Yes, but only in the places indicated and with the appropriate restrictions. Student grades are personal data and therefore not public. However, in the interests of transparency, evaluations can be made known to evaluation colleagues.
Author Archives: Sara Morgado
How to ask for consent?
Consent must be given individually for each treatment in an explicit and affirmative way.
What data is legitimate to process?
Processing is only lawful if and to the extent that at least one of the following situations applies: The data subject has given their consent to the processing of their personal data for one or more specific purposes; Processing is necessary for the performance of a contract to which the data subject is a party, …
What is the procedure when you become aware that data that has been collected and processed is in the possession of a third party?
The GDPR has very clear measures for these cases. There are deadlines for informing the Data Protection Supervisor, who must inform the National Data Protection Commission within 72 hours of becoming aware that the data has been compromised. If the breach could significantly affect the data subject, it may be necessary to inform them.
Have teaching and non-teaching staff asked about the need to collect their personal data?
All personal data collected by the organic units of the UPB are mandatory in the context of employment in the civil service.
Applicants for CTESP, master's degrees and other programmes (e.g. non-degree courses) ask what we do with their personal data if their application is not accepted. What should I say?
Applicants who do not become students, either because they have not been accepted, because they give up before starting, or because the procedure runs out at the end of the application, have their personal data deleted at the end of the period needed to guarantee the claim deadlines, with the exception of billing data, if …
Students have been asking why the UPB needs to know all the information it asks for. What should I answer them?
Most of this data is needed to answer official surveys such as RAIDES. In order to do this, educational institutions keep this information for the duration of the student’s stay and for a further two years after their last enrolment.
What is the role of the Data Protection Supervisor?
The person responsible for informing and advising all actors on their obligations under the applicable legislation, monitoring compliance with the regulation or other EU or national data protection provisions, as well as with the organization’s privacy policy, providing advice on the matter and monitoring the implementation of the data protection impact assessment, as well as …
Continue reading “What is the role of the Data Protection Supervisor?”
In what situations is it lawful to process personal data?
For data processing to be lawful, personal data must be processed on the basis of the consent of the data subject concerned or on another legitimate basis provided for by law, either in this Regulation or in another act of Union or Member State law referred to in this Regulation, including the need to comply …
Continue reading “In what situations is it lawful to process personal data? “
What is data pseudonymisation?
It is the process whereby there is no longer a link between the data subject and the data. In simpler terms, it consists of removing, modifying or replacing individual characteristics with coded representations to ensure that personal data cannot be attributed to an identified or identifiable natural person.