Website: https://navalis.institute/
Last updated: 20 August 2026
This Privacy Policy governs the processing of personal data collected through the website https://navalis.institute/, as well as through contact forms, admission processes, enrolment, the purchase of training programmes, educational platforms and any other channel related to the services offered under the trade name Navalis Institute.
Navalis Institute carries out specialised training activity aimed at the maritime, naval, nautical, marine engineering and maritime operations sectors and related professional areas, through its own advanced training programmes.
The activity carried out under the Navalis Institute brand is managed by NEXORA GENERATION, SOCIEDAD DE RESPONSABILIDAD LIMITADA, the entity acting as data controller of the personal data in accordance with the General Data Protection Regulation and other applicable legislation.
1. IDENTITY OF THE DATA CONTROLLER
The controller of the personal data collected through Navalis Institute is:
Company name: NEXORA GENERATION, SOCIEDAD DE RESPONSABILIDAD LIMITADA
Short form: Nexora Generation, S.L.
Legal form: Single-member private limited company (Sociedad de Responsabilidad Limitada Unipersonal, SLU)
NIF / CIF (Spanish tax ID): B93900314
Registered and tax address: C/ Lladró y Mallí, 10, Esc. C, Piso 3, Pta. 14 — 46007 València (Valencia), España
Main CNAE (activity code): 8559 — Other education n.e.c.
Trade name: Navalis Institute
Website: https://navalis.institute/
Email: admision@navalis.university
For the purposes of this Policy, references to Navalis, Navalis Institute, the website, we, us or equivalent expressions refer to the training activity carried out by Nexora Generation, S.L. under that trade name.
2. APPLICABLE LEGISLATION
The processing of personal data carried out through Navalis Institute is governed mainly by:
Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
Other applicable Spanish and European legislation.
3. SCOPE OF APPLICATION
This Policy applies to the processing carried out through:
The Navalis Institute website.
Information forms.
Admission applications.
Enrolments.
Purchase of programmes.
Virtual campus.
Educational platforms.
Academic communications.
Support services.
Administrative management.
Invoicing.
Training certification.
4. NATURE OF THE TRAINING PROGRAMMES
Navalis Institute develops and markets its own specialised training related to the naval, maritime, nautical and marine engineering fields and associated professional sectors.
The training offer may include:
Technical courses.
Diploma programmes.
Specialised programmes.
Institution-specific master's programmes.
Advanced professional training.
Executive programmes.
Maritime specialisations.
Continuing education.
Unless expressly stated otherwise, the programmes offered by Navalis Institute are institution-specific training developed by Nexora Generation, S.L.
This training does not automatically constitute:
Official Spanish university degrees.
Qualifications registered in the Spanish Register of Universities, Centres and Degrees (RUCT).
Regulated professional licences.
Official certifications issued by public bodies.
Where applicable, completion of the programme may lead to the issue of the institution's own certificates, diplomas or accreditations in accordance with the established requirements.
5. DATA PROCESSING PRINCIPLES
Navalis Institute will process personal data in accordance with the principles set out in the GDPR.
5.1. Lawfulness, fairness and transparency
Data will be processed on a valid legal basis and with clear information provided to the user.
5.2. Purpose limitation
Data will be used only for specific, legitimate and defined purposes.
5.3. Data minimisation
Only the information necessary for each processing operation will be collected.
5.4. Accuracy
Data must be kept up to date and accurate.
5.5. Storage limitation
Data will be kept for as long as necessary for each purpose and for the applicable statutory periods.
5.6. Security and confidentiality
Measures will be applied to protect information against unauthorised access, loss or alteration.
5.7. Accountability
Nexora Generation, S.L. will apply organisational and technical measures to ensure regulatory compliance.
6. PURPOSES OF PROCESSING
Personal data may be used to:
6.1. Information requests
Handle enquiries relating to:
Training programmes.
Content.
Delivery formats.
Duration.
Requirements.
Enrolment processes.
6.2. Admission processes
Where a course requires prior information, data may be processed to:
Manage applications.
Review documentation.
Assess requirements.
Contact candidates.
Decide on admission processes.
6.3. Enrolment and contracting
Data may be used to:
Formalise registration.
Manage training contracts.
Create academic records.
Activate access.
Administer the services purchased.
6.4. Provision of educational services
During the training, data may be processed to:
Provide materials.
Manage virtual campuses.
Record participation.
Manage activities.
Carry out assessments.
Provide academic support.
6.5. Academic monitoring
Data may be managed relating to:
Student progress.
Activities completed.
Results.
Completion of the programme.
Fulfilment of requirements.
6.6. Certificates and diplomas
Data may be used to:
Issue certificates.
Generate the institution's own diplomas.
Record accreditations.
Verify documents issued.
6.7. Administrative and financial management
Includes:
Invoicing.
Payments.
Collections.
Refunds.
Accounting.
Tax obligations.
6.8. Academic communications
Communications may be sent relating to:
Access.
Enrolments.
Activities.
Assessments.
Changes to the training.
Certifications.
6.9. Commercial communications
Where there is a valid legal basis, communications may be sent about:
New programmes.
Naval training.
Specialised courses.
Events.
News.
Updates.
