Cookie policy

1. Entity responsible

By means of this notice, Universia Holding S.L., registered in the Mercantile Registry of Madrid in volume 16,547, folio 107, page number M-28189, entry 4, with registered office at Avda. de Cantabria s/n, Ciudad Grupo Santander, 28660, Boadilla del Monte (Madrid), Spain and tax identification number B82976515, owner of this website (hereinafter, 'Universia' or the 'Publisher,' interchangeably), informs visitors and users of the website www.santanderopenacademy.com (hereinafter, the 'Website' and the 'Users' or the 'User,' respectively) about its cookies policy, to ensure that they are aware of the cookies that will be used during their browsing on the Website and so that they can give their consent to these cookies.

2. What are cookies?

Cookies can be defined as any type of data storage and retrieval device used in the terminal equipment of a user (computer/smartphone/tablet) when browsing the Internet with the purpose of storing information and retrieving information that has already been stored.

Cookies can be installed either directly by the websites visited by the user or by third parties to which the website is related, giving the website knowledge of their activities on the site or on others to which this website is related, for example: the location from which users access the site, connection time, the device used (fixed or mobile), the operating system and browser used, the pages most frequently visited, the number of clicks and data concerning the user's behaviour on the Internet.

For more information on how websites and apps use cookies, click here: https://www.allaboutcookies.org.

3. Personal data protection?

Under certain circumstances, the use of data storage and retrieval devices on recipients' terminal equipment, such as cookies, may involve the processing of personal data. Such data processing shall be deemed legitimate on condition that the users of the Website have given their consent after having been provided with clear and comprehensive information on the use of this data, in particular on the purposes of the data processing, as regards the protection of personal data.

For these purposes, it should be noted that the Cookies Policy (hereinafter, 'Cookies Policy') is complemented by the Privacy Policy of this Website.

Likewise, Universia relies on certain providers to manage the audience measurement service, in this case, particularly on Google or Meta. For example, with respect to the latter, User data that has given consent would be sent to Meta for audience measurement. You can find more information at the following link: https://www.facebook.com/legal/technology_terms.

Regarding these providers, when the user gives consent, they may additionally use the data for some of their own purposes as data controllers. These main purposes are as follows: (i) delivery of commercial and transactional messages; (ii) improving ads; (iii) personalizing features and content; and (iv) improving the security of their products. These purposes are exclusive to these third parties and are based on the consent of the Users.

Remember that you can reconfigure cookies or uninstall them as indicated in section 6. Can you revoke your consent? of this Cookies Policy. Likewise, remember that you can exercise your privacy rights as indicated in the Privacy Policy both for Universia and for Google or Meta as applicable.

The data sent to these providers for the purposes described above, including audience measurement, is classified in two ways: (i) Information that identifies Users and is always shared in a hashed form as a measure to ensure the confidentiality of the information (Browser ID and user ID) and on the other hand, there is (ii) Event Information that collects information about User interaction on the platform.

Finally, remind Users that installing these cookies may involve Google or Meta performing international data transfers to the United States, which could mean, in very isolated and specific cases, access to the data by authorities in that country in the course of investigations and national security.

However, in line with our high compliance standards in privacy matters, we inform you that between Google or Meta and their subcontractors in the United States, the Standard Contractual Clauses approved by the European Commission are signed as a recognized guarantee mechanism by the GDPR with the aim of preserving the security of the data that may be subject to an international transfer.

Regarding data transfers by Google for the Analytics service, you can consult this link for more information: https://support.google.com/analytics/answer/11609059?hl=es. Regarding data transfers by Meta, it is recommended to visit the following link: https://www.facebook.com/legal/EU_data_transfer_addendum/update.

4. Types of cookies used

This website uses the following types of cookies:

4.1 Technical and strictly necessary cookies

These are cookies inserted by the Publisher that are necessary for the proper functioning of the website or to provide a service requested by the user. In this regard, personalisation or preference cookies are considered necessary in order to remember information so that the user can access the service with certain characteristics that may differentiate their experience from that of other users, such as, for example, the language or the number of results to be shown in a search.

Technical cookies include, for example, user interface customisation cookies, cookies used by the Publisher to control traffic and data communication, session identification cookies, cookies used to share content on social media, etc.

Pursuant to Art. 22.2 of the LSSI (Information Society Services and Electronic Commerce Act), users do not have to give their consent for them to be used.

The table below provides more in-depth information about these types of cookies:

FIRST-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE

santanderopenacademy.com

OptanonConsent

This cookie is set by OneTrust's cookie compliance solution. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn their consent to the use of each category. This allows site owners to prevent cookies from each category being set on the user's browser, when no consent is given. This cookie typically lasts for one year, so that returning visitors to the site will have their preferences remembered. It does not contain any information that can identify the site visitor.

