iArtHis_LAB
Privacy and Cookie Policy
Information on personal data processing, technical cookies and consent management across this portal.
Last updated: January 2026
1. Data controller
The controller responsible for personal data collected through this website is:
- Entity: Universidad de Málaga (UMA)
- Tax ID: Q2918001C
- Address: Bulevar Louis Pasteur, 43 · 29010 Málaga (Spain)
- Website: www.uma.es
Data Protection Officer (DPO):
Manuel Moreno Linde
Pabellón de Gobierno y Paraninfo, Bulevar Louis Pasteur, 43 · 29010 Málaga
Email: dpo@uma.es
2. Data collected and purpose
The contact form collects the following personal data:
- Name
- Email address
- Subject and message
- Technical security information: an irreversible identifier derived from the IP address may be generated to prevent abuse and duplicate submissions.
The purpose of processing is to manage and answer enquiries, questions or suggestions submitted by users.
3. Legal basis for processing
Processing is based on the data subject’s consent (Article 6(1)(a) GDPR), freely, specifically and unambiguously given when the contact form is submitted.
4. Data retention
Data are retained only for as long as necessary to manage the enquiry and apply the form’s security measures. In the local logging mode used for testing, the configured retention period is 7 days, and records older than that are removed during portal activity. When a message is delivered to the institutional mailbox, retention is governed by the policies and obligations applicable to that mailbox.
5. Recipients
Data are not disclosed to third parties unless required by law. Messages are forwarded internally to the iArtHis_LAB team at the Universidad de Málaga.
6. Data subject rights
Data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection at any time by writing to dpo@uma.es and using the subject line “Data protection — iArtHis_LAB”.
They also have the right to lodge a complaint with the competent supervisory authority:
- AEPD (Spanish Data Protection Agency): www.aepd.es
- CTPDA (Andalusian Council for Transparency and Data Protection): www.ctpdandalucia.es
7. Cookie policy
This portal uses necessary technical storage and may integrate third-party services subject to user consent.
7.1 First-party cookies and storage — technical
These are required for the portal to function and are not used for advertising.
| Name | Purpose | Duration |
|---|---|---|
portal_session | Secure management of the contact-form session, including its CSRF token and basic submission controls. | Session |
portal_language | Remembers the language selected by the user. | 1 year |
humartech_gdpr | Stores the user’s consent preferences in localStorage; it is not an HTTP cookie. | Persistent, until removed or changed by the user |
7.2 Third-party services
Some pages or integrated applications may use external services such as Google Maps or Google Fonts. These resources should be loaded only where the required legal basis or consent exists. Their use may involve a connection to Google servers and transmission of the user’s IP address. See Google’s Privacy Policy.
7.3 UMA Cookie Policy
For further information on cookie use across Universidad de Málaga systems, see the UMA Cookie Policy.
7.4 Managing consent
You can change your preferences at any time:
8. Security
This website applies technical and organisational measures to protect personal data against unauthorised access, loss or alteration, including HTTPS-encrypted communication, CSRF protection, rate limiting and contact-form validation.
9. Changes to this policy
This policy may be updated to reflect regulatory or functional changes to the website. The date of the latest update appears at the beginning of the document. We recommend checking it periodically.
