Data protection policy

The Quality Assurance Agency for the University System in Castilla y Leon (ACSUCYL) ensures the confidentiality of the personal data provided within the framework of the processes undertaken by the Agency, in accordance with the General Data Protection Regulation (GDPR), REGULATIONS (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data.

Citizens’ personal data are compiled for each specific process through various forms and related applications, gathering only the data that are essential to providing the service requested, and which are the appropriate and pertinent data limited exclusively to what is required in relation to the purposes for which they are processed, and which may not be used for any other purpose not compatible therewith.

In accordance with article 13 of GDPR, in each process in which personal data are gathered, specific notification is given that said data are being processed as well as the principal characteristics thereof, either in the actual process forms themselves and/or through an informative file concerning the processing of personal data, and which is published together with the forms.

The personal data provided through the electronic office are included in a processing system, responsibility for which lies with the administrative bodies, who have their corresponding registers of processing activities.

The security measures in place to ensure the safety of personal data are those set out in Annex II (security measures) of Royal Decree 3/2010, of 8 January, regulating the National Security System for Electronic Administration.

For any matters related to data protection, ACSUCYL'S Data Protection Delegate may be contacted through the following means:

• On site or snail mail: Avenida Reyes Católicos 2, Edificio Emilio Alarcos, 47006 Valladolid 
• Telephone no.: +34 983 411 743 
• e-mail: dpd@acsucyl.es.

Citizens interested in doing so may freely exercise their right concerning accessing, amending, deleting, limiting the use of, data portability, and contesting as well as the right not to be subject to automated individual decisions, including the compilation of profiles, where applicable, by contacting in writing the person responsible for data processing and/or before the Data Protection Delegate.