Information about the institutional website

Legal Notice

General conditions of use of the website

Object and acceptance
This website is intended to organize, guide, and provide information on the public higher education service provided by the University of La Laguna through research, teaching, and study, in accordance with Article 1 of Organic Law 6/2001 on Universities.
This legal notice governs the use of the website www.ull.es, equivalent to ull.es, all subdomains thereof (*.ull.es), and the directories included under any of them (hereinafter jointly referred to as the web portal), unless otherwise indicated therein. The services and content that can be obtained through it are subject to the terms of this Legal Notice. It will also apply to the electronic headquarters and its services as long as they do not conflict with its regulatory regulations and, in particular, the Regulations governing electronic administration at the University of La Laguna, approved by the Governing Council on May 24, 2018 (Official Gazette of the University of La Laguna No. 110, June 8).
Browsing its pages grants you the status of user and implies full and unreserved acceptance of each and every provision included in this Legal Notice. The content and design of the portal, including this Legal Notice, may change at any time. We recommend that you note the date of the last revision and consult it upon each visit.
The user undertakes to use the portal correctly in accordance with the law, good faith, public order, traffic practices, and this Legal Notice. The user shall be liable to the University of La Laguna and third parties for any damages that may arise as a result of breach of this obligation.
Any act that violates the legality, rights, or interests of third parties, particularly the right to privacy, data protection, and intellectual property, is expressly prohibited.

Ownership of the website
The website www.ull.es, like all subdomains of ull.es (*.ull.es) belongs to the UNIVERSITY OF LA LAGUNA, with CIF Q3818001D and located at:
Padre Herrera Street s/n
PO Box 456
38200, San Cristobal de La Laguna
Santa Cruz de Tenerife, Spain
Telephone (+34) 922319000

General conditions of access and use
The website and its services are freely accessible and free of charge, although use of certain areas or services requires prior user registration. Only individuals over 16 years of age may provide information through our website, and minors under 16 years of age may not provide such information without the consent of their parents or guardians.
The User guarantees the authenticity and currency of all data provided to the University of La Laguna and will be solely responsible for any false statements.

Rules and prohibitions of use
Access to the website implies the express commitment to make appropriate use of the contents and services offered and not to use them for:
• Disseminate content that is criminal, violent, pornographic, racist, xenophobic, offensive, in support of terrorism, or, in general, contrary to the law or public order.
• Introduce computer viruses into the network or perform actions that could alter, damage, interrupt, or cause errors or damage to electronic documents, data, or the physical and logical systems of the University of La Laguna or third parties; as well as hinder other Users' access to the Website and its services.
• Attempting to access restricted areas of the computer systems of the University of La Laguna or third parties and, where appropriate, extract information.
• Violate intellectual or industrial property rights, as well as violate the confidentiality of information belonging to the University of La Laguna or third parties.
• Impersonate another User, public administrations or a third party.
• Reproduce, copy, distribute, make available or in any other way publicly communicate, transform or modify the Contents, unless you have the authorization of the owner of the corresponding rights or it is legally permitted.
• Collect data for advertising purposes and send advertising of any kind

Privacy Policy and Cookies Policy
The www.ull.es website also collects information from website users that is not directly provided by them through cookies and DARD devices.
The user can consult the Privacy Policy and of use of cookies from the ULL

Intellectual and industrial property
All content on the website, including text, photographs, graphics, images, icons, technology, software, as well as its graphic design and source code, constitutes the property of the University of La Laguna and is protected by the corresponding intellectual and industrial property rights.

The University of La Laguna, as the creator of intellectual content, declares its respect for the intellectual and industrial property rights of third parties.
Although the University of La Laguna encourages the reuse of its content, this option is expressly indicated on each page, or with respect to its graphic or other elements. For any content that does not indicate the possibility of reuse, the distribution, modification, transfer, or public communication of the content, as well as any other exploitation of intellectual property rights that has not been expressly authorized by the University of La Laguna, is prohibited. In the event of non-compliance, the University of La Laguna will take appropriate legal measures.

Contents
The information published on this website is provided solely and exclusively for informational purposes. The University of La Laguna reserves the right to remove or suspend its dissemination, in whole or in part, and to modify the structure and content of this website without prior notice, in order to keep its information up to date.
The University of La Laguna will not be liable for any damages or losses caused by decisions made based on the information provided on this website; nor for any inaccuracies, omissions, or errors contained therein; nor for any problems arising from the use of this website or any externally linked website; nor for any damages and/or losses arising from the use of the information contained therein.
The University of La Laguna has no control over the pages linked from its portal and, therefore, assumes no responsibility for the content of websites outside the University's own domain, nor does it guarantee their technical availability, reliability, veracity, or validity.
The University of La Laguna reserves the right to modify this legal notice unilaterally and without prior notice under the terms and conditions it deems appropriate, with the sole obligation to inform the user of the modifications made through www.ull.es

Applicable law and competent courts
This website is subject to the provisions of Spanish legislation and applicable European regulations.
Any dispute arising out of or related to the use of the website shall be subject to the jurisdiction of the Spanish courts and tribunals of the province of Santa Cruz de Tenerife.

Cookie Policy

This cookie policy applies to the UNIVERSITY OF LA LAGUNA (hereinafter, ULL) website www.ull.es and all websites hosted under our subdomains.
Your acceptance implies that the user has been clearly and fully informed about the use of data storage and retrieval devices (cookies) and that the ULL has the user's consent for their use under the terms of Article 22 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.

What are Cookies?
A cookie is a text file that a web server can save on the hard drive of the computer from which you browse the website. Websites typically use cookies to obtain statistical information about their web pages and analyze user behavior to facilitate navigation.

Cookies used on our website
www.ull.es uses the following types of cookies on the website:

Technical cookies. They allow the user to navigate the Web and use various functionalities.

Personalization cookies. They allow us to know the user's preferences: language, browser, etc., to facilitate navigation.

Analytical cookiesWe use Google Analytics cookies to quantify the number of users visiting the website. These cookies allow us to measure and analyze how users navigate the website. This information allows the ULL to continually improve its services and the website user experience.
For more information, you can consult the Google Analytics privacy page.

