Privacy Policy
1. Who is responsible for the processing of your data?
OBS Formación Online en Management, S.L., with CIF B-02.964.989, will be responsible for the personal data you provide us with by filling in any of our forms in paper or electronic format, as well as those obtained as a result of the formalisation of enrolment in any of our courses and the relationship derived from said enrolment. This company is located at Avenida Diagonal 662,664, 08034, Barcelona, and can be contacted at [email protected].
You may contact our Data Protection Delegate by writing to [email protected] or to Grupo Planeta, Attn: Delegada de Protección de Datos, Avda. Diagonal 662-664, 08034 Barcelona.
2. From what sources does your data come?
-The enrolment of a student in a Programme.
-Requests for contact, including requests for information on Programmes and services provided.
-The creation of a Commercial Profile.
-Through the various forms available on the websites.
-Your subscription to the newsletter.
-The communication of information provided by telephone, post, email or via one of our paper forms;
-During forums, master classes, trade fairs, via computerised or paper forms filled in by a potential client or a student.
-The execution of the relationship
-Those provided by the companies in which you may do curricular or extracurricular internships.
-In the event that the company you work for is the company that has contracted the Programme in which you are enrolled, said company may have provided us with certain personal data relating to you, such as contact and identification data.
-If you are a minor, your parent or legal guardian may have provided us with certain personal data relating to you, such as contact and identification data.
In relation to the Lifelong Learning Masters courses, we obtain certain personal data from the Department of Education for the purpose of managing the allocation of places on the basis of cut-off marks. The categories of the aforementioned data are: contact data, identification data and academic data.
-With regard to obtaining scholarships, grants or funding and in relation to the legal guardian and/or parents, it is possible that the pupil has provided us with certain personal data, for the purpose of assessing the allocation of such scholarships, grants or funding. The categories of such data are: contact data, identification data and financial data.
-Use of our website.
OBS may collect your Data directly or indirectly, through other Grupo Planeta entities. The communication on your part of the data marked with an asterisk on the registration form is necessary for the contracting of the course.
3. What category of personal data do we process?
Identity data: surname, first name, nationality, telephone number, e-mail address, postal address, date of birth, country of residence, identity card, visa application if applicable;
Professional data: level of education and initial field of training, diplomas obtained, professional experience and addresses of the different employers where such professional experience was acquired, data concerning your skills and interests;
Financial data, including bank details, relating to tuition fees and scholarship applications, or funding arrangements for further training;
Data relating to comments/questions collected during the pre-contractual or contractual relationship;
Connection data: IP address, technical and location information generated in connection with the use of our websites and applications:
Cookies: for more information, please see our Cookie Policy;
3.1. Special categories of personal data
Special categories of personal data (hereinafter ‘sensitive data’) are personal data which may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation. OBS will only process sensitive data in accordance with data protection law and if it has a valid legal basis for doing so and in very limited circumstances, for example, to identify particular needs in order to adapt the training environment to those needs.
4. For what purpose do we process your personal data, what legitimises us to process it and for how long will we keep your data?
