Skip to content
Language:EN
Contact us

Privacy policy

This is a translation of the Spanish privacy policy. In case of discrepancy, the Spanish version prevails.

Data controller

  • Name: Asociación DIANA UCLM
  • Tax ID (CIF): G21871744
  • Registered address: Avda. Carlos III, nº 21, Campus Fábrica de Armas, 45004 Toledo (Spain)
  • Email: [email protected]

What data we process and why

Team members. On the team pages we publish the name, department, role and, where applicable, the photograph of the people who make up DIANA. Next to the name there is an icon that opens a LinkedIn search for that name or, if the person has given us their profile address, goes straight to it; anyone who does not want the icon tells us and it is removed. Clicking it takes you away from our website, and LinkedIn processes the data under its own policy; DIANA does not embed any LinkedIn element in the website. People who leave the association may continue to appear as former members (name, department, role and seasons) if they expressly authorise it. Next to the name we may show the person’s history at DIANA, that is, the role and department they held in each season, where recorded; anyone who does not want it shown tells us and it is removed.

  • Legal basis: the express consent of each person, collected in writing beforehand. Anyone who does not give it does not appear on the website.
  • Retention period: while the person is a member of the association; if they authorise continuing to appear as a former member, until they withdraw their consent.

Applications to join. If you fill in the form to join DIANA, we process your name, email address, phone number (if you provide it), degree and year, the department you are interested in, the text in which you explain why you want to join and, if you attach it, your CV in PDF.

  • Purpose: to manage your application and contact you during the selection process.
  • Legal basis: your consent, which you give by ticking the box before sending, and the taking of steps prior to your joining, at your request.
  • Retention period: up to three months after the application round closes. After that period the data are deleted, except for those of people who join, which are then processed as member data.

Photographs of activities. We publish images of competitions, workshops and events in which identifiable people may appear.

  • Legal basis: the consent of the people who appear.
  • If you appear in a photograph and want us to remove it, write to [email protected] and we will remove it.

What we do NOT do

  • We do not use cookies. Neither our own nor third-party, analytics or advertising cookies.
  • We do not build profiles or make automated decisions.
  • We do not share your data with third parties for commercial purposes, nor do we sell it.
  • We do not send commercial communications.

Visitor statistics

We use Cloudflare Web Analytics, which measures visits without cookies and without collecting data that could identify a person. No profile is built and browsing is not tracked across websites.

Recipients

The website is hosted by Cloudflare, Inc., which acts as data processor. Applications to join are stored in a spreadsheet and a Google Drive folder belonging to the association’s account, with access limited to the DIANA members who manage the selection; Google acts as data processor. Apart from that, no data are disclosed to third parties unless required by law.

These providers operate with the safeguards set out in Chapter V of the GDPR for international data transfers.

Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given.

To do so, write to [email protected] stating which right you wish to exercise. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

Minors

If any person under 18 is a member of the association, publishing their name or image requires the written authorisation of their father, mother or legal guardian.

Changes to this policy

If the way we process data changes (for example, if a newsletter or a tool that uses cookies is added in the future), we will update this policy and say so on this same page.

Last updated: 13 October 2026