Advertising and behavioral advertising cookiesThese cookies are used to display ads relevant to users based on their use of our website. They also limit the number of times each user sees an ad and help the ULL measure the effectiveness of its advertising campaigns. By browsing the website, you agree that we may install these types of cookies on your device and perform queries when you visit the ULL website in the future.

Third-party cookiesThese are cookies sent to the user's terminal equipment, either from a computer or domain managed by the ULL or a third party. However, the information collected from the cookies is managed by a third party other than the ULL.

List of Cookies installed on our domain www.ull.es and on all subdomains of the web portal

Cookie name	Guy	Description	Own/third parties	Duration
JSESSIONID	Technique
PHPSESSID	Technique	It is used by the PHP encryption language to allow session variables to be saved on the web server. It is essential for the website to function.	Own	Session
YII_CSRF_TOKEN	Technique	It is used to ensure that user data can only be modified by authorized users.	Own	Session
style			Own	1 day
_ga	Analytics	Used to distinguish users.	Third Party GOOGLE Analytics	Persistent 2 years
_gid	Analytics	Used to distinguish users.	Third Party GOOGLE Analytics	Persistent 24 hours
_gat	Analytics	Used to limit the percentage of requests.	Third Party GOOGLE Analytics	Session 1 minute
_utma	Analytics	It is used to distinguish the user session	Third Party GOOGLE Analytics	2 years
_utmbt	Analytics	It is used to determine new sessions and/or visits.	Third Party GOOGLE Analytics	30 minutes
_utmc	Analytics	It is used to indicate whether the session is open or closed. It is no longer commonly used.	Third Party GOOGLE Analytics	Session
_utmz	Analytics	It is used to calculate traffic from search engines (organic and PPC), display advertising campaigns, and navigation within the same website (internal links).	Third Party GOOGLE Analytics	6 months
_utmv	Analytics	It is used to store data obtained from records, so that they can later be segmented demographically.	Third Party GOOGLE Analytics	2 years

Use of Cookies
Our website is a live website, and new designs or third-party services may be added. This may occasionally modify cookie settings, and cookies not detailed in this policy may appear.
This website, like most websites, includes features provided by third parties. Our site does not control the cookies used by these third parties. For more information about cookies from social networks or other third-party websites, we recommend reviewing their own cookie policies.
Users can configure their browser to accept or reject the cookies they receive, or to notify them when a server wants to save a cookie. Since each browser uses different settings, search for the word "cookie" in your browser's Help menu and follow the instructions.
Disabling some technical cookies does not guarantee the proper functioning of some of the website's features. Users may opt out of having Google Analytics "analytical and advertising" cookies stored on their device using the opt-out systems provided by Google Analytics.
The University of La Laguna website uses its own and third-party cookies for the sole purpose of analysis and performance improvement.

Links to other websites
If you choose to leave our website via links to other websites not belonging to our entity, we are not responsible for the privacy policies of those websites or for the cookies they may store on the user's computer.

Update to our cookie policy
This policy is reviewed periodically to ensure its validity, and may therefore be modified. We recommend that you visit this page regularly, where we will inform you of any updates.

Confidentiality and privacy notice in emails

Messages sent by members of the University of La Laguna may contain confidential or legally protected information. Access to their content by persons other than the intended recipients is unauthorized. Furthermore, unauthorized processing of personal data may constitute a violation of current Data Protection regulations.

If you receive any message in error from members of the University of La Laguna, please be advised that unauthorized use, disclosure, or reproduction of its contents is prohibited under current law. In such cases, you must notify the sender and immediately destroy the message, along with any attached documents.

By using Google services you agree to their use. privacy policy and terms of service.

Please consider the environment before printing received emails.

Messages sent by members of the University of La Laguna may contain confidential or legally protected information. Access to its contents by persons other than the recipients is not authorized. Furthermore, the unauthorized treatment of personal data may contravene current legislation governing Data Protection.

If you receive a message by mistake from any members of the University of La Laguna, we inform you that the use, disclosure or reproduction of its content without prior authorization is strictly prohibited under current legislation. In such a case, you must notify the sender immediately while also ensuring the immediate destruction of the email, as well as any document attached to it.

By using Google services, you accept their Privacy Policy and Terms of Service.

Please respect our planet and the environment by thinking twice before printing any emails you receive.

Protection of personal data

The University of La Laguna complies with the obligations of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and the free circulation of such data, and other regulations in force in this area, regarding the security and privacy of personal data.
The University of La Laguna ensures that the holders of personal data are informed about the correct use in data processing activities, in addition to guaranteeing the recognized rights, through the procedure established to facilitate its exercise.
The data you provide to us when browsing our website, using the contact or processing forms, using the Electronic Office, or sending emails will be processed by the University of La Laguna. This processing is recorded in the Register of Processing Activities managed by the University of La Laguna in accordance with the provisions of the GDPR.

Information on Personal Data Protection

Data controller
Identity: UNIVERSITY OF LA LAGUNA – Q3818001D
Address: Calle Padre Herrera S/n (PO Box 456) 38200 – La Laguna
Telephone: 922319000
Web: www.ull.es

Data Protection Officer (DPO)

SOTHIS INFORMATION TECHNOLOGIES, SL (NIF B-98086598)

DPD Contact: dpd@ull.es
You can contact our DPO for any questions regarding your rights regarding your own data or any other matter related to the processing of personal data by the ULL.

Purpose of personal data processing
By accepting our privacy policy through our online forms and procedures available on this website, you authorize us to use and process the personal data you provide for various purposes:

Provide the service you request through the various forms available on our website.
Process payment for services when appropriate, in which case we will ask for your financial information for this purpose.
Manage the relationship with the University of La Laguna.
Manage your administrative process or procedure through the electronic office.
Resolve any questions raised by the user, by any appropriate means.
Send you email communications regarding ULL services (updates, support, maintenance, necessary actions, questions, etc.).
Send you communications about activities, events, and training offered by the University of La Laguna.
Conduct statistics and preserve information for historical and scientific purposes, always based on anonymized information.

You can consult the purpose of each treatment in the ULL Treatment Registry.