6.10. Site security
Technical data may be used to:
Protect systems.
Detect unauthorised access.
Prevent fraud.
Manage incidents.
7. LEGAL BASES FOR PROCESSING
Processing may be based on:
7.1. Performance of a contract
To:
Manage enrolments.
Deliver training.
Manage access.
Process payments.
Issue documentation.
7.2. Pre-contractual measures
Where a person requests information before purchasing a programme.
7.3. Legal obligations
To comply with obligations that are:
Tax-related.
Accounting-related.
Commercial.
Administrative.
7.4. Consent
For:
Voluntary commercial communications.
Non-essential cookies.
Optional forms.
7.5. Legitimate interest
For:
Security.
Fraud prevention.
Service improvement.
Defence of claims.
8. CATEGORIES OF PERSONAL DATA
Navalis Institute may process:
8.1. Identification data
First name.
Surname(s).
Identity document where applicable.
8.2. Contact details
Email address.
Telephone.
Address.
8.3. Academic and professional data
May include:
Previous studies.
Professional experience.
Programme selected.
Progress.
Assessments.
Certificates.
8.4. Financial data
Tax data.
Invoicing.
Payment history.
8.5. Technical data
IP address.
Device.
Browser.
Access logs.
Security information.
9. SPECIAL CATEGORIES OF DATA
Navalis Institute does not generally request specially protected data under Article 9 of the GDPR.
No data is requested relating to:
Health.
Ideology.
Religion.
Sexual orientation.
Genetic data.
Biometric data.
Trade union membership.
If it were exceptionally necessary to process any of these data, the additional safeguards established by the legislation will be applied.
10. SOURCE OF THE DATA
Data may be obtained through:
10.1. Data provided directly
Through:
Forms.
Enrolments.
Enquiries.
Communications.
Admission applications.
10.2. Use of educational platforms
Through:
Virtual campus.
Activities.
Assessments.
Access logs.
10.3. Payment providers
Limited data may be received about:
Transaction status.
Confirmations.
Refunds.
11. RECIPIENTS OF THE DATA
Navalis Institute does not sell personal data to third parties.
Data may be processed by providers necessary to deliver the services:
Hosting.
Educational platforms.
Technology services.
Communication tools.
Administrative systems.
Banks.
Payment gateways.
Advisory firms.
Security services.
Where applicable, data processor agreements will be in place in accordance with Article 28 of the GDPR.
12. INTERNATIONAL TRANSFERS
Where certain providers operate outside the European Economic Area, appropriate mechanisms will be applied:
Adequacy decisions.
Standard Contractual Clauses.
Additional safeguards.
13. DATA RETENTION
Data will be kept according to the purpose:
13.1. Enquiries
For as long as necessary to resolve them and handle any follow-up.
13.2. Training relationship
For the duration of the programme and the subsequent statutory periods.
13.3. Invoicing
For the periods required by tax and accounting legislation.
13.4. Academic records
For as long as necessary to evidence the training completed.
13.5. Marketing
Until consent is withdrawn or a valid objection is made.
14. USER RIGHTS
The user may exercise:
The right of access.
The right to rectification.
The right to erasure.
The right to object.
The right to restriction of processing.
The right to data portability.
The right to withdraw consent.
The right not to be subject to automated decision-making.
15. EXERCISING YOUR RIGHTS
Requests may be sent to:
NEXORA GENERATION, S.L.
Email: admision@navalis.university
Stating:
Full name.
The right being exercised.
The reason for the request.
A means of contact.
Additional information may be requested to verify identity where necessary.
16. INFORMATION SECURITY
Nexora Generation, S.L. applies technical and organisational measures designed to protect personal data:
Access control.
System protection.
Backups.
Permission management.
Monitoring.
IT security measures.
17. SECURITY BREACHES
In the event of a security breach that may affect users' rights, action will be taken in accordance with the requirements established by the GDPR.
Where mandatory, the competent authority and the affected persons will be notified.
18. MINORS
The programmes offered by Navalis Institute are aimed mainly at persons over 18 years of age.
Where data of minors is found to be processed without an appropriate legal basis, deletion or restriction measures may be adopted.
19. LINKS TO THIRD PARTIES
The website may include external links.
Third parties will be responsible for their own processing and privacy policies.
Navalis Institute does not control the privacy practices of independent sites.
20. COMPLAINTS TO THE AEPD
If the user considers that their rights have not been properly addressed, they may lodge a complaint with:
Agencia Española de Protección de Datos (AEPD) — the Spanish Data Protection Authority
https://www.aepd.es/
21. CHANGES TO THIS POLICY
Nexora Generation, S.L. may update this Policy due to:
Legal changes.
New services.
Technological changes.
The evolution of Navalis Institute.
The version published at https://navalis.institute/ will be the one in force at any given time.
22. PRIVACY CONTACT
For any privacy-related enquiry:
NEXORA GENERATION, SOCIEDAD DE RESPONSABILIDAD LIMITADA
Trade name: Navalis Institute
NIF/CIF: B93900314
Address: C/ Lladró y Mallí, 10, Esc. C, Piso 3, Pta. 14 — 46007 València (Valencia), España
Website: https://navalis.institute/
Email: admision@navalis.university