Additional Information


Who is the controller?

IESE Business School (Universidad de Navarra), with C.I.F. number R-3168001J, postal address in Pearson Avenue, 21, 08034, Barcelona (Spain) and e-mail

IESE Business School (Universidad de Navarra) has a Data Protection Officer, whose contact details are as follows:

What is the purpose of the processing?

At IESE Business School (Universidad de Navarra) we process your personal data in order to publish in the Alumni Directory the name, surname and program attended by the data subject.

Under no circumstances will automated individual decision-making techniques be used, nor will profiles be created based on the information provided by the data subject.

What is the lawfulness of the processing of your personal data?

The legal basis for the processing of your personal data lies in the legitimate interest of IESE [article 6.1.f) RGPD], which consists of providing students access to the published personal data of other students for information purposes, taking into account that, in addition, this is basic personal data and does not include any special category of personal data.

Who will be the recipients of your personal data?

No personal data will be transferred to third parties, unless legally required to do so. However, the data subject is informed that the personal data published in the Directory will be viewed by all IESE alumni, once they have accessed it securely using their username and password.

How long do we keep your personal data?

The personal data obtained will be kept until they are no longer necessary for the purposes indicated or until the end of the period required for compliance with a legal obligation that requires their subsequent conservation.

What are your rights?

Access You may request confirmation as to whether or not we are processing personal data concerning you and, if so, you will have the right to access your personal data that is being processed
Rectification You can change your personal data when they are inaccurate or incomplete
Erasure You may request the erasure of your personal data when, among other reasons, and provided that there are no exceptions to the exercise of this right:
  • They are no longer necessary for the purposes for which they were collected
  • Withdraw your consent (where this is the legal basis for the processing)
  • Objects to the treatment and no other legitimate grounds for such treatment prevail
  • Your personal data have been processed unlawfully
Restriction of processing You may request a restriction of processing of your personal data:
  • While the accuracy of your data is being checked
  • Where the processing is unlawful, but you object to the deletion of your personal data
  • When it is no longer necessary to process your personal data, but you need them for the exercise or defense of claims
  • Where you have objected to the processing of your personal data for the performance of a task carried out in the public interest or for the satisfaction of a legitimate interest, while verifying whether the legitimate grounds for the processing prevail over your own
Data portability You may receive, in electronic format, the personal data that you have provided to us, as well as transmit them to another entity
Object You may object to the processing of your personal data, unless there are compelling legitimate grounds for doing so which prevail over your interests, rights and freedoms, or for the formulation, exercise or defence of any claim.


As a data subject, you may exercise these rights by writing to IESE's Data Protection Officer at the postal address located at Avenida Pearson, 21, 08034, Barcelona (Spain) or by e-mail to, accompanied by proof of your identity. You will also have the right to file a complaint with the supervisory authority [Agencia Española de Protección de Datos (] if, on our part, your request is not acted upon within a maximum period of one (1) month from its submission.

Please inform us of any changes in your personal data in order to keep our database up to date.