Legal basis of the treatments
The legitimacy for the processing of your data by the UNIVERSITY OF LA LAGUNA is based on:

The execution of a pre-contract or a contract signed between you and the University of La Laguna for the provision of a service and for the management of your contractual relationship with the University of La Laguna, and to register you as a registered user when necessary, which cannot be done otherwise.
Data processing is carried out in compliance with legal obligations applicable to the data controller, within the framework of an academic and/or employment relationship established with the ULL.
Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Express consent, in the case of analytical information collected through website cookies.
The ULL has a legitimate interest in sending information and communications about activities and events, as well as training courses complementary to its university outreach function.

Origin of the data
The University of La Laguna processes the data of:

Data of users who contact the ULL through any means of communication available for this purpose.
Users who fill out any of the available forms
Data of users who register on our platforms.
Data from users who browse our website: Data provided by cookies and Google Analytics.
Data of users who carry out procedures on our electronic headquarters.

The User guarantees the authenticity and currency of all data communicated to the UNIVERSITY OF LA LAGUNA, and will be solely responsible for any false or inaccurate statements made.

The personal data processed by the UNIVERSITY OF LA LAGUNA may be mandatory or voluntary. Voluntary information is information that the user is not required to provide to contact us. Fields marked with an asterisk (*) or the word "required" on our forms are mandatory. Failure to do so will make it impossible to provide the service or respond to your request.

If you provide us with third-party data, you declare that you have their consent and undertake to provide them with the information provided in this clause, exempting the UNIVERSITY OF LA LAGUNA from any obligation. However, the UNIVERSITY OF LA LAGUNA may carry out verifications to ensure that the third party has been informed, adopting the due diligence measures established in the data protection regulations.

Data retention

The data will be retained for the time necessary to achieve the stated purposes and subsequently to determine any potential liabilities that may arise from said purpose and the processing of the data. In this regard, for as long as the student-university relationship remains active and, subsequently, for the legally applicable periods.

The data required for the processes associated with the review and challenge of assessment tests will be retained in accordance with the time periods established in the University regulations governing the academic system and student assessment, and, if necessary, until the complete completion of any administrative or judicial proceedings related to said assessment.

Likewise, the University of La Laguna will retain the student's contact information after completing their studies based on its legitimate interest in preserving the university community and including them in events and activities organized there, as well as participating in research projects and employability studies. In any case, the data subject may object to such processing and/or request the deletion of their contact information.

Data communication
The data may be transferred to other administrations and public bodies for the exercise of their respective powers and compatible with the stated purposes. They may also be communicated to banking institutions for the management of payments and collections, and to public and private bodies pursuant to collaboration agreements or contracts, in accordance with current data protection legislation.

Exercise of rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability of your personal data, and, where applicable, not to be subject to decisions based solely on automated processing of your data, before the University of La Laguna through the electronic procedure available on the ULL's electronic headquarters at the following link: Procedure for exercising rights.

We also inform you that you can contact our DPO to resolve any questions you may have via the email address provided in this policy. If you do not agree with the processing of your data, you may file a complaint with the Spanish Data Protection Agency.

Record of processing activities

Processing Activity	Sports activities and competitions.
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or for the application, at the request of the latter, of pre-contractual measures. GDPR: 6.1.e) Processing necessary for compliance with a mission carried out in the public interest or in the exercise of public powers conferred on the data controller.
Purpose	Management of ULL competitions.
Interested groups	Members of the university community: students, administrative staff, teaching staff, teachers, alumni, family members, and staff from other organizations with an agreement with the ULL who participate in sports activities and competitions.
Data Categories	Name and surname, ID/NIF, address, telephone number. Academic and professional data Personal characteristics data: Date of birth, age, sex Competition data: modality, classification
Assignments or communications	Organizing entities of sports competitions
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.
Technical and organizational security measures	The security measures implemented correspond to those provided for in Royal Decree 311/2022, of May 3, which regulates the National Security Framework and are defined based on the risk analysis conducted.
Rights	Interested parties may exercise their rights of access, rectification, deletion and limitation of processing, and the portability of their personal data, to oppose their processing and, where appropriate, not to be subject to decisions based solely on the automated processing of their data, before the University of La Laguna through the electronic procedure enabled for this purpose and available on the Electronic Headquarters of the ULL at the following link: https://sede.ull.es/ecivilis-site/catalog/showProcedure/230

Processing Activity	Accommodation.
Legal Basis	GDPR: 6.1.b) Processing necessary for the execution of a contract to which the interested party is a party or for the application, at the request of the latter, of pre-contractual measures. GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. GDPR: 6.1.e) Processing necessary for compliance with a mission carried out in the public interest or in the exercise of public powers conferred on the data controller
Purpose	Management of the University's colleges and accommodations.
Interested groups	Students, family members, legal representatives, users, applicants, beneficiaries.
Data Categories	DNI/NIF SS/MUTUALITY No. Name and surname Address Phone Personal characteristics data: age, sex, Family, academic and professional data Economic, financial and insurance data
Assignments or communications	No data communications are planned.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Research support: grants, agreements and research contracts.
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities. Law 14/2011, of June 1, on Science, Technology and Innovation.
Purpose	Support for research. Research project management.
Interested groups	Teaching and Research Staff Researchers Collaborators
Data Categories	Name and surname, DNI/NIF Address, Email, Telephone SS/Mutual Society No. Signature Personal characteristics data Academic and professional data Employment, economic, financial and insurance details.
Assignments or communications	Public administrations and external entities for collaboration in research. Banks and banking institutions. Organizations required by law.
International transfers	Collaborating entities abroad, provided that a collaboration agreement has been signed with them.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Access Control
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract.
Purpose	Management of access platforms to the facilities of the University of La Laguna
Interested groups	University community (students, PAS and PDI) Other people with access to ULL buildings and parking
Data Categories	Name and surname, ID/NIF, address, telephone number, access card, image (photograph) Data relating to access to the facilities
Assignments or communications	Those provided for compliance with legal obligations, where applicable: Security forces and bodies, Judicial bodies
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Development of a neurorehabilitation system based on cortical stimulation using virtual limb control by eye tracking
Legal Basis	– article 6.1.a) GDPR: Consent of the person interested in participating in the investigation. – Art. 6.1.e) GDPR: processing necessary for the performance of a task carried out in the public interest or in the exercise of public powers conferred on the data controller within the framework of the functions and powers assigned to the University of La Laguna by article 1 of Organic Law 6/2001, of 21 December, from Universities
Purpose	Conducting research projects focused on specific educational support needs arising from high intellectual abilities, attention deficit hyperactivity disorder (ADHD), and specific learning difficulties.
Interested categories	Research subjectsLegal representatives
Data Categories	– Identification data: email, telephone number, ID number, first and last name.– Special data categories: Health.
Assignments or communications	The transfer of data to third parties is not planned.
International transfers	No international transfers of data are planned.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.
Storage period	The data will be used throughout the investigation, until, where appropriate, a report is issued or the results are published, and for any additional periods necessary to guarantee the rights of the participants. The information will be duly locked for any additional periods necessary to ensure the statute of limitations for any potential legal liabilities.
Right	Users may request access, rectification, cancellation, opposition, limitation of processing, forgetting and portability, and where appropriate, revocation of consent through the electronic address dpd@ull.es, the electronic headquarters or the postal address of the University: University of La Laguna. CIF No. Q3818001DCalle Padre Herrera S/n (Postal Box 456) 38200 – La Laguna A copy of the DNI or equivalent identification document (passport, NIE, etc.) that proves the identity of the interested party must be attached, as well as, where applicable, the representation held or the accreditation of the purpose of the request.

