Confidentiality and security are fundamental values of Fundació Centre d’Innovació i Tecnologia de la Universitat Politècnica de Catalunya  (CIT UPC) and therefore we are always committed to ensuring the privacy of personal data of our customers and not to collect unnecessary information.

Next, we provide you with all the necessary information about our Privacy Policy in relation to the personal data we collect, explaining:

Who is the controller of the processing of your personal data

For what purposes we ask for the information we ask for.

  • What is the lawfulness of processing.
  • How long we keep them.
  • To which recipients their information is communicated.
  • What are your rights?


Who is the controller of the processing of your personal data?

Business name: Fundació Centre d’Innovació i Tecnologia de la Universitat Politècnica de Catalunya  (CIT UPC)
VAT Number: G65497182
Address: Edifici Omega (planta 0), C/Jordi Girona, 1-3, 08034 Barcelona (Spain)

Who are the data subjects?

The personal data processed are those of:

  • People who have given us their information in the different forms of the web to make inquiries or obtain information about our services and activities.
  • People who apply to job selection processes.
  • People who leave a comment on the blog


For what purposes and lawfulness do we process personal data?

In CIT UPC we process personal data to respond to your information queries or requests.

These personal data will be treated for the legitimate purposes indicated below

Answer information or contact requests

In CIT UPC we use the contact information you give us to respond to your requests and queries regarding our products and services, whether made through the forms available on the website or directed to the contact email addresses that have been published.

The lawfulness of processing:

  1. Processing is necessary for the purposes of the legitimate interests pursued by CIT UPC, taking into account the reasonable expectations of those interested in receiving a response to their requests.
  2. Freely given consent given by the data subject who sends its data through a form provided for such specific purpose.
  3. Sending communications by any channel, including electronically


The CIT UPC will process the contact details provided to inform and advise those interested who have specifically requested it. Thus, the CIT UPC will process the personal data of the interested parties to send newsletters about events, activities, news and promotions that may be of interest to them and related to the activity of the CIT UPC.

The lawfulness of processing:

  1. Specific consent that is requested of the interested party in the forms of the web, without in any case the existence of this consent conditions the provision of the main purpose of the form.
  2. Consent that is expressly given in the case of sending data through the specific form where users can request the receipt of newsletters.
  3. Processing applications for job offers

We process personal data of people who applies to job offers published by CIT UPC, and they will be processed in order to validate the candidacies to the positions to which they apply.

The lawfulness of processing:

  1. Processing is necessary for the purposes of the legitimate interests pursued by CIT UPC, taking into account the reasonable expectations of those applying to the job offers.
  2. Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.
  3. Freely given consent given by the data subject who sends its data through a form provided for such specific purpose.

In the case of candidatures submitted through the InfoJobs portal, the privacy policy determined in said portal will be applicable.

In addition to the foregoing, CIT UPC may carry out other processing of personal data. In this case, the data subject will receive the necessary information in relation to these treatments and CIT UPC will request its consent if it is necessary.

How long we will keep the data?

As a rule, data will be kept for as long as necessary to fulfil the purpose for which they were requested and to determine the possible responsibilities that may arise from this purpose and the processing of these data.

Among others, implies that CIT UPC will keep the personal data of the data subjects for the duration of the relationship with us and, where appropriate, during the period that is necessary for the formulation, exercise or defence of potential claims, or for comply with the legal obligations determined by the applicable legislation.

In the case of the data of the candidates who send us their candidacies to apply to selection processes, their data will be kept for a maximum of 1 year if they have not been admitted in any selection process during this period, or the interested party has not given your consent for their conservation for a longer period.

Once this period has expired, CIT UPC undertakes to cease processing all personal data, destroy them, block them or anonymize them as far as possible for the purpose for which they are kept.

To which third parties will the data be communicated?

As a rule, personal data will not be transferred to third parties, unless it is necessary to respond to the request, we are bound by law or the interested party has given us his or her consent.

