Privacy Policy
Universidad Católica Digital de Guadalupe · Toledo, Spain
This page explains what data of yours we process, why we process it, for how long, and what you may require of us. It is written to be understandable; if anything is not clear, write to us and we will correct it.
The identifying details of the controller—tax identification number, registered address, registration details, and contact address for data protection matters—are provided below. Everything else in this document derives from the platform's own operation and is accurate.
Who processes your data
- Controller: Universidad Católica Digital de Guadalupe.
- Promoted by: Private association of the faithful «Gaudium de veritate (the joy of truth)».
- Registered office: Toledo, Spain.
- Tax identification number: R4500511C
- Address: Calle Río Cabriel, 1, 45007 Toledo
- Contact for data protection: info@iacampus.es
Until that contact is published, you may exercise your rights by writing to the admissions address shown in the footer of this website.
What data we process and why
| When | What | Why | Legal basis |
|---|---|---|---|
| You request information | Name, email address, telephone number, and your message | To respond to you and tell you how that course of study works | Your consent (Art. 6(1)(a) GDPR) |
| You enroll | Enrollment and payment data | To provide you with the educational service | Performance of the contract (Art. 6(1)(b)) |
| You study | Progress, exercises, assignments, and conversations with the assistants | To teach you and be able to document what you have done | Contract and legal obligation (Art. 6(1)(b) and (c)) |
| You apply for a scholarship | What you tell us about your situation and the country you declare | To decide on your application | Your consent |
| You request a correction review | Your submission and the context of the correction | For a person to review it | Legal obligation and your consent |
You declare the country in a scholarship application yourself. We never infer it from your IP address: geolocating means making an inference about a person, and it also fails. The browser is also denied access to geolocation, the camera, and the microphone throughout the platform.
How long we keep your data
- Conversations with the assistants: 36 months, after which they are automatically deleted. The same applies to what you write in the summaries, the responsiones (responses), and the help ladder.
- If you requested information and never enrolled: 24 months.
- Academic record (enrollments, grades, degrees): it is retained. This is not our decision: there is a legal obligation to retain it, and Art. 17(3)(b) GDPR excludes from the right to erasure anything that must be kept by law. Nor do we anonymize it, because an anonymous record does not certify anything.
- Record of what an AI decided about you (what it corrected and with which model): it is retained separately from the conversation, because the European Artificial Intelligence Act requires that it be possible to reconstruct it.
Unenrolling does not mean deleting everything, and it is important to know this beforehand: when you unenroll, the pedagogical interaction is deleted and your access is closed, but the academic record remains for the reasons stated above.
Who else sees your data
To operate, the platform relies on providers that act on our behalf and only for the purposes assigned to them:
- Artificial intelligence models (OpenAI, DeepSeek, Anthropic, Google): they receive the text necessary to respond or correct. What each one does is detailed in the AI use policy.
- Google Cloud Text-to-Speech: converts text to speech.
- OVHcloud (European Union): stores class videos and backup copies.
- The email service through which we write to you.
There are international transfers, because some of these AI providers are located in the United States. They are covered by adequacy decisions and the European Commission's standard contractual clauses.
We do not sell or disclose your data to anyone else, and we do not use third-party analytics: visits to the showcase site are counted in-house, as a number per day and per page, without an IP address, without a cookie, and without any identifier of any kind. We do not know who you are when you view the website.
Cookies
We use only two, and both are technical cookies—the kind that the law does not require you to consent to:
idioma: remembers which language you prefer to read in.session: keeps your session active while you are inside the campus.
That is why you will not see a cookie banner: there is nothing to consent to.
Automated decision-making
No decision affecting you is made automatically. AI proposes—a correction, a grade, a learning path—and a person always validates it before it counts. Publishing a lesson, issuing a final grade, and conferring a degree require the intervention of an instructor or the administration. This is what keeps the platform outside Article 22 GDPR, and it is explained in detail in the AI use policy.
If you believe an automated correction is unfair, you may challenge it: a person will review it, and we will respond to you in writing within 10 business days.
Your rights
You may ask us at any time to access your data, rectify it, erase it, restrict its processing, object to its processing, and take it elsewhere (data portability). If you gave us your consent, you may withdraw it whenever you wish, without affecting what was done up to that point.
If you believe we have not handled things properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). We would like you to tell us first, but you are under no obligation to do so.
Changes to this policy
If we change anything that affects you, we will say so here and—when appropriate—we will write to you about it. The version you are reading is the one currently in effect.