Processing Activity	Online sports training and classes
Legal Basis	Art. 6.1.b) GDPR: processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the request of the data subject, prior to entering into a contract. Art. 6.1.e) GDPR: processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller within the framework of the functions and powers conferred on the University of La Laguna by Articles 1, 2 and 90 of Organic Law 6/2001, of 21 December, on Universities.
Purpose	Provision of online sports services: virtual training and online sports classes.
Interested groups	Users assigned to the ULL Sports Service: Members of the university community: students, administrative staff, teaching and research staff, and teachers. Other employees. Alumni associated with ULL Alumni. ULL Sports Service staff dedicated to providing sports training and classes.
Data Categories	Identifying data: email, telephone number, NIF, first and last name, and user ID and password.
Assignments or communications	Interested in the file. Judicial bodies. State security forces and bodies.
International transfers	No international transfers of data are planned.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.
Storage period	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.

Processing Activity	Institutional Evaluation and Quality
Responsible	University of La LagunaCIF: Q-3818001DAddress: C/Padre Herrera s/n. P.O. Box 456, 38200. La Laguna, S/C de Tenerife. Email: secretaria.general@ull.es Data Protection Officer: dpd@ull.es
Purpose	Request, collect, and provide information on all data and evidence necessary to respond to the ULL's institutional evaluation and quality processes.
Legitimation and legal basis of the treatment	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the request of the data subject, prior to entering into a contract. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Categories of interested parties	Members of the university community: students, administrative staff, teaching staff, teachers, graduates, employers (including external internship tutors), external evaluators, quality assurance agencies, external users and ULL suppliers.
Categories of personal data processed	Identification data: nationality, sex, age, place of residence. Academic and professional data: qualifications, academic history, internships, professional, academic and research experience, training. Occupational data: job category, body, scale, place of work, work history. Economic and financial data: income and earnings, scholarships, grants. Other data categories: data and documentation required in the evaluation processes, opinions and assessments on relevant aspects under study.
Recipients of the data.	Public Administrations with jurisdiction in the matter. Other Universities. Quality Assurance Agencies and External Evaluators. Assessment and accreditation bodies.
International Transfers	Not foreseen.
Data retention period	They will be retained for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Files and Inspection Activity
Legal Basis	GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities.
Purpose	Quality management, inspection, and complaints
Interested groups	Complainants, teachers, participants in the inspection file, affected third parties.
Data Categories	Name and surname, ID/NIF, Address, Email, Academic and professional data Data relating to the complaint and the inspection file
Assignments or communications	Interested in the file. Judicial bodies. State security forces and bodies.
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Academic Management of Students.
Legitimation and Legal Basis for processing	The processing is necessary for the execution of a contract (article 6.1.a) GDPR), as well as compliance with a legal obligation and involves the exercise of official powers conferred on the controller (art. 6.1.e) GDPR) necessary for the performance of the public service purpose of higher education in accordance with the functions of the University regulated by Organic Law 6/2001, of December 21, on Universities, as amended by Organic Law 4/2007, of April 12, which amends Organic Law 6/2001, of December 21, on Universities.
Purpose	Student management and academic life for ULL students: access, registration, records, and academic records.
Interested groups	Students, legal representatives, users, applicants.
Data Categories	– Identification data: Name, surname, email address, telephone number, ID, signature, image, Social Security number – Personal characteristics data: age, sex, place and date of birth, nationality. – Academic and professional information: previous academic record, qualifications.
Recipients of the data	– Health services or insurance in case of a medical emergency or unexpected need for health care. Pre-registration: – Publication on official websites and bulletin boards. At the request of authorities: – The Spanish Data Protection Agency is conducting inspection processes in accordance with Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights. – Judges and courts in the terms defined by procedural legislation. In these cases, before making the data available to third parties, the University ensures that these authorities request and access the data in accordance with the law.
International transfers	Not foreseen.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.
Storage period	– Pre-registration data will be kept for the legally established period. provided for the filing of appeals in accordance with administrative legislation or applicable procedural law. – The information will be kept duly blocked for additional periods necessary for the prescription of potential legal liabilities. – The information incorporated into the academic record will be kept indefinitely for the accreditation of completed training.

