In compliance with the Personal Data Protection Regulations and the Law on Information Society Services and Electronic Commerce, we inform you that any personal data provided through the website www.georiskinstitute.com will be treated confidentially and stored by GEORISK INSTITUTE SPAIN, the data controller.

1. Data Controller

Entity Name: FUNDACIÓN GENERAL DE LA USAL
Commercial Name: GEORISK INSTITUTE SPAIN
Tax ID: G37338118
Postal Address: Calle Fonseca, 2, 37002, Salamanca, Spain
E-mail: info@georiskinstitute.com

 

2. Personal Data Collection

GEORISK INSTITUTE SPAIN may collect various types of personal data necessary for its operations, which may include:

  • Contact Data: Name, surname, email address, phone number, postal address, etc.
  • Professional Data: Job title, company, sector of activity, professional background, etc.
  • Navigation Data: IP address, cookies, website usage data, preferences, etc. (collected through web analytics tools).
  • Customer and Supplier Data: Information necessary for contract management, invoicing, and service provision.
  • Training Data: Information related to participation in courses or training programs offered by GEORISK INSTITUTE SPAIN.
  • Research Data: If research services are contracted, specific information related to the subject matter of the research may be collected.

 

This data collection will be carried out in accordance with the principles of legality, fairness, and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and proactive responsibility, as set forth in the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).

 

3. Purposes of Data Processing

The personal data collected by GEORISK INSTITUTE SPAIN will be processed exclusively for the following legitimate and specific purposes:

 

a. Customer and Supplier Management

To manage the contractual relationship, including the delivery of services, invoicing, and post-sales support. Legal Basis for Processing: Execution of a contract (Art. 6.1.b GDPR).

 

b. Customer Service

In the event that you request information regarding our services or submit queries, suggestions, complaints, claims, or incidents through any communication channel provided by GEORISK INSTITUTE SPAIN (such as designated forms, telephone, or email), your personal data will be processed to address and resolve your request via the corresponding communication method (email or phone). Legal Basis for Processing: The processing of your data will be conducted for the implementation of pre-contractual measures at your request or for the performance of the contract to which you are a party (Art. 6.1.b GDPR).

 

c. Commercial Communications and Marketing

Only with your explicit consent, provided by checking the designated box in the forms available on this website, GEORISK INSTITUTE SPAIN will process your personal data to send you marketing communications via any means, including electronic methods (email, SMS, telephone). Legal Basis for Processing: This processing will occur solely with your express consent, given through the specific consent box on the website forms. Please note that you have the right to withdraw your consent at any time and request the cessation of marketing communications (Art. 6.1.a GDPR).

 

d. Training and Education

Sending of information about our services, updates, news, and promotions related to training and educational opportunities. Legal Basis for Processing: This processing will occur solely with your voluntary, explicit consent (Art. 6.1.a GDPR).

 

e. Research and Consulting

To conduct specific research and analysis as requested by clients. Legal Basis for Processing: Execution of a contract (Art. 6.1.b GDPR).

 

f. Compliance with Legal Obligations

Personal data may be processed to fulfill the legal obligations imposed on GEORISK INSTITUTE SPAIN as a result of its relationship with you as a customer, and in accordance with applicable European Union laws and/or domestic legal requirements. This includes obligations under tax regulations, data protection laws, commercial law, consumer and user protection regulations, information society services and e-commerce regulations, civil law, accounting standards, and more. Legal Basis for Processing: Compliance with legal obligations applicable to GEORISK INSTITUTE SPAIN, in accordance with EU law and/or relevant national legislation. Without your personal data, GEORISK INSTITUTE SPAIN would not be able to adequately comply with these legal obligations or address any potential legal liabilities arising from the relationship with you or the processing of your data.

