This web site use private and third party cookies to optimize your navigation, suit your preferences and perform analytical tasks. By continuing browsing accept our Cookies Policy.



Personal Data Protection Policy Relating To Grants

Who will process my personal information?

Universidad de Deusto
NIF R4868004E
Grants Service

Postal address:
Avenida de las Universidades, 24-Bilbao (CP-48007)

Data Protector Officer:
Internal Audit and Control Manager 
Tel: 94 413 94 30

Why do we process your personal data?

The University of Deusto processes the data provided to:

  • Manage applications for financial aid and grants submitted by students and other groups by physical or electronic means.
  • Make preference profiles and follow-up on activities completed.
  • Process applications, suggestions, claims and complaints.
  • Forward information on the UD’s activities and services.
  • Send information by physical and electronic means.

What is the lawful basis for processing your personal data?

The lawful basis for processing your personal data is consent.
If you do not provide the requested information, your application will not be processed.

To forward information about the UD’s activities and services and carry out preference and activity profiling, the lawful basis is UD’s consent and/or legitimate interest.

Who will be the recipients of your personal data?

The transfer of personal data will be made as provided for by law in this regard.
Likewise, the data corresponding to scholarship or grant recipients will be transferred to the financial institution providing funding so that the appropriate supervision of funding allocations can be made.
Such data may be temporarily transferred to international third parties with the previous consent of the interested party when the grant sponsor is an entity based in another country outside the EU so that the grant allocation process may be supervised.

How long is my information kept?

Your personal data will be stored during the term of the enrolment and will be kept for five subsequent years in compliance with the tax regulations.
The personal data linked to the dissemination of information will be maintained unless deletion is requested by the interested party.
After this period, your personal data will be anonymised and stored for statistical and historical purposes only.

What are your rights when you provide your personal data to us?

Any person will have the right to obtain from the University of Deusto confirmation as to whether or not personal data concerning him or her are being processed.

Those concerned have the right to request access to their personal data and rectification of inaccurate data or, where that is the case, request erasure of personal data when, among other reasons, the data are no longer necessary for the purposes they were collected.

In some circumstances, those concerned may request restriction of processing of personal data, in which case these will only be stored for the exercise or defence of legal claims.  
In certain circumstances or for reasons related to a specific situation, those concerned may object to the processing of their personal data. The University of Deusto will no longer process, unless the centre responsible demonstrates compelling legitimate grounds for the processing, or for the exercise or defence of legal claims.

Those concerned may request data portability to receive personal data concerning him or her which have been provided to the University of Deusto in a structured, commonly used, machine-readable and interoperable format, to be downloaded or transmitted directly from the University of Deusto to another entity.

Those concerned may exercise their rights in writing by email to: and also by post, as stated in the “Protection of Rights” section of the privacy site at

In addition, in the event of disagreement with the University of Deusto regarding the exercise of your rights, you can contact the Data Protection Officer at the University by sending an email to:

You can also contact the Spanish Data Protection Agency (Control Authority) to file a claim through its website:


All data will be treated confidentially and will be subject to appropriate technical and organizational safety measures to prevent alteration, loss, unauthorised processing or access.