Processing Activity	Management of Student Assistance Aid
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Purpose	Management of assistance aid requested by students within the framework of the ULL's assistance policy
Interested groups	Students, family members, legal representatives, beneficiaries.
Data Categories	Name and surname, DNI/NIF, Address, Email, Telephone, SS/Mutual Society No. Personal characteristics data: Age, date of birth, nationality, sex Academic and professional data Family and economic data
Assignments or communications	Public Administration with jurisdiction in the matter
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Consent management for participation in research projects
Responsible	University of La LagunaCIF: Q-3818001DAddress: Government Pavilion, Padre Herrera Street, s/n. P.O. Box 456, 38200, San Cristóbal de La Laguna, Tenerife, SpainEmail: secretaria.general@ull.esData Protection Officer: dpd@ull.es
Legal Basis	The data will be processed under:– Your consent (article 6.1.a) GDPR), to participate in the Project, for the processing of your image and the publication of the results, where appropriate, in relation to the biographical references that may be foreseen within the scope of a specific Project.– Compliance with a mission carried out in the public interest or in the exercise of public powers conferred on the data controller (art. 6.1.e) GDPR) in accordance with the powers attributed to the University by virtue of articles 1 and 39 and following of Organic Law 6/2001, of December 21, on Universities.
Purpose	Management, filing, and registration of the consent document granted by participants in research projects.
Interested groups	People participating in research projects as source subjects. Legal representatives.
Data Categories	– Name and surname– ID– Signature– Image
Data Recipients	They are not prevented.
International transfers	No international transfers are planned.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.
Storage period	The data will be retained for the duration of the specific project for which it was collected. Furthermore, the information will be duly blocked for any additional periods necessary to ensure the expiration of any legal liability.
Rights	Interested parties may exercise their rights of access, rectification, deletion and restriction of processing, as well as the portability of their personal data, to oppose their processing and, where appropriate, not to be subject to decisions based solely on the automated processing of their data, before the University of La Laguna through the electronic procedure enabled for this purpose and available on the ULL Electronic Office at the following link: https://sede.ull.es/ecivilis-site/catalog/showProcedure/230

Processing Activity	Public Procurement Management of the ULL
Legal Basis	GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Law 9/2017, of November 8, on Public Sector Contracts. Law 47/2003, of November 26, General Budget. Law 58/2003, of December 17, General Tax Law. Law 40/2005, of October 1, on the Legal Regime of the Public Sector.
Purpose	Management of contracts with suppliers and contractors. Third party registration
Interested groups	Suppliers, service providers, bidders, contact persons, legal representatives.
Data Categories	Identification data: Name, surname, telephone number, postal and email address, ID/NIF, signature. Economic, financial and insurance data. Banking and business details.
Assignments or communications	Hiring platform Newspapers and Official Gazettes Audit Office, Tax Agency and legally mandated bodies.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Management of the University for Seniors
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract.
Purpose	Management of students at the university for seniors
Interested groups	Students, teachers and lecturers
Data Categories	Identification data: Name, surname, telephone number, postal and email address, ID/NIF, SS/Mutual Society number, signature Personal characteristics data: Place and date of birth, age, sex Financial data: bank account
Assignments or communications	No data communications are planned.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Sports Facility Management
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Purpose	Management of the ULL sports facilities
Interested groups	Members of the university community (students, PAS and PDI), alumni, family members Staff from other entities with an agreement with the ULL
Data Categories	Name and surname, ID/NIF, address, telephone number, email, personal registration number Academic and professional data Data of the activity in which you are registered, number of hours, data of the reserved facilities Bank details
Assignments or communications	No data communications are planned.
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Management of University Extension Courses and Workshops
Legal Basis	GDPR: 6.1.a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract.
Purpose	Management of university extension courses. Sending course information
Interested groups	Applicants, attendees and speakers
Data Categories	Identification data: Name, surname, telephone number, postal and electronic address, DNI/NIF, SS/Mutuality number, signature, Personal characteristics data: Place and date of birth, age, sex Financial data: bank account
Assignments or communications	No data communications are planned.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Management of Groups and Spaces for Culture
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities.
Purpose	Management of the ULL's cultural dissemination functions
Interested groups	Contact persons, legal representatives, participants
Data Categories	Name, surname, postal address, telephone number, email, ID/NIF, commercial information
Assignments or communications	No data communications are planned.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Management of Personnel Selection Processes
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities. Law 14/2011, of June 1, on Science, Technology and Innovation. Royal Legislative Decree 5/2015, of October 30, approving the Basic Law of Public Employees. Royal Legislative Decree 2/2015, of October 23, approving the revised text of the Workers' Statute Law.
Purpose	Staff selection and job placement through public calls
Interested groups	Candidates submitted for job placement procedures.
Data Categories	Name and surname, DNI/CIF/Identification document, personnel registration number, address, signature and telephone number. Special categories of data: health data (disabilities). Personal characteristics data: Sex, marital status, nationality, age, date and place of birth and family data. Academic and professional data: Qualifications, training and professional experience. Detailed data on employment and administrative career.
Assignments or communications	To the Personnel Registry. General Directorate of Civil Service. Corresponding Official Gazette (BOE, BOC) Users of the website where the selection process is published
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. (For the duration of the ULL selection process) and in the event that the candidate joins the university for the time necessary for the maintaining the relationship with the same. The provisions of the archives and documentation regulations will apply.

Processing Activity	Human Resources Management
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities. Law 14/2011, of June 1, on Science, Technology and Innovation. Law 30/1984, of August 2, on measures for the reform of the Civil Service. Royal Legislative Decree 5/2015, of October 30, approving the Basic Law of Public Employees. Royal Legislative Decree 2/2015, of October 23, approving the revised text of the Workers' Statute Law.
Purpose	Management of ULL staff, both civil servants and employees: personnel and employment records, incompatibilities, promotion, disciplinary regime, training, social action, etc. Compensation system and issuance of staff payroll. Tax withholdings. Withholdings due to judgment. Social Security and Mutual Fund Contributions Management of absences due to illness, accident, leave or permits. Union affiliations Economic management of social action Obtaining statistical or monographic studies
Interested groups	ULL Staff
Data Categories	Specially protected data: Union membership (for the sole purpose of paying dues and as a union representative, where applicable) and health data Violation data: Administrative violations Identification data: NIF, SS/mutual number, name and surname and postal/email address, telephone number, Personal Registration Number, signature Personal characteristics data: Marital status data, family data, date and place of birth, age, sex and nationality Data on social and/or family circumstances: Licenses, permits, authorizations, social action. Academic and professional data: training, qualifications and professional experience, incompatibilities. Employment details data: Body/scale, category/grade, job title, non-economic payroll data and employee history Economic and financial data: Banking data, payroll data, tax deductions/tax data, judicial withholdings (if applicable).
Assignments or communications	Personnel Registry. General Directorate of Public Service. National Social Security Institute and mutual funds for civil servants. Managing and depository entity of the ULL Pension Plan General Treasury of Social Security. General Directorate of Personnel Costs and Public Pensions. State Tax Administration Agency. Court of Auditors. Financial institutions. Ministry with jurisdiction over Universities for statistical studies
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply. The economic data of this processing activity will be kept in accordance with the provisions of Law 58/2003, of December 17, General Tax Law.