| Treatment | Use | Basis of legitimacy | Conservation period |
| Information request | Manage your request for information on the selected training programme. | Consent |
Your data will be deleted once this information has been provided and/or after two calls for applications. |
| To create a profile based on the information provided both at registration and while browsing the website in order to target advertising and improve the quality of the management and enrolment process. | Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy. | ||
| Enrolment and completion and use of the programme | - Manage the aforementioned enrolment and make it possible for you to complete and make the most of the Programme. - Facilitate access to the Virtual Campus, as well as to materials, databases and other training resources made available to students. - To send them information, notifications and communications of a relevant nature for the development of the Programme. - To carry out a continuous assessment of the knowledge acquired by you in relation to the Programme. - To enable, where appropriate, your participation in the internship programme linked to the training activity in question, as well as to carry out the evaluation of the aforementioned programme. - Manage, where appropriate, the delivery of the certificate of achievement or final qualification corresponding to the training activity in which you have enrolled. | Contractual relation | We will process your data until the end of the contractual relationship. |
| - Send you, by any means, commercial communications about the rest of our courses that are similar to the one you have contracted. | Exception from Article 21 of the Law on Information Society Services and Electronic Commerce. | We will process your data until you object to the processing. | |
| Asynchronous class recording | To the extent that the lessons given online within the framework of the Programme in which you are enrolled may be recorded so that they can be viewed at a later date, we may process your image or voice in the event that you participate and/or intervene in any of these lessons. | Legitimate interest Further information on legitimate interest can be found in the relevant section of this privacy policy. | We will process your data until the end of the contractual relationship. |
| Online knowledge assessment | In those cases in which the assessment of your knowledge requires an anti-fraud accreditation system, these systems will be used solely and exclusively for this control function and never for any other purpose. Depending on the Programme in which you enrol, such anti-fraud accreditation systems may consist of one or more of the following: front camera with or without facial recognition (biometric accreditation), monitoring of screen activity and verification of the environment by means of a second camera.
| Contractual relationship and legitimate interest in the prevention of academic fraud. Further information on legitimate interest can be found in the relevant section of this privacy policy. | We will process your data until the evaluation reports of each test become final. |
| Application for scholarships, grants or funding | If you apply for a scholarship, grant or financial aid to pay for the Programme you are enrolled in, we will process your personal data to process your application and the corresponding scholarship, grant or financial aid. | Contractual relation | We will process your data until the end of the contractual relationship.. |
| Club Alumni | Alumni Club, we will process your personal data to manage your registration and subsequent participation in the Alumni Club, in accordance with the relevant conditions of participation. Within the framework of this club, we may send you information about the activities and advantages that you can benefit from as a member, as well as information relating to the education sector. | Contractual relation | We will process your data for as long as you remain a member of this club. |
| Events | Process your personal data, including your image and voice, which may be captured as a result of your participation in a given event. | Consent | As long as you do not revoke such consent or exercise your rights of erasure and opposition to the processing of your data. |
| Commercial surveys | To send you and manage your participation in commercial surveys, in order to find out your opinion and training preferences and, based on these, to recommend you to take another of our training programmes and/or other training centres outside of our company. |
Consent | As long as you do not revoke such consent or exercise your rights of erasure and opposition to the processing of your data. |
| Employability surveys | Depending on the programme in which you are enrolled, send you and manage your participation in employability surveys, in order to find out how graduates are finding work. | Compliance with legal obligations derived from the regulations on education, specifically, Law 15/2015, of 21 July, of the Agency for the Quality of the University System of Catalonia,
| We will process your data for as long as necessary to carry out the survey or until you object to the processing or we anonymise your data. |
| Quality or Satisfaction Surveys | In light of our legitimate interest in understanding the satisfaction of our customers or users regarding our products and/or services and the support provided in relation to our educational services, we may process your personal data to send you or carry out satisfaction or quality surveys. This also benefits you as it allows us to gather your feedback, assess the quality of our products, services, and/or support provided, identify areas for improvement, strengths, and better understand the needs and expectations of our customers.
