6. Exercise of Rights

As the owner of the data, the user may send a letter to Runnymede College, S.A., at the address indicated in the heading of this Privacy Policy, or by e-mail to dpo@runnymede-college.com at any time and free of charge, to exercise the following rights: 

Right of access 

You will have the right to be informed by Runnymede College, S.A. as to whether or not it is processing your personal data and, if so, to be able to access such data and receive information on the purposes for which they are processed, the categories of data affected by the processing, the recipients to whom your personal data were communicated and the expected period for which the data will be kept, among other information. 

Right of deletion and opposition 

You have the right to request the erasure of personal data provided that the legal requirements are met or to object to the processing at any time, on grounds relating to your particular situation, in case the processing is based on our legitimate interest.

Right of rectification

You will have the right to request the rectification of inaccurate data concerning you when, among other reasons, they are no longer necessary for the purposes for which they were collected.

Restriction of processing and withdrawal of consent

In certain circumstances (e.g. in case the applicant contests the accuracy of his or her data, while the accuracy of the data is being verified), you may request that the processing of your personal data be restricted and processed only for the exercise or defence of claims. You also have the right to withdraw your consent at any time.

Portability of your data

You will have the right to receive the personal data you have provided to Runnymede College, S.A. in a structured, common and machine-readable format, and to be able to transmit them to another data controller without being prevented from doing so by the controller to whom you have provided them, in the cases legally provided for this purpose.

Automated individual decisions

Likewise, in addition to the aforementioned rights, in the event that automated decisions are taken, including profiling, you will have the right to obtain human intervention by Runnymede College, S.A. and to express your point of view and challenge the decision.

Others

No international transfers are made, but in the event that personal data is transferred to a third country or an international organisation, you will have the right to be informed about how you can access or obtain a copy of the appropriate safeguards relating to the transfer.

You may lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency (www.aepd.es), when the interested party considers that Runnymede College, S.A. has infringed the rights that are recognised by the applicable data protection regulations.

The period to exercise your right, as a data subject, will be one month from receipt of the request, which may be extended for a further two months in cases of complexity or number of requests received.