 

4. Addressees

GEORISK INSTITUTE SPAIN, operating under the FUNDACIÓN GENERAL DE LA USAL, does not sell, transfer, or lease the personal data of its Clients/Users to third parties. However, personal data may be shared in the following circumstances:

  • Fulfillment of Legal Obligations: When required by applicable laws and regulations.
  • Data Processors: Third parties that provide services to GEORISK INSTITUTE SPAIN and have signed data processing agreements in accordance with Article 28 of the GDPR. These agreements ensure compliance with data protection regulations.

In this context, personal data may be shared exclusively with the following entities, which act as data processors:

  • General Foundation of the USAL: Responsible for processing and managing certifications.
  • Mission Grey: Specializes in geopolitical analysis.
  • Gateway Global Learning: Focuses on international training.
  • Inter-American Institute on Justice and Sustainability (IIJS): Works on sustainability projects.

These third-party data processors will only use personal data for the purposes defined in their respective contracts with GEORISK INSTITUTE SPAIN and are required to comply with the security and confidentiality measures stipulated by the GDPR and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).

 

5. Legitimation

The processing of your personal data is based on the following legal grounds:

  • Consent of the Data Subject: For activities such as sending commercial communications or participation in training programs (Art. 6.1.a GDPR).
  • Execution of a Contract: To manage the contractual relationship with customers and suppliers, and to provide services (Art. 6.1.b GDPR).
  • Fulfillment of Legal Obligations: To comply with applicable legal obligations, such as those related to tax regulations or data protection laws (Art. 6.1.c GDPR).

Please note that if you do not provide your personal data, or if the data provided is incomplete or inaccurate, we will be unable to respond to your request or offer the services you have requested.

 

6. Conservation

The personal data provided will be retained for as long as necessary to fulfill the purposes of GEORISK INSTITUTE SPAIN or until you request its opposition or deletion. Additionally, data will be kept for the duration of any potential legal responsibilities arising from the services provided.

Personal data will be retained for as long as there is a mutual interest in maintaining the processing purpose. Once it is no longer necessary for that purpose, the data will be securely deleted, ensuring either pseudonymization or complete destruction of the data.

 

7. Rights of Interested Parties

You may exercise your rights by sending a request to info@georiskinstitute.com, including a copy of your identification document and providing your full name, surname(s), address for notification purposes, and the specific right you wish to exercise.

  • Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning him/her in our company.
  • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Data subjects can request the limitation of their data processing while its accuracy is being verified; if the processing is lawful but they object to the deletion of their data; if the controller no longer needs to process their data but the User requires it for the exercise or defence of legal claims; or if they have objected to the processing of their data for the controller's legitimate interests, while it is verified whether the controller’s legitimate grounds for processing outweigh theirs. In such cases, the data will only be retained for the exercise or defence of claims.
  • In certain circumstances, and for reasons related to their specific situation, data subjects may object to the processing of their data. Our company will cease processing the data, unless there are compelling legitimate grounds for processing, or for the exercise or defence of potential claims.
  • Likewise, you have the right to data portability, in cases where the law permits.
  • We inform you that you can withdraw your consent for any or all purposes at any time, without affecting the lawfulness of the processing carried out based on your consent before its withdrawal.
  • We inform you that you may file a complaint with the competent Data Protection Supervisory Authority (AGPD - Spanish Data Protection Agency, for example).

To exercise any of these rights, please contact us at the aforementioned address.

 

8. International Transfers

Certain recipients mentioned in Section 4 may be located in countries that do not provide an adequate level of data protection in accordance with applicable regulations (such as the United States, China, or LATAM countries, including Mexico and Colombia). In such cases, it may be necessary to transfer personal data to international service providers in order to fulfill the requested services or to ensure that these services meet the highest quality standards.

In any event, GEORISK INSTITUTE SPAIN is committed to implementing the necessary safeguards in compliance with current regulations, ensuring that your personal data is adequately protected. These safeguards may include, but are not limited to, the following:

  • EU-approved Standard Contractual Clauses: Agreements approved by European authorities that ensure data processing activities comply with the requirements established by the European Union’s General Data Protection Regulation (GDPR).
  • Third-party Compliance Certifications: Independent certifications that verify that service providers or data recipients comply with international data protection standards.