| Legitimate Interest For more information on legitimate interest, please refer to the relevant section of this privacy policy. | We will process your data for as long as necessary to carry out the quality or satisfaction survey, or until you object to the processing or we anonymise your data. |
| Draws and Competitions | If you participate in a draw or competition organised by OBS Formación Online en Management, S.L., your data will be processed to manage your participation and, if you win, to deliver the prize and, if applicable, manage the publication of your identifying details through various media such as the OBS website. For each draw or competition you participate in, the legal terms will be available, where we will provide more detailed information about the processing of your data. | Contractual relationship arising from the execution of the legal terms of the draw or competition. | We will retain your data until the completion of the draw, once the corresponding prize has been delivered, as well as for any subsequent period during which any type of liability may arise. |
Sending of Commercial Communications from Ourselves and Third Parties | If you provide your consent, we may send you personalised commercial communications about our products and/or services, or those of third-party partner companies, which may cover the following sectors: publishing, education, culture, leisure, collectibles, textiles, private insurance, consumer goods, jewellery, telecommunications, banking and financial services, travel, technology, and legal activities. Additionally, there are certain social media platforms, applications, or third-party websites that allow the sending of commercial communications or advertising impacts to specific or targeted users. With this information, the social media platform or application verifies whether the user has an account on their platform, allowing OBS Formación Online en Management, S.L. to create what is known as a "Custom Audience" with users who have consented to receive commercial communications in accordance with the terms outlined earlier in this policy, and who also have an account on the respective social media platform or application, enabling us to show them advertisements directly on those platforms. This type of activity can be carried out across various media, with social networks such as Facebook (Custom Audience), Twitter (Tailored Audiences), and Google (Customer Match) being prominent examples. | Consentimiento | We will process your data until you unsubscribe or withdraw your consent. |
| Communication to companies within the Planeta Group for the purpose of sending commercial communications. | In addition, you may give your consent through a designated checkbox, allowing us to share your personal data with companies within the Planeta Group so that they can send you personalised commercial communications about their own products and/or services. The sectors of the companies within the Planeta Group are as follows: publishing, education, culture, leisure, collectibles, textiles, private insurance, consumer goods, jewellery, telecommunications, banking and financial services, travel, technology, and legal activities. | Consent | We will process your data until you unsubscribe or withdraw your consent. |
| Contact | We may process your data if you contact us through the various channels provided for managing inquiries, questions, and/or complaints.
| Consent | Until we respond to your inquiry, request, and/or complaint.
|
| Fraud Prevention and Management | When making a payment, we may process your data to monitor potential fraudulent transactions, which may involve sharing data with providers specialised in fraud prevention and management, in accordance with the information provided in the section "Who will your data be shared with?". This processing will be carried out based on legitimate interest. The interest of OBS Formación Online en Management, S.L. is to manage and control any potentially fraudulent transactions. The benefit this generates for OBS Formación Online en Management, S.L. is the control of financial losses, as well as increasing the trust that customers place in us and the company’s reputational value. This benefits you as it provides greater transparency and trust in OBS Formación Online en Management, S.L., helping to prevent fraudulent transactions in which you might be involved and improving your experience as a customer. For more information on legitimate interest, please refer to the section "Do we carry out processing based on legitimate interest?" in this privacy policy. | Legitimate Interest For more information on legitimate interest, please refer to the relevant section of this privacy policy. | Your data will be processed for as long as necessary to prevent and manage potential fraudulent transactions, or until you object to the processing. |
| Cookies | We may collect information about you through cookies. This information will be used to improve the functionality and performance of the website, analyse traffic, website usage, assess navigation, understand and determine areas of greatest interest, and manage the advertising spaces on our website as well as the advertising shown on other websites, according to aspects we believe may be of interest to you. For more information about cookies, please refer to the Cookie Policy. | Consent (except for strictly necessary cookies) | They may last up to 2 years (in any case, please review the information provided in our Cookie Manager). |
| Publicidad en redes sociales o servicios de terceros | There are certain social networks, applications or third-party websites that allow the sending of commercial communications or advertising impacts to specific or determined users.
This type of activity can be carried out in different media, with social networks such as Facebook (Custom audience), Twitter (Tailored audiences) or Google (Customer Match) standing out.
These social networks or applications allow the sharing of user data to find or identify what is known as ‘similar audiences’, i.e. users who have a similar profile to you on said social network or application, but who are not users of OBS Formación Online en Management, S.L..
This type of activity is usually carried out especially through social networks such as Facebook (Lookalike audience), Twitter (Tailored audiences) or Google (Similar Audiences). In this case, as we do not directly impact our own users with advertising, we use the basic data of all users, even those who have not accepted to receive commercial communications.
In relation to the data provided to these third parties, we consider it relevant that our users know that only their e-mail or telephone number will be communicated, which will be communicated in encrypted form, guaranteeing the confidentiality and security of their data. The whole process is secured through the tool provided by the platform itself, which will allow the platform to be able to identify the user's personal data.
