Privacy Policy

Website: https://navalisinstitute.co.uk/
Last updated: 20 August 2026

This Privacy Policy explains how personal data is collected, processed, stored, protected and used through the website https://navalisinstitute.co.uk/ and through the different communication channels, registration processes, training enrolments, digital platforms and educational services provided under the commercial name Navalis Institute UK.

Navalis Institute UK provides specialised training programmes related to the maritime, naval, marine engineering, nautical and professional sectors through its own educational programmes.

The activities carried out through this website are legally managed by NEXORA GENERATION, SOCIEDAD DE RESPONSABILIDAD LIMITADA, which acts as the data controller responsible for processing personal information in accordance with applicable data protection legislation.

1. DATA CONTROLLER DETAILS

The controller responsible for processing personal data collected through Navalis Institute UK is:

Legal name: NEXORA GENERATION
Trading name: Navalis Institute UK
Legal form: Sociedad de Responsabilidad Limitada Unipersonal (SLU)
Tax Identification Number (NIF/CIF): B93900314
Registered and fiscal address: C/ Lladró y Mallí, 10, Esc. C, Piso 3, Pta. 14 — 46007 València (Valencia), Spain
Main business activity: CNAE 8559 — Other education n.c.o.p.
Website: https://navalisinstitute.co.uk/
Contact email: admision@navalisinstitute.co.uk

For the purposes of this Privacy Policy, references to Navalis Institute UK, Navalis, the website, we, our, or similar expressions refer to the educational activities carried out by Nexora Generation, S.L. under this commercial name.

2. APPLICABLE DATA PROTECTION LEGISLATION

Personal data processed through Navalis Institute UK is handled in accordance with applicable data protection regulations, including where applicable:

• UK General Data Protection Regulation (UK GDPR).
• Data Protection Act 2018 (United Kingdom).
• Regulation (EU) 2016/679 (GDPR), where applicable to individuals located within the European Economic Area.
• Other applicable privacy and electronic communications legislation.

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data processed through:

• The Navalis Institute UK website.
• Contact forms.
• Information requests.
• Registration processes.
• Training enrolments.
• Digital learning platforms.
• Virtual campuses.
• Student communications.
• Administrative processes.
• Payment management.
• Certification processes.

4. NATURE OF OUR TRAINING PROGRAMMES

Navalis Institute UK provides and promotes its own educational programmes specialised in maritime, naval, nautical, marine engineering and related professional fields.

The training catalogue may include:

• Technical courses.
• Professional programmes.
• Specialised training.
• Executive programmes.
• Advanced learning programmes.
• Continuous professional development programmes.

Unless expressly stated otherwise, these programmes are private training programmes developed and managed by Nexora Generation, S.L.

They do not automatically constitute:

• Official UK university degrees.
• Official Spanish university qualifications.
• Qualifications registered in the RUCT.
• Professional licences issued by public authorities.
• Mandatory certifications required by regulatory organisations.

Where applicable, successful completion may result in the issue of a private certificate, diploma or training accreditation according to the requirements of each programme.

5. PRINCIPLES OF DATA PROCESSING

Navalis Institute UK processes personal data according to the principles established by applicable data protection legislation.

5.1. Lawfulness, fairness and transparency

Personal data is processed using a valid legal basis and with clear information provided to users.

5.2. Purpose limitation

Personal data is collected for specific, legitimate and clearly defined purposes.

5.3. Data minimisation

Only information necessary for each purpose is collected and processed.

5.4. Accuracy

Reasonable measures are taken to keep personal information accurate and updated.

5.5. Storage limitation

Data is retained only for the period necessary for each purpose or as required by law.

5.6. Integrity and confidentiality

Appropriate measures are applied to protect personal information against unauthorised access, loss, alteration or disclosure.

6. PERSONAL DATA WE COLLECT

Depending on the relationship with Navalis Institute UK, we may collect:

6.1. Identification data

Including:

• Name.
• Surname.
• Identification details when legally necessary.

6.2. Contact information

Including:

• Email address.
• Telephone number.
• Postal address where required.

6.3. Academic and professional information

Including:

• Previous studies.
• Professional experience.
• Training interests.
• Selected programme.
• Learning progress.
• Assessment results.

6.4. Financial information

Including:

• Billing information.
• Tax information where required.
• Payment records.
• Transaction references.

6.5. Technical information

Including:

• IP address.
• Browser information.
• Device information.
• Operating system.
• Login records.
• Security logs.

7. PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

7.1. Managing enquiries

To:

• Respond to requests.
• Provide information about programmes.
• Explain admission processes.
• Answer questions about courses.

7.2. Admission management

When required, data may be processed to:

• Review applications.
• Assess eligibility requirements.
• Request additional information.
• Manage candidate communications.

7.3. Enrolment and contracting

Data may be processed to:

• Complete enrolment.
• Manage agreements.
• Create student records.
• Provide access to purchased services.

7.4. Delivery of educational services

Data may be used to:

• Provide access to learning platforms.
• Deliver training content.
• Manage activities.
• Monitor progress.
• Provide educational support.

7.5. Academic management and certification

Data may be processed to:

• Record completion.
• Manage assessments.
• Issue private certificates.
• Verify training records.

7.6. Administrative and financial management

Including:

• Invoicing.
• Payments.
• Refund management.
• Accounting obligations.
• Tax compliance.

7.7. Communications

To send necessary communications related to:

• Registration.
• Access credentials.
• Training activities.
• Payments.
• Assessments.
• Certificates.