For additional information regarding international data transfers or to exercise your data protection rights, please contact us via the "Contact" section available on our website or by sending an email to info@georiskinstitute.com.

 

9. Use of Cookies

GEORISK INSTITUTE SPAIN informs its Users that cookies are used on its website. Cookies are small text files stored by your browser on your computer’s hard drive. When you navigate through our website, our server can recognize the cookie and provide us with information about your previous visits. Most browsers automatically accept the use of cookies; however, you can configure your browser to alert you when a cookie is received and to prevent its installation on your hard drive. Under no circumstances can these cookies read information from your hard drive or from files created by other websites.

To read more about our use of cookies, please refer to our COOKIES POLICY. 

 

10. Accuracy and Updating of Data

The User guarantees that the personal data provided to GEORISK INSTITUTE SPAIN is accurate and agrees to promptly communicate any changes to such data. The User shall be solely responsible for any direct or indirect damage or harm caused to GEORISK INSTITUTE SPAIN or any third parties due to the submission of false, inaccurate, incomplete, or outdated data on the forms. The User is prohibited from submitting personal data of third parties without their prior, informed consent regarding the terms of this Data Protection Policy and will bear full responsibility for any such submission. All data requested via the website is mandatory, as it is essential for providing optimal services. In the event that all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs. In order to provide us with your personal data, you must be at least 14 years of age.

 

11. Social Media

GEORISK INSTITUTE SPAIN may use social media platforms as a means of communication and promotion of its services. Under no circumstances will we use the data for purposes other than those permitted by applicable regulations. The Foundation is not responsible for the content, comments, opinions, or information, whether from our own or third parties, that Users post on our LinkedIn account. You are permitted to use our content for lawful purposes, provided that the origin or author is duly credited. The data collected through these platforms will be used to maintain a database of Users and contacts associated with the company’s social media accounts. Please be aware that the use of social media platforms is governed by the privacy policies of each respective platform.

 

12. Confidentiality and Security of Your Data

GEORISK INSTITUTE SPAIN has implemented the necessary measures to prevent the alteration, loss, misuse, or unauthorized access to personal data, always considering the state of current technology. However, the User must be aware that no security measures on the Internet are completely impregnable.

The data obtained through the website and/or any other means will be treated by the CONTRONLLER with the utmost confidentiality. GEORISK INSTITUTE SPAIN commits to maintaining secrecy regarding this data.

In accordance with the applicable regulations on Personal Data Protection, the CONTROLLER ensures compliance with all provisions of the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Digital Rights Guarantee (LOPDGDD), particularly adhering to the principles outlined in Article 5 of the GDPR and Title II of the LOPDGDD, ensuring that the data is processed lawfully, fairly, and transparently in relation to the data subject. The processing is also adequate, relevant, and limited to the minimum necessary for the purposes for which the data is collected.

The CONTROLLER guarantees the implementation of appropriate technical and organizational measures to apply the security standards established by the GDPR and LOPDGDD, ensuring the protection of the rights and freedoms of Users. The necessary information has been provided to Users to enable them to exercise their rights.

As data protection laws may evolve, we strongly advise that you regularly review our Data Protection Policy. Please note that the website of GEORISK INSTITUTE SPAIN does not currently support encryption. Therefore, information transmitted via the internet without encryption may be accessible to third parties. By submitting forms on our website, you acknowledge and accept the transmission of information without encryption.

 

13. Modification of the Data Protection Policy

GEORISK INSTITUTE SPAIN reserves the right to modify its data protection policy according to its criteria, or due to a change in legislation, jurisprudence or business practice. If GEORISK INSTITUTE SPAIN should introduce any modification, the new text will be published on this website, where the User will be informed of the current data protection policy of GEORISK INSTITUTE SPAIN. In any case, the relationship with Users will be governed by the rules in force at the precise moment when the website is accessed.

 

14. Other information

For any further clarification or comments, please feel free to contact GEORISK INSTITUTE SPAIN by email at the address provided above.