Processing Activity	Management of the PAED (Program to Assist Students with Special Needs)
Legal Basis	GDPR: 6.1.a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract. GDPR: 9.2h) Processing is necessary for the purposes of preventive or occupational medicine, assessment of an employee's ability to work, medical diagnosis, provision of health-related or social care or treatment, or management of health-related and social care systems and services, on the basis of Union or Member State law...
Purpose	Management of resources and assistance for students with special needs
Interested groups	Students enrolled at the ULL, applicants, beneficiaries, legal representatives
Data Categories	Specially protected data: Health data Identification data: Name, surname, telephone number, postal and email address Personal characteristics data: Place and date of birth, age, sex, family data Academic and professional data: Training and qualifications
Assignments or communications	To the specialized company that manages the program, with the express consent of the applicant.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Economic, Accounting and Financial Management
Legal Basis	GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities. Law 9/2017, of November 8, on Public Sector Contracts. Law 47/2003, of November 26, General Budget. Law 58/2003, of December 17, General Tax Law. Law 38/2003, of November 17, General Subsidies. Law 40/2005, of October 1, on the Legal Regime of the Public Sector
Purpose	Processing of expenditure and income files derived from the execution of the ULL budget
Interested groups	ULL civil servants and staff, suppliers, grant recipients, and bidders.
Data Categories	Identification data: Name, surname, telephone number, postal and email address, ID/NIF, signature Employment details: job title. Economic, financial and insurance data Bank details.
Assignments or communications	Financial institutions. National Social Security Institute and mutual funds for civil servants. State Tax Administration Agency. General Intervention of the State Administration.
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Management and control of the Library.
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract.
Purpose	User data for the management, control, and lending of funds from the ULL library.
Interested groups	Library users: PAS, PDI, students, borrowers and applicants.
Data Categories	Name and surname, DNI/NIF/Identification document, University card number, address, telephone number. Academic and professional data Employment Details Publication data, book on loan
Assignments or communications	No data communications are planned.
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	Service and loan user data will be retained in the system indefinitely unless the interested party requests its deletion.

Processing Activity	Tropical Disease Research
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract.
Purpose	Epidemiological research and similar activities.
Interested groups	Patients
Data Categories	Name and surname, DNI/NIF Address, Email, Telephone, SS/Mutual Society No. Personal characteristics: age, sex Health data
Assignments or communications	Public administration with jurisdiction in the matter
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Mobility
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities.
Purpose	Management of international mobility programs for study and training, both within and outside the EU, for students, teaching and research staff, and administrative and administrative staff.
Interested groups	Students, teachers and PAS
Data Categories	Identification data: Name, surname, telephone number, postal and email address, ID/NIF, Social Security/Mutual Society number, signature, residence permit Personal characteristics data: Place and date of birth, age, sex Academic and professional data: Training and qualifications Stay data: history of stays, university, host company or organization and destination Economic, banking and insurance data
Assignments or communications	EU. EU Moviliy Tool Platform Destination universities Destination companies
International transfers	Foreign entities or universities with which an agreement has been signed
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Teaching Organization Plan
Legal Basis	The execution of a contract to which the data subject is a party or for the application, at the request of the data subject, of pre-contractual measures (art. 6.1.b) GDPR). – The fulfillment of a mission of public interest conferred by Organic Law 6/2001, of December 21, on Universities Parties ((art. 6.1.e) GDPR), consisting of the organization of teaching activities.
Purpose	Development and management of the Teaching Organization Plan (POD)
Interested groups	Teaching and Research Staff (PDI).
Data Categories	Identification data: Name and surname. Academic and professional data: – Professional category. Employment details: – Assigned teaching. – Absolute and truly dedicated teaching dedication.- Teaching capacity of the teaching staff. Both collective teaching capacity as individual with indication of the assigned load
Assignments or communications	Organizing entities of sports competitions
International transfers	No international transfers of data are planned.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.
Storage period	The data will be kept for the entire academic period covered by the Teaching Organization Plan. The information will be duly blocked for the additional periods necessary to ensure the statute of limitations for any potential legal liabilities.

Processing Activity	External Internships and Labor Insertion
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities. Royal Decree 1393/2007, of October 29, establishing the organization of official university education.
Purpose	Management of student internships in companies and job placement
Interested groups	ULL students doing internships in companies. Internship tutors.
Data Categories	Name and surname, address, telephone number, email, DNI/NIF, ID, signature, SS/Mutual Society number Personal characteristics data: Age, sex, date of birth, nationality Internship details: details of the company where the internship will take place, date, duration, and type of position.
Assignments or communications	To the company or institution hosting the intern
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Occupational Risk Prevention
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Law 31/1995, of November 8, on the prevention of occupational risks.
Purpose	Occupational Risk Prevention in the area of activity of the ULL
Interested groups	Staff and civil servants assigned to the ULL and staff of contractors and collaborators of the ULL
Data Categories	Name and surname, DNI/CIF/Identification document, personal registration number, Social Security/Mutual Society number, address, signature and telephone number. Special data categories: medical examinations without diagnosis and work-related accidents. Academic and professional data: Qualifications, training Licenses, permits and authorizations.
Assignments or communications	Entity entrusted with management of occupational risks
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	University Entrance Exams
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps, at the data subject's request, prior to entering into a contract. GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Organic Law 2/2006, of May 3, on Education (BOE May 4, 2006) Royal Decree 412/2014, of June 6, establishing the basic regulations for admission procedures to official university undergraduate courses
Purpose	Management of candidates and participants in the University Entrance Exams
Interested groups	Candidates and participants in the University Entrance Exams.
Data Categories	Name and surname, ID/NIF, Address, Email Personal characteristics data: Age, date of birth, nationality Academic data
Assignments or communications	Public Administration with jurisdiction in the matter, Universities and organizations required by law
International transfers	No international transfers are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Publications
Legal Basis	GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Purpose	Management of the ULL's printed publications
Interested groups	People who publish through the ULL Publications Service
Data Categories	Name and surname, ID/NIF, address, telephone number. Academic and professional data Data relating to the publication
Assignments or communications	Third parties who access the publications
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	The data will be retained indefinitely for the purpose of the publications.

