About the legality of processing personal data

At UPB, the processing of personal data depends on the verification of conditions of legitimacy and the verification of the lawfulness of the purpose of such processing, as well as the observance of the principle of proportionality lato sensu. Specifically, all processing of personal data at UPB will only be done as long as: a) It is necessary for the pursuit of legitimate interests and if the data subject has unequivocally given their consent; b) It is necessary for the performance of a contract or for the fulfilment of any legal obligation to which the controller is subject; c) It is necessary for the fulfilment of obligations and the exercise of specific rights of the UPB, or of the data subject in terms of labour legislation, social security and social protection, under the terms of the GDPR; c) It is necessary for the protection of the vital interests of the data subject or another individual; d) It is necessary for the performance of a task carried out in the public interest or in the exercise of official authority in which the controller is vested; e) It is necessary for the pursuit of the legitimate interests of the controller or of a third party to whom the data are disclosed, provided that the interests or the rights, freedoms and guarantees of the data subject are not overridden.