Privacy Policy

This Privacy Policy applies to and informs website users and other concerned parties about the processing of personal data that may be collected within the framework of their contractual or corporate relationship with the companies of the BME Group, or through the websites of BME Group companies.

For the purposes of this Privacy Policy, the Data Controller will be the company within the BME Group with which the data subject maintains a contractual, corporate, or similar relationship that requires the processing of personal data. The companies comprising the BME Group and potentially acting as Data Controllers are:

Notwithstanding the above addresses, BME Group companies may be contacted via email at: info@grupobme.es

DATA SUBJECT TO PROCESSING

BME Group will process the personal data provided by data subjects (e.g., name, surname, email, telephone, etc.) within the context of their relationship through the various channels made available by the Group companies (e.g., website, email, contact forms, etc.), or as a result of their contractual or corporate relationship with any BME Group company.

Additionally, by browsing this website and through the use of cookies, BME Group collects user data (such as browser type, operating system, or IP address) in order to improve navigation and effectively manage the website. More detailed information is available in the site's Cookie Policy.

PURPOSES AND LEGAL BASIS OF PROCESSING

BME Group will process personal data for the proper management, development, and execution of its relationship with data subjects, as well as for any additional actions derived from said relationship. Specifically, BME Group may process the data for the following purposes:

•  

• Responding to information requests and inquiries made by the data subjects via the available channels, such as the email address provided on the website. This processing is based on the consent granted by the data subject upon submission.

• Evaluating applications and information submitted to participate in recruitment processes. This processing is based on the data subject’s consent by participating.

• Managing registration and attendance at events organized or offered by BME Group or its partners. This processing is based on the data subject’s consent upon registering.

• Managing enrollment, course registration, participation, delivery of documentation and educational materials, and other formalities related to the student's relationship with Instituto BME, necessary for course delivery. This is based on the consent of the student and the legitimate interest of BME Group to maintain the relationship.

• Managing contracts, relationships, and invoicing with suppliers necessary for providing BME Group’s services and activities, based on the performance of the relevant contract.

• Sending communications, newsletters, and information about BME Group campaigns, products, and services, based on the consent of the data subject or BME Group’s legitimate interest in keeping stakeholders informed.

• Complying with requirements from the CNMV, administrative and/or judicial authorities, and BME Group’s legal obligations, based on legal compliance.

• Ensuring the health and safety of personnel, stakeholders, and BME Group facilities through measures including surveillance systems and access control, based on legitimate interest and, where applicable, public interest.

• Maintaining contractual relationships with members and clients, and providing services offered by any BME Group company.

• Recording phone calls and electronic communications, based on compliance with legal obligations (including MiFID I, MiFID II, MiFIR), and on BME Group’s legitimate interest to ensure service quality, verify communication integrity, and for evidentiary purposes.

• Data collected through cookies will be processed to enable proper website functionality, based on the legitimate interest of BME Group and the data subject’s consent through cookie acceptance or rejection.

 

Please note that providing all required personal data marked as mandatory is necessary to fulfill the above purposes. Failure to do so may result in the impossibility of fulfilling such purposes.

DATA RETENTION

Personal data will be retained only for the time strictly necessary to effectively fulfill the stated purposes and, in any case, as long as they remain appropriate and relevant to the purpose for which they were collected.

Where consent has been provided, data will be retained until the data subject withdraws consent or objects. Withdrawal of consent will not affect the lawfulness of prior processing.

Regarding browsing and cookie data retention, please refer to our Cookie Policy.

Additionally, to comply with BME Group’s legal obligations, data may be securely blocked after withdrawal of consent, rights exercise, or fulfillment of the processing purpose, in order to address potential responsibilities or legal requirements related to the data subject.

RECIPIENTS AND INTERNATIONAL DATA TRANSFERS

Personal data collected from BME Group data subjects will not be shared with third parties, except where legally required or necessary for fulfilling the existing relationship. However, based on BME Group’s legitimate interest, data may be shared with SIX GROUP SERVICES Ltd. (BME Group’s parent company, based in Switzerland, an adequate jurisdiction) for internal administrative purposes.

Additionally, as outlined in the Cookie Policy, and where service providers outside the European Economic Area are used, international data transfers (e.g., to the United States) may occur. In all cases, BME Group adopts appropriate security measures to ensure data protection and confidentiality.

DATA SUBJECT RIGHTS

At any time, data subjects may exercise the following rights in accordance with current data protection legislation:

•  

• Right of Access: To know what personal data is held, its origin, recipients, and processing purposes.

• Right to Rectification: To correct inaccurate or outdated data.

• Right to Erasure: To request the deletion of their data.

• Right to Restriction of Processing: To restrict processing while allowing data retention for specific purposes (e.g., legal claims).

• Right to Data Portability: To receive their data in a structured, commonly used, machine-readable format and, where applicable, transfer it to another service provider.

• Right to Object: To object to processing based on BME Group’s legitimate interest.

• Right to Withdraw Consent: At any time, without affecting the lawfulness of prior processing.

 

If the processing of data is necessary to exercise or respond to claims, comply with legal obligations applicable to BME Group, if the requirements of the GDPR are not met, or if the interests of third parties and/or BME Group must prevail, the request to exercise your rights may be lawfully denied with due justification.

The exercise of these rights must be addressed to the BME Group Data Protection Officer.

Data subjects may exercise their rights by completing the following form: LINK

Alternatively, requests to exercise data protection rights may be sent to:

Data Protection Officer – BME Group
Plaza de la Lealtad, 1
28014 Madrid
Spain
protecciondedatos@grupobme.es

Rights must be exercised directly by the data subject, clearly indicating which right they wish to exercise and the specific BME Group company to which the request is addressed. All requests must be accompanied by a copy of the national ID document (DNI) or a similar official form of identification

If a satisfactory response is not received regarding the exercise of these rights, data subjects may file a complaint with the Spanish Data Protection Authority at www.aepd.es.

SECURITY MEASURES

BME Group has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, guaranteeing the confidentiality, integrity, and availability of personal data, and preventing its loss, alteration, or unauthorized access.

PRIVACY POLICY UPDATES

BME Group reserves the right to modify this Privacy Policy in accordance with Spanish data protection laws. Any updates will be communicated to data subjects via publication on the website or other appropriate means. Data subjects are encouraged to review this Policy periodically for changes.

Last updated: January 2022