One year

santanderopenacademy.com

visid_incap_XXXXXX

Incapsula DDoS Protection and Web Application Firewall: cookie used to link certain sessions to a specific visitor (visitor representing a specific computer). To identify customers who have already visited Incapsula.

One year

santanderopenacademy.com

incap_ses_*

Incapsula DDoS Protection and Web Application Firewall: cookie used to link HTTP requests to a specific session (AKA visit). Re-opening the browser and accessing the same site are recorded as different visits, in order to maintain existing sessions (i.e. session cookie).

Session

santanderopenacademy.com

nlbi_XXXXXXX

Incapsula DDoS Protection and Web Application Firewall: this is a load balancing cookie to ensure that requests from a customer are sent to the same origin server.

Session

santanderopenacademy.com

OptanonAlertBoxClosed

This cookie is set by websites that use certain versions of OneTrust's cookie legal compliance solution. It is installed after visitors have seen a cookie information notice and in some cases only when they actively close the notice. It allows the website to display the message to a user no more than once. This cookie lasts for one year and does not contain any personal information.

One year

sso.santanderopenacademy.com

KEYCLOAK_3P_COOKIE

Cookie used by the Keycloak identity and access management system to secure the login service.

A few seconds

sso.santanderopenacademy.com

KEYCLOAK_3P_COOKIE_SAMESITE

Cookie used by the Keycloak identity and access management system to secure the login service.

A few seconds

THIRD-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE

universia.net

nlbi_XXXXXXX

Incapsula DDoS Protection and Web Application Firewall: Load balancing cookie, to ensure that requests from a customer are sent to the same origin server.

Session

universia.net

visid_incap_XXXXXX

Incapsula DDoS Protection and Web Application Firewall: cookie used to link certain sessions to a specific visitor (visitor representing a specific computer), in order to identify customers who have already visited Incapsula.

One year

universia.net

incap_ses_*

Incapsula DDoS Protection and Web Application Firewall: cookie used to link HTTP requests to a specific session (AKA visit). Re-opening the browser and accessing the same site are recorded as separate visits to maintain existing sessions (i.e. session cookie).

Session

4.2 Analytical/performance cookiess

These cookies may be first-party or third-party cookies and enable the Publisher to monitor and analyse the behaviour of users when they browse the Website or use its services. These allow the Publisher to know which pages are the most and least visited, how visitors browse the site and also to analyse browsing, allowing the Publisher to make improvements based on the analysis of this usage information. The information handled does not allow the user to be identified uniquely.

The table below provides more in-depth information about these types of cookies:

FIRST-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE  

santanderopenacademy.com

_ga

This cookie is associated with Google Universal Analytics and is used to distinguish unique users by assigning a randomly generated number as a customer identifier. It is included in every page request on a site and is used to calculate visitor, session and campaign data for site analytics reporting.

Two years

 

santanderopenacademy.com

_gat_UA-

This is a cookie used by Google Analytics to compile anonymous traffic data. They contain a unique visitor ID, time and information on the visit, including references. The real data on the visit is recorded on the Google server. In this way, Google provides reports that help to analyse how visitors use websites, including references, ranging from user experience to measuring the impact of SEO and advertising. Ultimately, it is used to limit the amount of data recorded by Google on high-traffic websites.

A few seconds

 

santanderopenacademy.com

_gclxxxx

Google conversion tracking cookie

Three months

santanderopenacademy.com

_gid

This is a cookie used by Google Analytics that enables the unique visitor tracking function. The first time a user accesses the website through a browser, this cookie will be installed. When this user re-enters our website with the same browser, the cookie will recognise the user as the same user. Google analytics will only treat the user as a new user if the user changes browser. Used to compile information on statistics for the use of the website without personally identifying visitors.

One day

THIRD-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE  

snapchat.comsc_at

 

Cookie associated with embedding content from Snapchat.

1 year

 

4.3 Personalisation or configuration cookies

These cookies enable the website to provide better functionality and personalisation. They may be set by the Publisher or by third parties.

The table below provides more detailed information on these cookies:

THIRD-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE

vimeo.com

vuid

When the play button is pressed, Vimeo will set third-party cookies to enable the video to play and to collect analytical data such as how long the viewer has watched the video. These cookies do not track users.

Two years

vimeo.com

player

When the play button is pressed, Vimeo will set third-party cookies to enable the video to play and to collect analytical data such as how long the viewer has watched the video. These cookies do not track users.

One year

vimeo.com

__cf_bm

This is a cookie required to support Cloudflare's bot management, currently in private beta. As part of our bot management service, this cookie helps to manage incoming traffic that matches the criteria associated with bots. This is a Cloud Foundry cookie.

