Privacy policy

Introduction

This privacy policy applies to the processing of personal data that we perform when you visit our website.

At Northius Group, we place a high value on the safety and privacy of your personal information. We will ensure that all personal data entrusted to us is processed in compliance with applicable data protection legislation in your country.

As part of our commitment to transparency, we will always disclose our identity and the purpose of processing your data. We will also inform you of any potential recipients and transfers that may occur. You can trust that we will fully comply with your privacy and security requirements.

About Northius

The Northius Group will treat your personal data by the provisions of this privacy policy, which will be constantly updated, under continuous review, and always available to the user.

Unless otherwise stated, Northius Group is responsible for processing your personal data (“data controller” within the meaning of the applicable data protection legislation).

In specific cases, in the interest of the efficient operation and management of our business, the companies of the Northius Group jointly determine the purposes and means concerning the processing of personal data (joint controllers).

The Northius Group consists of the following entities:

Identification of the Data Protection Officer

The contact details of the Data Protection Delegate (DPD) who will centralize the management of data protection of Northius Group are: dpo@northius.com

For what purposes do we process the data?

We may process your personal data for the following purposes:

Information request: To provide personalized information about the courses scheduled and their respective modalities or any other type of training available in our training catalogue.

Contact: The email or telephone number provided by the user will be used for an appropriate answer to the questions raised. The use of the instant messaging application will not imply the treatment of the telephone numbers of its owners. When the contact is established through our contact centre, some conversations may be recorded only for the follow-up of the relationship and the corresponding hiring or registration process.

Training activities: Once the hiring and registration process is completed, for which identification and payment data must be provided, the information will be processed for the corresponding administrative and academic procedures, among which are: (i) delivery of credentials to the Virtual Campus; (ii) delivery of training sessions; (iii) tests and exams; and (iv) awarding of degrees and/or certifications.

Newsletters: The e-mail address, which must be verified by the user, or the telephone number, will be used to send the above-mentioned electronic communications, depending on the user’s interests.

Promotional/participatory activities: When participating in any promotional activity, we will process the data provided depending on each specific action to regulate and enable access and enjoyment of the same. Where appropriate, the corresponding legal conditions or bases will be published, and for those specific cases, more detailed information on the processing of personal data will be provided.

Work with us: The sending of curricular data will be used in selection processes, present and future, although the selection departments reserve the right to delete the information provided immediately.

Personnel selection activities: When carrying out the functions of a Private Placement Agency, labour intermediation tasks will be carried out to establish a channel between those people looking for a job suitable to their characteristics and those organizations looking for potential workers with specific qualifications, thus making available to them the most qualified professionals according to their requirements and needs.

What type of data do we process?

The data object of the treatment will be differentiated depending on the type of sections or services made available to the user and used by the user, as well as the additional allowed or authorized treatments by the user.

Data obtained from the user: the data provided by the user in the process of filling in the forms provided, the registration and contracting of the chosen training, as well as the subscription to our newsletters, campaigns, or promotions. These data include identification and contact data, such as name, surname, email address, and financial and payment data. In each of the forms, it will be indicated which are mandatory and which are optional.

Data not obtained from the user: During web browsing, data such as those sent by the browser, the IP address assigned by your provider, or the information of the device used may be provided.

Legitimacy of the processing

According to the treatments conducted, we report below the bases of legitimization of each of them:

Consent: it will be duly obtained for subscription to our newsletters and news, as well as to give timely responses to all those issues or questions raised by users. Consent will always be revocable and may be withdrawn at any time. Nevertheless, if such consent is withdrawable, it will not affect the lawfulness of the processing previously carried out. The obtained permissions for the mentioned purposes are independent, and one of them may be revoked, not affecting the others.

Fulfilment of a contract: The contract signed between the student (or, if applicable, the payer) and the company of Northius Group in charge of the educational programme, in any of the existing variants (courses, competitive examinations, masters, etc.).

Legitimate interest: According to this basis of legitimacy, we will direct requests for information to the Northius Group company that is best able to offer the solution sought by users. In this sense and with the same legal basis, commercial communications may be sent, according to the preferences and interests of users.

Compliance with a legal obligation: The recruitment mediation activities will be communicated to the Public Employment Service, in compliance with Royal Decree 1796/2010, of December 30, which regulates employment agencies, as well as Royal Legislative Decree 3/2015, of October 23, which approves the revised text of the Employment Act.

To whom is your data communicated?

The Northius Group comprises multiple companies that offer specialized training services. If a user’s inquiry or request goes beyond the expertise of the receiving company, they will redirect the request to the relevant company that specializes in that specific area. This guarantees efficient handling of users’ unique requirements and requests.

To fulfil other purposes outlined in our Privacy Policy, we may utilize third-party vendors who provide technological services, as well as service providers for customer service, marketing, and advertising.

Despite the foregoing, any personal information that is shared with us will remain confidential and will not be shared with any third parties unless required by law, court order, or competent authority. Additionally, we may share necessary data to provide our services, or if the user has given their express consent.

International data transfers outside the European Union are not currently anticipated.

To comply with regulations and ensure fair practices, we will register the information of all job seekers in a shared database accessible through the Single Employment Portal. This is not just to facilitate the exchange of employment opportunities and training programs throughout Spain and other countries in the European Economic Area but also to ensure strict compliance with Spanish and European legislation on data protection.

Exercise of rights

Any person has the right to obtain confirmation as to whether personal data concerning him/her is being processed. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, interested parties may request the limitation of the processing of their data or oppose the processing thereof, in which case we will only keep them for the exercise or the defence of claims.

To do so, users may exercise the rights recognized by law (i) by e-mail to the address dpo@northius.com, or (ii) by letter to the address indicated above.

A complaint may be filed with the Spanish Data Protection Agency, available at https://sedeagpd.gob.es/.