Processing Activity	COVID-19 screening tests are being carried out in the ULL university community.
Legal Basis	GDPR: 6.1 a) The basis for the legitimacy of the processing is the consent of the interested party in accordance with the following rules: – Law 31/1995, of November 8, on the prevention of occupational risks. – Article 8 of Law 41/2002, of November 14, regulating basic patient autonomy and rights and obligations regarding clinical information and documentation. – Law 33/2011, of October 4, General Public Health. – Royal Decree-Law 21/2020, of June 9, on urgent measures for prevention, containment, and coordination to address the health crisis caused by COVID-19. – Organic Law 3/1986, of April 14, on Special Measures in Public Health Matters (amended by Royal Decree-Law 6/2020, of March 10. -Organic Law 4/2007, of April 12, amending Organic Law 6/2001, of December 21, on Universities.
Purpose	Voluntary testing for COVID-19 infection detection
Interested groups	Teaching and Research Staff, Administration and Services Staff, Research Staff, Contracted Staff, Students
Data Categories	Name and surname, DNI/NIF/Identification document, address, telephone number and signature. Academic and professional data COVID-19 Infection Screening Test Results
Assignments or communications	Ministry of Health of the Government of the Canary Islands
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Record
Legal Basis	GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. Law 39/2015, of October 1, on the Common Administrative Procedure of Public Administrations. Regulation governing electronic administration at the University of La Laguna
Purpose	Management of the entry and exit register of documents from the ULL, in the terms provided for in article 16 of Law 39/2015, of October 1, on Administrative Procedure Common Public Administrations and other implementing regulations.
Interested groups	Individuals and legal entities, or representatives of individuals or legal entities, who contact the ULL or receive documents from it through the Registry. ULL staff recipient or sender of communications.
Data Categories	Name and surname, DNI/NIF/Identification document, address, telephone number and signature. Representation data, if applicable. Data related to the submitted document
Assignments or communications	Administrative bodies to which, where appropriate, the application is addressed in accordance with the provisions of Article 16 of Law 39/2015.
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	They will be retained for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the archives and documentation regulations will apply.

Processing Activity	Academic Management Treatment for Students
Responsible	University of La LagunaCIF: Q-3818001DAddress: Government Pavilion, Padre Herrera Street, s/n. P.O. Box 456, 38200, San Cristóbal de La Laguna, Tenerife.Email: secretaria.general@ull.esData Protection Officer: dpd@ull.es
Legitimation and legal basis of the treatment	Consent of the data subject (Article 6.1.a) GDPR) Processing necessary for compliance with a legal obligation applicable to the controller (Article 6.1.e) GDPR). Publication on transparency portals in the event of a call for aid or subsidies under Law 19/2013, of December 9, on transparency, access to public information and good governance and Law 12/2014, of December 26, on transparency and access to public information of the Autonomous Community of the Canary Islands. Processing necessary for compliance with a legal obligation applicable to the controller (Article 6.1.e) GDPR). Publication on transparency portals in the event of a call for grants or subsidies under Law 19/2013, of December 9, on transparency, access to public information, and good governance, and Law 12/2014, of December 26, on transparency and access to public information of the Autonomous Community of the Canary Islands.
Purpose	Management of academic records, administrative and financial management of students enrolled at the University of La Laguna, as well as students associated with the University or expected to be associated with the various programs. Management of scholarships and study grants. Internships. Management of official and university-specific qualifications. Surveys related to institutional services. Employment promotion and job placement. Quality assessment and qualification verification processes.
Interested groups	Student body
Categories of personal data processed	Identification data: Name and surname, DNI/NIF or passport, email, address, telephone number, image, Social Security number. Special category data: Negative certification of criminal records for Sexual Offenses, data relating to disability and health data. Personal characteristics data: Family data, place and date of birth, age, sex, nationality, degree of disability and status as a victim of terrorism and gender violence. Academic and professional data: Training, qualifications, student history and participation in the university exchange program. Employment details: Profession of the main breadwinner in the case of scholarship extensions, body/scale and details of the job position and history of the University employee. Economic and financial data: Income, revenues, investments, assets and bank details.
Recipients of the data	Data will be transferred without the need for consent:– Department of Education, Universities, Culture and Sports of the Government of the Canary Islands and dependent bodies with jurisdiction over university matters and the Ministry of Science, Innovation and Universities and dependent bodies with jurisdiction over university matters, for the exercise of the powers of these administrations in academic matters in accordance with the respective legislation.– National Agency for Quality Assessment and the Canary Islands Agency for University Quality and Educational Assessment (ACCUEE) in the quality assessment processes provided for by Organic Law 6/2001, of December 21, on Universities.– Those responsible for public health when they must adopt measures to prevent epidemics, or in cases of infectious diseases or diseases of mandatory declaration.– School insurance in the event of a contingency materializing.– Health services in case of illness or accident when there is a vital interest of the person, in the event that the interested party is not physically or legally capable of giving their consent (art. 9.2.c) GDPR).– Financial entities for the payment of tuition or other fees related to the provision of training services and for purposes related to the functions of the University under Article 1 of Organic Law 6/2001, of December 21, on Universities. Data transfers without consent by virtue of the legal relationship with the university: In relation to scholarships, grants or awards:– Ministry of Education, Culture and Sport.– Private and public companies and public entities that finance calls for applications with the university. In relation to external internships:– Companies, entities and public administrations for the completion of compulsory internships. Data communications for reasons of interoperability for access to documents:– To other administrations if the interested party does not exercise their right to object in accordance with Article 28 of Law 39/2015, of October 1, on the Common Administrative Procedure of Public Administrations, unless objected by the interested parties.– With prior authorization from the taxpayers in accordance with the terms of article 95.1.k) of Law 58/2003, of December 17, General Tax Law. Transfers related to the official university degree:– If the official university degree is requested to be sent, the data will be transferred to the Government Delegation of your autonomous community, the Government Subdelegation or the Provincial Directorates of Education and Science of Ceuta and Melilla. If you reside abroad, to the Embassy or Consulate closest to your home. Transfers related to qualifications:– Publication of the results of the tests related to the assessment of knowledge and skills and/or acts that are necessary for the proper conduct and monitoring of said assessment. (DA-XXI of Organic Law 4/2007, of April 12, which modifies Organic Law 6/2001, of December 21, on Universities). Transfers with consent.– Public and private entities within the framework of agreements for purposes such as sending information, scholarships, advanced courses and/or job offers.– Entities or companies that make offers of employment or non-mandatory internships. At the request of authorities:– Spanish Data Protection Agency in inspection processes in application of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.– Law enforcement agencies for the exercise of their functions. In these cases, the University ensures, before making them available, that these authorities request and access the data in accordance with the Laws. Data processors.– UNIVERSITAS XXI as the entity in charge of the development and maintenance of the academic management program.– OBECAN as the entity responsible for analyzing the job placement of graduates from the University of La Laguna.
International transfers	No international transfers of data are planned.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with Royal Decree 3/2010, of January 8, regulating the National Security Framework in the field of Electronic Administration, are applied.
Right	Interested parties may exercise their rights of access, rectification, deletion and limitation of processing, and the portability of their personal data, to oppose their processing and, where appropriate, not to be subject to decisions based solely on the automated processing of their data, before the University of La Laguna through the electronic procedure enabled for this purpose and available on the Electronic Headquarters of the ULL at the following link: https://sede.ull.es/ecivilis-site/catalog/showProcedure/230

