Privacy policy

1. Data controller

The controller of the personal data collected through the website, the registration platforms and the services linked to ECE Barcelona 2027 is:

Llotja de Cereals de Barcelona

• Tax ID (NIF): Q0873001B
• Registered office: Passeig Isabel II, 1 (08003 – Barcelona)
• Email: info@ece-barcelona2027.eu

(hereinafter, the "Llotja").

2. Scope

This Privacy Policy governs the processing of personal data in connection with:

• The ECE Barcelona 2027 website.
• The congress registration process.
• The purchase of tickets.
• The private user areas.
• The participation of visitors, delegates, sponsors and exhibitors.
• Communications relating to the congress.
• Attendance at the event.

3. Data we may process

We may process the following categories of data:

• First name and surname.
• Company or organisation.
• Job title.
• Email address.
• Telephone number.
• Postal address.
• Billing data.
• NIF or VAT number.
• Login credentials for the platform.
• Registration history.
• Information about participation in the congress.
• Communications with the Organisation.
• Technical browsing data.

4. Purposes of processing

a) Management of registrations

Managing registrations and participation in ECE Barcelona 2027.

b) Management of tickets

Managing the purchase of tickets, accreditations, access validation and other services associated with attendance at the congress.

c) Management of private areas

Enabling access to and use of the private areas by:

• Sponsors.
• Exhibitors.
• Delegates.

These areas may allow users to consult information, update data, manage their participation and interact with the Llotja.

d) Management of sponsors and exhibitors

Administering the contractual, logistical and operational relationships linked to sponsorships, exhibition spaces and associated services.

e) Handling of enquiries

Responding to enquiries, incidents or requests submitted through any contact channel.

f) Communications relating to the congress

Sending relevant information about:

• The organisation of the event.
• Logistical matters.
• Programme changes.
• Operational communications.

g) Compliance with legal obligations

Complying with the applicable legal, tax, administrative and security obligations.

5. Legal basis for processing

Personal data will be processed on the basis of:

• The performance of the contractual or pre-contractual relationship.
• Compliance with legal obligations.
• The Llotja's legitimate interest in managing and promoting the event.
• The data subject's consent, where required.

6. Service providers

To ensure the proper provision of the services relating to ECE Barcelona 2027, the Organisation may share certain data with providers acting as data processors.

Registration and ticketing platform

This platform will be used to manage, among other things:

• Registrations.
• Ticket sales.
• Accreditations.
• Access control.
• Participant validation.

Web development and private areas

The Organisation may use other providers in connection with:

• Web hosting.
• Email.
• Web analytics.
• Marketing management.
• Technology services.

7. International transfers

Where any of the providers used involves international transfers of data outside the European Economic Area, such transfers will be carried out with the safeguards required by the applicable data protection legislation.

8. Data retention

Personal data will be retained for as long as necessary to fulfil the purposes for which they were collected and, thereafter, for the periods required by the applicable legislation.

In particular:

• Data relating to the management of registrations, accreditations and participation in the event will be retained while the event takes place and for up to two years after it ends, unless the data subject requests their erasure earlier, where appropriate.
• Data associated with the user account of the event app will be retained while the account remains active and, once the event has ended, for a maximum of two years, unless a longer retention period is required by law.
• Data relating to invoicing and administrative management will be retained for the periods required by tax, accounting and commercial legislation.
• Data processed to send information about future editions of the event will be retained until the data subject objects to the processing or withdraws their consent, as applicable.

Once these periods have expired, the data will be securely deleted or anonymised.

9. Photographs and recordings

Photographs, audio recordings and audiovisual recordings of attendees may be taken during the congress.

The legal basis for this processing is the organisation's legitimate interest in documenting, reporting on and publicising the activities carried out during the event, and in promoting future editions and related activities.

This material may be used for:

• Publicising the congress.
• Publishing content on the website.
• Corporate publications.
• Social media.
• Promoting future editions of the ECE.

Where individual or clearly identifying photographs or recordings are taken for specific promotional uses, the organisation may request the prior consent of the data subjects where necessary.

Participants may exercise their data protection rights and object to the processing of their image where there are particular circumstances that justify it.

10. Data subjects' rights

Any person may exercise the rights of:

• Access.
• Rectification.
• Erasure.
• Objection.
• Restriction of processing.
• Portability.

Requests may be sent to: info@ece-barcelona2027.eu

Data subjects may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Cookies

The website uses technical cookies and, where applicable, other analytics or advertising cookies.

12. Changes

The Organisation reserves the right to amend this Privacy Policy to adapt it to legislative, technical or organisational developments.