Please remember that if you do not wish to receive advertising via social media or third-party platforms, you should restrict it through your user profile, in accordance with the privacy policies of each platform. These social networks and/or applications will only provide us with your data in an anonymised and statistical form, without us being able to re-identify you or learn about any new interests, unless you interact with us through one of our ads on the social network and/or application. We also inform you that we process data based on legitimate interest. The interest of OBS Formación Online en Management, S.L. is to target advertising messages to user segments that may be interested in our products and services. The benefit this generates for OBS Formación Online en Management, S.L. is cost savings on advertising. The benefit for users is that they will not receive indiscriminate advertising for products and services that are not of interest to them. For more information on legitimate interest, please refer to the relevant section of this privacy policy. |
Legitimate Interest For more information on legitimate interest, please refer to the relevant section of this privacy policy.
|
The data will be processed as long as you have accepted commercial communications or until you object to the processing. |
| Video surveillance | Video surveillance to ensure the security of users and of the premises of the premises.
Personal data processing activities whose main purpose is to capture and/or process images for surveillance purposes. | Legitimate interest
Further information on legitimate interest can be found in the relevant section of this privacy policy. | 1 month |
5. Processing Based on Compliance with Legal Obligations
In addition to the processing specified in the table above, OBS will need to process the user’s personal data to comply with various legal obligations of an accounting, legal, fiscal, and administrative nature that may be applicable at any given time. Specifically, and among others, we refer to the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 regarding the protection of natural persons concerning the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC ("GDPR").
- The Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights ("LOPD"), which obliges OBS, as the legally responsible entity for processing your personal data, to address requests, exercise of rights, and complaints related to data protection.
- If requested by any Court or Tribunal, Law Enforcement Authorities, or any other competent Public Authority or Administration, we may also be required to provide your personal data, as we are legally obligated to do.
- Royal Legislative Decree 1/2007 of 16 November, approving the consolidated text of the General Law for the Defence of Consumers and Users and other complementary laws, to address requests, exercise of rights, and complaints submitted by you when acting as a consumer.
These legal obligations will be complied with by OBS for the periods stipulated by the applicable legislation.
6. Who will your data be communicated to?
Your personal data may be communicated to:
- The companies where, if applicable, you undertake the corresponding curricular internships, as such communication is necessary for you to carry out these internships.
- Educational institutions outside of the primary centre to which your academic records need to be transferred in case you choose to carry out part of the Programme there, participate in an international training programme, or decide to undertake any other training programme there and request the transfer of your academic records.
- The organisations or entities managing scholarships, grants, or funding you may apply for to cover the costs of the Programme in which you are enrolled, as such communication is necessary to manage and process the requested scholarship, grant, or funding.
- The Department of Education and relevant authorities when legally required.
- Third-party companies if you have given your consent.
- In the case of a minor, or if you are of legal age and based on your consent, your academic records may be communicated to your tutors and/or parents.
If you give us your consent, your personal data and, where applicable, your commercial profile will be shared with other companies within the Planeta Group for the purposes outlined in the section “What is the purpose of processing your personal data?” of this privacy policy. You can view the list of Planeta Group companies at the following link: www.planeta.es. These companies operate in the sectors of publishing, education, culture, leisure, collectibles, textiles, private insurance, consumer goods, and jewellery.
Furthermore, we inform you that, if there is a legal obligation requiring us to do so, your data will be transferred to the administrations, authorities, public bodies, or courts and tribunals specified by the relevant legislation.
Additionally, we inform you that OBS contracts various services from third-party providers, who may have access to your personal data in order to provide such services. In these cases, these providers will process the data on our behalf under a data processing agreement and never for their own purposes. Specifically, OBS may contract third-party service providers operating in the following sectors: logistics services, legal advice, supplier certification, multidisciplinary professional service companies, maintenance companies, technology service providers, IT service providers, instant messaging service providers, and infrastructure management and maintenance companies.
7. Do we carry out international data transfers?
If you choose to carry out part of the Programme at an educational institution located outside the European Economic Area or participate in an international training programme, your data will be subject to international transfers. In such cases, OBS will implement appropriate safeguards to regulate these international transfers.
Additionally, as mentioned in the previous section, OBS contracts various services from third-party providers, some of which are located outside the European Union or the European Economic Area. For these providers, OBS has signed the relevant standard contractual clauses authorised by the European Commission, along with any additional safeguards, where applicable.
8. Do we carry out processing based on legitimate interest?
As indicated in this Privacy Policy, some processing activities may be based on legitimate interest. To assess legitimate interest, we have carried out a balancing exercise where we have analysed the benefits to us as the data controller, as well as the benefits to third parties, and concluded that our legitimate interest in the processing outweighs the interests, rights, and freedoms of the users and/or third parties.
You may request more information about the legitimate interest balancing exercise at any time by contacting our Data Protection Officer.
We also remind you that you have the right to object to processing based on legitimate interest.
9. How long will we retain your data?
All data provided will be processed for the period specified in Section Four of this Privacy Policy ("What purposes do we process your personal data for? What justifies the processing, and for how long will we retain your data?"). However, once those periods have expired, your data will be securely blocked to prevent further processing, except when providing data to judges and courts, the Public Prosecutor's Office, or competent Public Authorities, for the enforcement of possible liabilities arising from the processing, and only for the statute of limitations period for such liabilities. Once this time period has passed, the data will be deleted.
Notwithstanding these periods, whenever possible, your data may be kept in an anonymised form for statistical purposes or market research.
10. What security measures do we apply to protect your data?
We take the necessary measures to ensure that your personal data collected through the website is not lost, consulted, altered, or disclosed to unauthorised third parties.
To this end, we have implemented technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, alteration, or loss, misuse, and unauthorised access, alteration, or disclosure.
Additionally, organisational measures (such as data access authorisation management systems, etc.) contribute to maintaining the confidentiality of your data. For example, access to your personal data is strictly limited to authorised staff of OBS Formación Online en Management, S.L., as well as our partners and subcontractors, who act following our instructions and in compliance with our contractual provisions and applicable law.
11. What rights are granted by the applicable regulations?
Anyone has the right to obtain confirmation on whether OBS Formación Online en Management, S.L. is processing personal data concerning them.
Moreover, interested parties have the right to access their personal data, request rectification of inaccurate data, or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Under certain circumstances, individuals may request the restriction of the processing of their data, in which case we will only retain the data for the exercise or defence of claims.
At any time, individuals have the right to withdraw any consent they have given. This will not affect the contractual relationship with OBS Formación Online en Management, S.L., nor the legality of what we have done up to that point: in other words, the withdrawal of consent has no retroactive effect and only applies from that moment onward.
Under certain circumstances, and for reasons related to their particular situation, individuals may object to the processing of their data. OBS Formación Online en Management, S.L. will stop processing the data unless there are legitimate, compelling reasons, or for the exercise or defence of possible claims.
Furthermore, individuals have the right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning them that they have provided, and to transmit it to another data controller. If we carry out an automated process, you have the right to challenge the decision taken, request the personal intervention of one of our analysts, and express your point of view so that your request can be re-evaluated. You can do so by sending an email to OBS.
You can withdraw consent, if granted, as well as exercise your rights of access, rectification, deletion, and data portability, restriction, and opposition to processing by contacting OBS Formación Online en Management, S.L. via letter to P.O. Box 221, Barcelona, or by sending an email to [email protected].
You also have the right to lodge a complaint with the Spanish Data Protection Agency when you consider that we have not properly addressed the exercise of your rights.
12. Changes to the Privacy Policy
This policy was last updated on 03/03/2024. OBS Formación Online en Management, S.L. recommends reviewing this document every time you access the website to be adequately informed about the processing of your personal data and to be aware of any changes that may occur.