For Escola Superior de Enfermagem de São José de Cluny, the privacy and security of the personal data of its candidates, students, alumni, interns, teachers, employees and other partners are very important.

This policy applies to all systems, people and processes that make up the ESESJC information system. The commitment to the security of personal data was assumed by the Board of Directors and extends to all employees of the institution. ESESJC promotes information security and protection in the processing of personal data kept by the institution and collected through online forms, computer applications, or delivered / sent to its services.

In the processing of personal data, we respect your privacy, we reiterate our commitment to the implementation of compliance measures, in particular to guarantee:

​

1. lawful processing, supported by a legal basis, legitimate interest or consent of the data subject;

2. that the treatment is limited to the purpose for which the data was made available;

3. that there are mechanisms to obtain accuracy and completeness of the data made available by you;

4. minimizing the required data, requesting only those suitable for the purpose;

5. limitation on data storage, in accordance with defined retention periods;

6. the implementation of measures for integrity and confidentiality of information.

​​

ESESJC has procedures in place for ESESJC to comply with the principles described above and requirements of the new Regulation for the Protection of Personal Data (RGPD), for existing information systems and to carry out a prior impact assessment and implementation of measures for privacy in new data processing to be carried out in the future.

To find out more about how we collect, use, share and protect the personal data we collect, please consult the following sections of this Privacy Policy.

​

 

1. The São José de Cluny School of Nursing (ESESJC)

Founded in 1940, on October 13, 1948, ESESJC is recognized by Order of the Undersecretary of State for Social Assistance and approved by Dec. Law No. 38885 of August 28, 1952. With the integration of Nursing Education into Polytechnic Higher Education, recognized by Ordinance No. 795/91 of August 9, the ESESJC is endowed with legal personality and enjoys scientific, pedagogical, cultural, disciplinary, administrative and financial, with respect for the basic principles and rules of the National Higher Education System contained in the Law.

In its attributions, defined in ordinances issued by the successive Ministries responsible for Education, the ESESJC is authorized to run Degree, Post-Graduate, Post-Graduate and Master's courses in the field of Nursing, and, with accreditation of the degree and certification of the Internal Quality Assurance System by the Higher Education Assessment and Accreditation agency.

It is an Institution whose mission is to train professionals for such a high responsibility as that of being a Nurse. It privileges human training allied to scientific and technical training and has been established, firstly, by the learning opportunities and rigor given to them, in the sense of developing the skills inherent to the Nursing profession with which its trainees are equipped.

 

​

2. Categories of Personal Data processed by ESESJC

In order to carry out its duties, ESESJC, as the entity responsible for processing the personal data of its holders, collects the following categories of data, namely:

​

1. Identification data (eg name, photograph, ID number, CC, Passport, NIF);

2. Demographic data (eg, gender, place of birth, date of birth, nationality);

3. Parenting data (eg father's name, mother's name, educational qualifications);

4. Contact details (eg address, telephone, mobile phone, email);

5. Data for the purpose of applying for grants or social support;

6. Curriculum data and professional experience (eg CV, academic qualifications);

7. Image data (eg CCTV image, photo, video and audio);

8. Health data for purposes of justifying absences and absences (eg medical certificate, justification for absences, sick leave and leave).

 

​

3. Purposes of processing personal data, in compliance with the legal attributions and legitimate interest of ESESJC

In pursuit of its duties and depending on its type, ESESJC may process the personal data of its holders for the following purposes:

​

3.1. Candidate Data

• Collection, analysis and ranking of applications for ESESJC courses;

• Contact within the scope of the application process;

• Production of statistics and mandatory reporting to higher education control and accreditation institutions.

​

3.2. Student Data

• Academic management associated with the student's registration status;

• Student process management;

• Pedagogical management and assessment within the scope of the curricular units to be attended, including internships and clinical practices in entities outside the ESESJC;

• Contacts by teachers and staff in the academic field;

• Financial management (eg tuition fees, fees, fees, fines);

• School insurance management;

• Student card management;

• Production of statistics and mandatory reporting to higher education control and accreditation institutions.

• Collection of image, video and audio in specific teaching activities or events promoted by ESESJC's legitimate interest

• Publication of image, video and audio of public events organized by ESESJC

 

​

3.3. Data from Former Students (alumni)

• Professional monitoring of former students, as assigned by the ESESJC Observatory;

• Production of statistics and mandatory reporting to higher education control and accreditation institutions.

Personal data will be kept for the period of time that proves to be necessary or required by law depending on the purposes for which they are intended, for the retention period set out in the mandatory deadlines for legitimate interest, regulation or legal imperative, with the application of information retention criteria appropriate for each treatment and in line with the legal and regulatory obligations to which ESESJC is subject.