In the case of applications for job offers, the data will be communicated to companies that may be interested in hiring candidates, either from the presentation of applications to specific open positions, or applications proposed by initiative from our consultants.

The fact of entering the data through the forms made available to the candidate implies the express acceptance of this data communication, which is essential for CIT UPC to provide the services that are requested.

We might also communicate data companies that provide us with services related to the ordinary and administrative activity of the company acting as processors, national or international, within the framework of the provision of services such as, among others, service providers of email, hosting web services, server hosting, management application services in SaaS mode, file archiving in the cloud and others.

Among others, we can communicate data such as the IP address to Google, which provides analysis services for web use, as indicated in our cookies policy.

The provision of these services may involve the processing of personal data by companies located in countries outside the European Economic Area (international data transfers). However, it will only be done to countries that offer an adequate level of protection or, in the case of entities in the US, that are accredited within the framework of the EU-US Privacy Shield. Decision (EU) 2016/1250 of the Commission, of July 12, 2016.

What are the rights of the data subjects when they provide us with their data?

Gladly we will inform you whether and which of your personal data is processed by us and for what purposes. Furthermore, given the respective legal conditions, you have the right to rectification, the right to restrict processing, the right to erasure, the right to object and the right to data portability.

These rights may be exercised free of charge by the data subject and, if applicable, by his/her representative, by means of a written and signed request, accompanied by a copy of his/her ID or equivalent document proving his/her identity, addressed to:

  • by email:
  • by postmail: Edifici Omega (planta 0), C/Jordi Girona, 1-3, 08034 Barcelona (Spain)

In the case of representation, you must prove by means of a written document and attaching a copy of the DNI or equivalent document that proves your representation.

In addition to the foregoing rights, the interested party shall have the right to withdraw the consent granted at any time through the procedure described above, without this withdrawal of consent affecting the lawfulness of the treatment prior to the withdrawal of this consent. CIT UPC may continue to treat the personal data of the interested party to the extent that the applicable law permits or persist any other legitimation that justifies it persists.

Opposition to the processing of candidate data implies the impossibility of providing the requested service so that the exercise of this right will result in the erasure of the data or limitation of the processing of the data in the terms established in our data conservation policy.

Additionally, in the case of the service of sending newsletters, the interested party has the right at any time to revoke the consent given for the sending of newsletters by notifying the CIT UPC that it does not wish to continue receiving them. To do this, the interested party may either revoke their consent in the manner described in the previous section or use the link included in each commercial communication to unsubscribe from the list of electronic communications receivers.

Irrespective of these rights and the possibility of asserting another administrative or legal redress, you also have the possibility at any time of asserting your right to complain to a supervisory authority, in particular, in the member state of your place of domicile, of your place of work or of the location of the alleged infringement if you are of the view that the processing of personal data affecting you infringes legal data protection regulations.

Update of your data

It is important that in order for us to keep your personal information updated, you inform us whenever there has been any change in them. Otherwise, we do not respond to the veracity of these and the implications it may have on treatment.

Security in the processing and custody of data

CIT UPC declares that it has applied the appropriate technical and organizational measures to guarantee and be able to demonstrate that the treatment is in accordance with current legislation and that the protection of the rights of the interested parties is guaranteed.

For this purpose, it has implemented a Personal Data Protection Management System to determine and apply the technical and organizational means at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of data provided by users, without prejudice to inform that security measures on the Internet are not impregnable.

Use of cookies

This website, like most websites on the Internet, uses cookies to improve the user experience. In our Cookies Policy, you will find information about what cookies are, what kind of cookies this website uses, how you can disable cookies in your browser and how to specifically disable the installation of third-party cookies.

Please read our Cookies Policy carefully before continuing to browse our website.

Modification of the Privacy Policy

CIT UPC can modify its Privacy Policy in accordance with the applicable legislation at all times. In any case, any modification of the Privacy Policy will be duly notified so that you are informed of the changes made in the processing of your personal data and, if the applicable regulations so require, the interested party can confirm their consent.