A few seconds

4.4 Advertising/targeting cookies

These are cookies that store information on user behaviour obtained through the continuous observation of their browsing habits or their behaviour when using the services of the website, which enables the creation of a specific profile for displaying advertising in accordance with this profile. They also allow the Publisher to make improvements based on the analysis of the data. The information handled does not allow the user to be identified uniquely. They may be placed on the website either by the Publisher or by a third party.

The table below provides more detailed information on these cookies

FIRST-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE

santanderopenacademy.com

_fbp

This cookie is used by Facebook to deliver a range of advertising products, such as real-time offers from external advertisers.

Three months

 

THIRD-PARTY

ACCOUNT HOLDER (GUEST) NAME PURPOSE USEFUL LIFE

linkedin.com

lang

This domain is owned by LinkedIn. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or has accepted its terms and conditions.

Session

ads.linkedin.com

lang

This domain is owned by LinkedIn. This subdomain is connected to LinkedIn's marketing services that allow website owners to understand the types of users on their website based on LinkedIn profile data, in order to improve targeting.

Session

linkedin.com

bcookie

This domain is owned by LinkedIn. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agrees to its terms and conditions. For this reason, it is primarily classified as a tracking/targeting domain.

Two years

youtube.com

VISITOR_INFO1_LIVE

This cookie is used as a unique identifier to track video viewing.

One day

twitter.com

personalization_id

This domain is owned by Twitter. Its main business activity is: Social network services. When Twitter acts as a third-party host, it collects data through a variety of plugins and integrations, which are primarily used for tracking and targeting.

Two years

www.linkedin.com

bscookie

This domain is owned by LinkedIn, the business networking platform. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agrees to its terms and conditions. For this reason, it is primarily classified as a tracking/targeting domain.

Two years

linkedin.com

UserMatchHistory

This domain is owned by LinkedIn, the business networking platform. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agrees to its terms and conditions. For this reason, it is primarily classified as a tracking/targeting domain.

One month

doubleclick.net

test_cookie

This domain is owned by Doubleclick (Google). Its main business activity is the exchange of real-time advertising offers from Google.

A few seconds

youtube.com

YSC

YouTube is a Google-owned platform for hosting and sharing videos. YouTube collects user data through videos embedded on websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors on a wide range of its own and other websites.

Session

linkedin.com

lidc

This domain is owned by LinkedIn, the business networking platform. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agrees to its terms and conditions. For this reason, it is primarily classified as a tracking/targeting domain.

One day

linkedin.com

li_gc

This domain is owned by LinkedIn, the business networking platform. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agrees to its terms and conditions. For this reason, it is primarily classified as a tracking/targeting domain.

Two years

linkedin.com

AnalyticsSyncHistory

This domain is owned by LinkedIn, the business networking platform. It usually acts as a third-party host when website owners have placed one of its content sharing buttons on their website, although its content and services can be embedded in other ways. Although these buttons add functionality to the website on which they are placed, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or has accepted its terms and conditions. For this reason, it is primarily classified as a tracking/targeting domain.

One month

doubleclick.net

IDE

This domain is owned by Doubleclick (Google). Doubleclick's main business activity is the exchange of real-time advertising.

One day

youtube.com

CONSENT

YouTube is a Google-owned platform for hosting and sharing videos. YouTube collects user data through videos embedded on websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors on a wide range of its own and other websites.

17 years

t.co

muc_ads

This is a cookie that collects information in order to personalise advertising content on Twitter.

Two years

5. What is the legal grounds for the use of cookies?

Except in the case of strictly necessary technical cookies that do not require the User's informed consent to be used, the Publisher will only install cookies on the User's computer with the User's prior informed consent. In this regard, users may give their consent either by clicking on the 'Accept all cookies' button or by adjusting the settings for those cookies that the user freely chooses to accept via the cookie settings panel that the Publisher has made available to them when they first access the Website or App.

6. Can you withdraw your consent?

Once the cookies have been installed, users may withdraw their consent and delete them at any time. To do so, users can:

Use the content and privacy settings available in the browser you are using to browse the website. The following are some examples of procedures for withdrawing consent and deleting cookies, depending on the browser used:

Reconfigure the cookies accepted via the cookie settings panel that the Publisher makes available to you at all times and which you can access through the icon shown below that you will find on the portal in the bottom left corner:

7. Update to the Cookies Policy and contacts

This Cookies Policy may change depending on the cookies used. In the event that new types of cookies are included for which informed consent is required, the Publisher will duly inform the User and seek their consent.

Without prejudice to the previous paragraph, the Publisher recommends that you review this policy each time that you access our website so that you are properly informed about how and for what purpose we use cookies and are aware of any changes in the type of data collected.

If the User has any questions about the Website's Cookie Policy, they can contact the Publisher via the following Contact form, indicating 'Cookies Policy' in the subject field.