 

​

4. Purposes of processing personal data, by explicit consent of the data subjects

With explicit consent, Your data may be used to:

• Receive by email the disclosure of new courses, activities and events promoted by ESESJC;

• Receive job offers and invitations to job promotion sessions by email;

• Production of informative and promotional content for ESESJC (including its image), and publication in the usual channels: external website and social networks.

 

​

5. Transfer of personal data with other entities

In order for ESESJC to be able to fulfill its duties and in order to provide you with a quality service, ESESJC may have to communicate your personal data, or give access to them, to other entities. In these cases, ESESJC will only transmit your personal data to the following categories of recipients:

​

1. Entities and authorities to whom personal data must be communicated due to legal obligation (Social Security, Regional Government of Madeira, Secretary of Education, Tax Authority, Public Ministry, courts and police authorities);

 

   2. ​ ESESJC subcontractors in charge of processing personal data (accounting, provision of computer services, internet and communications services, insurance companies);​

   3. Joint Persons Responsible for Processing, namely for transporting students and issuing student cards.

 

​

6. Rights of Data Subjects

The user, as data subject, enjoys the following rights:

​

6.1. right of access

Whenever you request it, you can obtain information that your personal data is processed by ESESJC. You can also access your personal data, as well as obtain the following information:

• The purposes for which your personal data are processed;

• The type of personal data that is processed;

• Entities to whom your personal data may be communicated, including European Union entities or international organisations;

• The retention period of your data or, if this is not possible, the criteria for setting that period;

• The rights you enjoy in relation to the processing of your personal data;

• If personal data has not been collected from you, information about its origin and type of data in question;

 

​

6.2. right of rectification

Whenever you consider that your personal data (provided by you) are incomplete, you can request that they be completed, or you can request their rectification if it turns out that they are incorrect. (eg address, NIF, contacts).

 

​

6.3. right to erasure

In certain circumstances, the data subject may request the deletion of their personal data. ESESJC will inform you of the possibility or not to satisfy this right in the face of existing retention obligations due to legal imposition or legitimate interest.

 

​

6.4. Right to limitation of treatment

The right to limit the processing of your personal data allows you to ask the controller to restrict the scope of access and processing of your personal data or to suspend processing activities. You may request the limitation of the processing of your personal data in the following cases:

• if you dispute the accuracy of your personal data, for a period of time that allows ESESJC to verify its accuracy;

• if ESESJC no longer needs the personal data for processing purposes, but if such data is necessary for the purposes of declaration, exercise or defense of a right in a legal proceeding; or

 

​

6.5. Right to portability

You may request ESESJC to deliver, in a structured, commonly used and machine-readable format, the personal data you provide. You also have the right to request that ESESJC transmit this data to another controller, provided that this is technically possible.

The right to portability only applies in the following cases:

• when the processing is based on explicit consent or the performance of a contract;

• when the processing in question is carried out by automated means.

 

​

6.6. right of opposition

You have the right to object to the processing of your personal data at any time, for reasons related to your particular situation, and when the processing is carried out for purposes other than those for which the data were collected, but which are compatible with them. .

ESESJC will, in these cases, stop processing your personal data, unless it has legitimate reasons to carry out such treatment and these prevail over its interests.

The exercise of your right of opposition may imply the suspension or cessation, in whole or in part, of the benefits associated with the purpose of processing the data in question.

You can also object to the processing of your data for direct marketing purposes.

 

​

6.7. Right to withdraw your consent

In cases where the processing of data is based on your consent, you may withdraw your consent at any time.

If you withdraw your consent, your personal data will no longer be processed, unless there is another reason, such as legal and regulatory obligations or the public interest of ESESJC, which justifies this treatment.

The revocation of Your consent may imply, among others, the impossibility of being able to receive job offers or participate in extracurricular activities or events organized by/through ESESJC.

 

​

6.8. Right to file complaints with the ESESJC or supervisory authority

The exercise of your rights is free of charge, unless the request is manifestly unfounded or excessive, in which case a reasonable fee may be charged considering the associated costs.

The response to your requests must be provided within a maximum period of 30 days, unless it is a particularly complex request, in which case this period may be longer.

ESESJC appointed a Personal Data Protection Officer (DPO), pursuant to articles 37, 38 and 39 of the General Data Protection Regulation. You can contact the ESESJC EPD and exercise your rights through the following channel:

- E-mail:  via e-mail to the addressrgpd@esesjcluny.pt;

If you wish to file a complaint regarding matters related to the processing of your personal data, you may do so with the National Data Protection Commission, the competent supervisory authority in Portugal (www.cnpd.pt).

 

​

7. Changes to this policy

ESESJC may change this Privacy Policy at any time to reflect current privacy practices. When we make changes to this statement, we revise the “date updated” at the top of this page. We advise you to periodically read this Privacy Policy so that you are aware of how ESESJC protects your information.