to provide such data may prevent us from contacting you or processing your request. IESE reserves the right not to respond to or process requests that do not include the required personal data.
Providing personal data directly requires a minimum age of 14 years or, where applicable, sufficient legal capacity to enter into a contract. By submitting your data, you guarantee the accuracy of the personal information provided to IESE through the website or email. We may periodically ask you to review and update the personal data we hold about you.
Below, we describe the different purposes for which IESE processes your personal data and the legal basis that justifies such processing:
PARTICIPATION FORM FOR THE RESEARCH PROJECT
Purpose: To formalize your registration and participation in the research project.
Legal Basis: Your explicit consent under Article 6(1)(a) GDPR to register and participate in the activity.
NEWSLETTER SUBSCRIPTION FORM
Purpose: To send communications containing information about the project and related topics.
Legal Basis: Your explicit consent under Article 6(1)(a) GDPR for subscription.
RESPONDING TO INQUIRIES MADE BY THE DATA SUBJECT
Purpose: To address inquiries and provide the requested assistance.
Legal Basis: Your explicit consent under Article 6(1)(a) GDPR before submitting the inquiry.
How long does IESE retain my data?
The retention period for your personal data depends on the duration of your relationship with us and the legally established retention periods.
Specifically, we will retain your data until it is no longer necessary for the indicated purpose, until you withdraw your consent, or until the legally required period for compliance with an obligation requiring further retention has ended.
Once your relationship with us has ended, we will proceed to delete your personal data once all necessary actions have been completed to conclude any obligations arising from that relationship.
Notwithstanding the above, your data will be securely stored and blocked to comply with legal obligations. Technical and organizational measures will be taken to prevent further processing (including access), except where necessary to make the data available to courts, the Public Prosecutor’s Office, or relevant public authorities, particularly data protection authorities, in cases where liability might arise from data processing. This will only be for the statutory limitation period of such liabilities.
What are my rights, and how can I exercise them?
Right of Access
You may request confirmation on whether we are processing your personal data and, if so, access to your data and certain legally required information.
Right to Rectification
You have the right to request the correction of your data if they are inaccurate or incomplete.
Right to Erasure
You can request the deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Right to Restriction of Processing
In certain circumstances, you may request that we restrict the processing of your data. In such cases, except for storage, we may only process your data with your consent, for the establishment, exercise, or defense of legal claims, for the protection of another person’s rights, or for important public interest reasons.
Right to Data Portability
Under certain circumstances, you have the right to receive your personal data and transmit them directly to another data controller.
Right to Object
You can object to the processing of your data. In this case, we will cease processing unless we can demonstrate legitimate overriding reasons that prevail over your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
Other rights recognized by applicable regulations
To exercise your rights, you can send a written request (including proof of identity) to the address above.
Additionally, you can withdraw any consent given to us at any time by contacting us at the address above. The withdrawal of consent does not affect the lawfulness of processing based on prior consent.
Finally, if we do not process your request within one month, you have the right to file a complaint with the Supervisory Authority. For more information about your rights regarding personal data protection, you may contact:
Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD)
Calle Jorge Juan, 6, 28001, Madrid (Spain)
Website: www.aepd.es
Can IESE share my data with third parties?
We may transfer your personal data to third parties only where there is a specific legal obligation to do so. If necessary, we must disclose this information to public authorities to comply with their legal requirements and applicable regulations.
How does IESE ensure the security of my data?
At IESE, we have policies and technical and organizational measures in place to safeguard and protect your personal data against unauthorized access, accidental loss, destruction, damage, and unlawful disclosure or use.
Additionally, we take all reasonable precautions to ensure that IESE employees with access to your data have received adequate training to handle them properly.
Can I update my data?
If any of your personal data changes, please notify us as soon as possible so that we can keep our records updated. Otherwise, we cannot be held responsible for the accuracy of your data.
We are not responsible for the Privacy Policy concerning any personal data you may provide to third parties via links available on our website.
Changes to the Privacy Policy
This Privacy Policy may be modified to adapt to changes on our website or as a result of legislative or jurisprudential developments. Therefore, it is advisable to review it each time you provide us with data through the website or via email.
Further Information & Contact
If you have any questions about how IESE processes your personal data, you may contact us via email at dpo@iese.edu or in writing at the following address:
Avenida Pearson, 21, 08034, Barcelona (Spain).