Privacy Policy

1. Data Controller

Fundación Centro de Estudios de Física del Cosmos de Aragón (CEFCA)
NIF: G44227148
Plaza San Juan 1, 2ª Planta
44001 Teruel, Spain
Tel: +34 978 221 266
Email: cefca@cefca.es

2. Data Protection Officer

CEFCA has appointed a Data Protection Officer (DPO) who can be contacted at: dpd@cefca.es

3. Purpose of Data Processing

Your personal data are collected and processed exclusively for the following purposes:

• Managing your registration and participation in the CEFCA Meeting 2026 (October 5–9, 2026)
• Processing your payment through the Redsys payment gateway
• Sending confirmation emails and event-related communications
• Issuing invoices and fulfilling tax and accounting obligations
• Managing dietary requirements and allergen information for the conference dinner

4. Legal Basis for Processing

The processing of your personal data is based on:

• Performance of a contract: registration and payment for the conference and/or dinner
• Legal obligation: compliance with tax, accounting and fiscal regulations
• Consent: acceptance of this Privacy Policy and the Terms and Conditions at the time of registration

5. Data Collected

We collect the following categories of personal data:

• Identification data: first name, last name
• Contact data: email address, phone number
• Professional data: institution or organisation, VAT/Tax Identification Number
• Address data: street address, city, postal code, country
• Payment data: processed exclusively by Redsys — CEFCA does not store card details
• Health-related data (dinner only): dietary requirements and allergen information, provided voluntarily

6. Data Retention

Your personal data will be retained for as long as necessary to fulfil the purposes for which they were collected:

• Registration and event management data: until the conclusion of the event and any related claims period
• Billing and tax data: minimum 5 years from the date of the last invoice, as required by Spanish tax law
• Data will be blocked and not further processed once the retention period expires, pending deletion

7. Recipients of Data

Your data will not be transferred to third parties except where necessary to provide the requested service or where required by law. Data may be shared with:

• Redsys: payment processing
• Email service providers: for sending confirmation emails
• Tax and accounting advisors: for legal compliance

No international transfers of personal data are regularly carried out. If required, they will be based on adequacy decisions or appropriate safeguards in accordance with GDPR.

8. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law, you have the following rights:

• Access: obtain confirmation of whether your data are being processed and access them
• Rectification: correct inaccurate or incomplete personal data
• Erasure: request deletion of your data when no longer necessary
• Restriction: request limitation of processing in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests

To exercise your rights, please send a written request to cefca@cefca.es, enclosing a copy of your identity document. This service is free of charge.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.

9. Changes to This Policy

CEFCA reserves the right to update this Privacy Policy at any time. Any significant changes will be communicated through this website. We recommend reviewing this page periodically.

Last updated: June 2026