7.8. Marketing communications

Where legally permitted, data may be used to send information about:

• New programmes.
• Maritime training.
• Professional development opportunities.
• Events.
• Updates.

Users may unsubscribe or withdraw consent where applicable.

7.9. Security and fraud prevention

Technical data may be processed to:

• Protect systems.
• Detect unauthorised access.
• Prevent fraudulent activity.
• Investigate security incidents.

8. LEGAL BASIS FOR PROCESSING

The legal basis for processing depends on the specific purpose.

8.1. Performance of a contract

Used when processing is necessary to:

• Manage enrolment.
• Provide training services.
• Provide platform access.
• Process payments.
• Issue documentation.

8.2. Pre-contractual measures

Applied when users request information before purchasing a programme.

8.3. Legal obligations

Used to comply with:

• Tax obligations.
• Accounting requirements.
• Commercial regulations.
• Legal requests from authorities.

8.4. Consent

Used for:

• Marketing communications.
• Non-essential cookies.
• Optional forms.

Consent may be withdrawn at any time.

8.5. Legitimate interests

Used where appropriate for:

• Security.
• Fraud prevention.
• Service improvement.
• Protection of legal claims.

9. SPECIAL CATEGORIES OF DATA

Navalis Institute UK does not generally request special categories of personal data, including:

• Health information.
• Political opinions.
• Religious beliefs.
• Trade union membership.
• Genetic data.
• Biometric data.
• Sexual orientation information.

If exceptional circumstances require processing such information, appropriate legal safeguards will be applied.

10. SOURCE OF PERSONAL DATA

Personal data may be obtained from:

10.1. Information provided directly by users

Through:

• Forms.
• Enrolments.
• Emails.
• Applications.
• Communications.

10.2. Use of educational platforms

Through:

• Virtual campus activity.
• Assessments.
• Training progress.
• Access records.

10.3. Payment providers

Limited information may be received regarding:

• Payment confirmation.
• Transaction status.
• Refunds.

11. DATA RECIPIENTS

Navalis Institute UK does not sell personal data to third parties.

Data may be shared with trusted service providers necessary to operate our services, including:

• Hosting providers.
• Learning platforms.
• Technology providers.
• Communication services.
• Payment processors.
• Accounting providers.
• Security services.

Where required, appropriate data processing agreements will be established.

12. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the United Kingdom or European Economic Area.

Where international transfers occur, appropriate safeguards will be applied, including where applicable:

• Adequacy decisions.
• Standard Contractual Clauses.
• International Data Transfer Agreements.
• Additional security measures.

13. DATA RETENTION PERIODS

Personal data will be retained according to the purpose of processing.

13.1. Enquiries

Data will be retained for the time necessary to manage the request and handle possible follow-up communications.

13.2. Students and enrolments

Data will be retained during the educational relationship and afterwards for legally required periods.

13.3. Financial records

Billing and accounting information will be retained according to applicable tax and accounting obligations.

13.4. Training records

Information related to completed programmes and certificates may be retained to verify educational records.

13.5. Marketing

Data will be retained until consent is withdrawn or the user objects.

14. USERS’ DATA PROTECTION RIGHTS

Users may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to restriction.
• Right to data portability.
• Right to object.
• Right to withdraw consent.

15. HOW TO EXERCISE YOUR RIGHTS

Requests may be sent to:

NEXORA GENERATION, S.L.
Email: admision@navalisinstitute.co.uk

Requests should include:

• Full name.
• Requested right.
• Relevant details.
• Contact information.

Additional information may be requested to verify identity where necessary.

16. SECURITY MEASURES

Navalis Institute UK applies reasonable technical and organisational measures to protect personal data, including:

• Access controls.
• Security monitoring.
• Backup systems.
• Permission management.
• Protection of digital platforms.
• Internal security procedures.

17. SECURITY INCIDENTS

If a personal data breach occurs, Nexora Generation, S.L. will assess the incident and take appropriate action according to applicable legislation.

Where legally required, affected individuals and supervisory authorities will be notified.

18. CHILDREN’S DATA

Navalis Institute UK programmes are generally intended for individuals aged 18 or over.

If personal data from minors is identified without an appropriate legal basis, reasonable measures will be taken to remove or restrict such information.

19. THIRD-PARTY WEBSITES

The website may contain links to external websites.

Navalis Institute UK is not responsible for:

• Third-party privacy practices.
• External content.
• Independent services.

Users should review the privacy policies of external websites before providing personal information.

20. SUPERVISORY AUTHORITIES

If users believe their data protection rights have not been properly addressed, they may contact the relevant supervisory authority.

For users in the United Kingdom:

Information Commissioner’s Office (ICO)
https://ico.org.uk/

For users in Spain or the European Economic Area where applicable:

Agencia Española de Protección de Datos (AEPD)
https://www.aepd.es/

21. CHANGES TO THIS PRIVACY POLICY

Nexora Generation, S.L. may update this Privacy Policy due to:

• Legal changes.
• Regulatory updates.
• New services.
• Technological improvements.
• Operational changes.

The latest version published on https://navalisinstitute.co.uk/ will always apply.

22. PRIVACY CONTACT DETAILS

For privacy-related enquiries:

NEXORA GENERATION, SOCIEDAD DE RESPONSABILIDAD LIMITADA
Trading name: Navalis Institute UK
Tax Identification Number: B93900314
Registered address: C/ Lladró y Mallí, 10, Esc. C, Piso 3, Pta. 14 — 46007 València (Valencia), Spain
Website: https://navalisinstitute.co.uk/
Email: admision@navalisinstitute.co.uk