Processing Activity	Event management treatment
Responsible	University of La LagunaCIF: Q-3818001DAddress: Government Pavilion, Padre Herrera Street, s/n. P.O. Box 456, 38200, San Cristóbal de La Laguna, Tenerife.Email: secretaria.general@ull.esData Protection Officer: dpd@ull.es
Legal Basis	Consent of the data subject (Article 6.1.a) GDPR) Processing necessary for compliance with a legal obligation applicable to the controller (Article 6.1.e) GDPR). Publication on transparency portals in the event of a call for aid or subsidies under Law 19/2013, of December 9, on transparency, access to public information and good governance and Law 3/2015, of March 4, on Transparency and Citizen Participation of Castilla y León Compliance with a mission of public interest consisting of providing services to the community through the transfer of knowledge in the terms of Organic Law 6/2001, of December 21, on Universities parties (Article 6.1.e) GDPR).
Purpose	Consent of the data subject (Article 6.1.a) GDPR) Processing necessary for compliance with a legal obligation applicable to the controller (Article 6.1.e) GDPR). Publication on transparency portals in the event of a call for aid or subsidies under Law 19/2013, of December 9, on transparency, access to public information and good governance and Law 3/2015, of March 4, on Transparency and Citizen Participation of Castilla y León Compliance with a mission of public interest consisting of providing services to the community through the transfer of knowledge in the terms of Organic Law 6/2001, of December 21, on Universities parties (Article 6.1.e) GDPR).
Interested groups	Speaker. Communicator. Assistant. Companion. People who have been the “subject of study.”
Data Categories	Identification data: email, telephone, ID, name and surname. Academic data (CV). Bank or payment details. Role: speaker, communicator, assistant, companion. National origin. Accommodation / travel data. Health data: Food. Disability. Religious data (food). Image and voice (photography, video recording) Preferences (social agenda, type of hotel room, etc.) Data related to the safety of people (for example, events related to state security, victims of gender violence, etc.)
Recipients of the data	Data transfers.– Financial institutions for the payment of amounts corresponding to the speakers, where applicable.– Third parties related to the management of the event to facilitate direct contracting with the interested party, such as hotels or discounted trips to the university.– Publications in event dissemination spaces on the Internet.– Other administrations.– Public or private organizations that finance the event or provide scholarships or subsidies, and require individual justification of attendance from the beneficiaries.– Transparency portal.– At the request of authorities. In such cases, the ULL will require a reasoned justification of the request. Provision of services.– Organizations or individuals related to supporting the management of the event– University foundations.– Outsourced service providers: travel agencies, hotels, security companies, catering companies, support…– Associations and non-profit organizations
International transfers	No international transfers of data are planned.
Security measures	The technical, organizational, and operational security and data protection measures applicable in accordance with the National Security Framework regulated by Royal Decree 3/2010 of January 8 are applied.
Storage period	As a general rule, personal data will be retained for a period of three years. Notwithstanding this, tax data will be retained for a period of five years, and data published online until the information is withdrawn. The following may be retained indefinitely: Data necessary to certify attendance or participation in activities. Data included in audiovisual recordings. Data that must be retained in accordance with legislation on historical, documentary, and/or archival heritage. The information will be duly blocked for the additional periods necessary to ensure the statute of limitations for any legal liabilities.

Processing Activity	Video Surveillance
Legal Basis	GDPR: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. GDPR: 6.1.e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Purpose	Video surveillance of the ULL facilities Security and access control to buildings and facilities
Interested groups	People accessing the ULL facilities
Data Categories	Image
Assignments or communications	Law enforcement agencies. Judicial bodies
International transfers	No international transfers of data are planned.
Security measures	The security measures implemented correspond to those provided for in Annex II (Security Measures) of Royal Decree 3/2010, of January 8, which regulates the National Security Framework for Electronic Administration and is described in the documents comprising the ULL's Data Protection and Information Security Policy.
Storage period	Maximum term of

Rights of interested parties

Interested parties may exercise their rights of access, rectification, deletion and restriction of processing, as well as the portability of their personal data, to oppose their processing and, where appropriate, not to be subject to decisions based solely on the automated processing of their data, before the University of La Laguna through the electronic procedure enabled for this purpose and available on the ULL Electronic Office at the following link:

Procedure for exercising rights

Notification of typos and/or errors on the institutional website