At the entrance to the venue, you may be asked to present an identity document so that staff can visually verify that your first and last names match the registration details. No copy of the document will be made, and its number will not be recorded.
Personal Data Protection Policy
Legal Basis
RGPD: 6.1.a) Processing in which the data subject gave consent for one or more specific purposes.
Law 1/1982 on civil protection of the right to honour, personal and family privacy and self-image.
Law 34/2002, of July 11, 2002, on information society services and electronic commerce.
Law 3/2018, on the Protection of personal data and guarantee of digital rights (LOPDGDD).
Purposes of Processing
Registration for participation in 20ENISE and ID verification upon entry to the event.
Collective
Interested in attending for 20ENISE. The data is collected from the interested person.
Data categories
- The following identifying data are collected in the registration form:
- Name and surname
- Company / Organization / University / Otheres
- Position / Specialty
- E-mail
At the entrance to the venue, you may be asked to present an identity document so that staff can visually verify that your first and last names match the registration details. No copy of the document will be made, and its number will not be recorded.
Once registration has been completed, a unique identifier linked to a QR code will be assigned to you. This identifier may be used during the event to manage access, the distribution of merchandise, and to record both entries and exits, as well as access to specific areas or activities, for the purposes of obtaining aggregated or anonymised attendance statistics, monitoring occupancy levels, and evaluating the event.
Records generated by scanning the QR code may include the date, time, and corresponding location or access point, and will be associated with your unique participant identifier.
The email is used to send you information about the event and how to proceed to attend.
Category Recipients
Personal data may be processed by service providers involved in the management of registrations, accreditation and event organisation, acting as data processors and, where applicable, sub-processors, in accordance with the controller’s instructions and under the contracts and safeguards required by data protection legislation. Personal data will not be disclosed to any other recipients unless there is a lawful basis for doing so or disclosure is legally required.
International Transfer
No international data transfers will take place.
Time limit for deletion
The identification data associated with your registration will be retained for one month in order to respond to requests for proof of attendance at the event. The access and merchandising distribution records generated during the event will be retained only for the duration of the event itself, on 21, 22 and 23 October 2026, and will be deleted once the event has ended, unless there is a legal obligation to retain them or they need to be kept for the establishment, exercise or defence of legal claims.
Security measures
The security measures implemented correspond to those set out in Royal Decree 311/2022, of May 3, regulating the National Security Scheme, and are described in the documents that make up INCIBE's Information Security Policy.
Rights
You can exercise your rights of access, rectification, erasure, restriction, portability,
and objection by writing to the mailbox
dpd@incibe.es
For any claim you can contact the Spanish Data Protection Agency.
Data Handler
S.M.E. Instituto Nacional de Ciberseguridad de España, M.P., S.A., bearing CIF [Tax ID code] A24530735
Additional and detailed information on Data Protection can be found on our website at:
