Events i congressos
The organization of conferences, congresses, and similar events requires the processing of personal data concerning attendees and participants, which must be conducted while respecting individuals' right to privacy.
The General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection and Digital Rights Guarantee (LOPDGDD) specify the obligations that organizations must fulfill regarding the processing of personal data.
Whenever personal information is collected from attendees and participants at an event, ceretain procedures must be followed.
Is there any tool that simplifies the management of the congress?
The UPF has a corporate platform called "EVENTUM". It is advisable to use this application since data protection issues have been addressed with the platform provider.
What information about the processing of personal data must be included on the registration form?
Individuals shall be informed about the details of the personal data processing. This information can be presented in two ways:
-
Option 1. With a checkbox to be clicked by individuals when filling the form. Example:
I have read and accept the personal data processing details. -
Option 2. With a text with the basic information and a link to the full information sheet. Example:
Data controller: Universitat Pompeu Fabra
Purpose: Management of seminars, congresses or similar events organized by the University.
Rights: Access your data, request their rectification, deletion and their portability; object a processing or apply for its limitation.
Additional information
Please note that the link URL is the same in both cases. You may access to the version in other languages changing the [en] by [ca] or [es] at your convenience.
Remember that you only need to report once, so you don't have to repeat the legal note every time you contact participants who have already signed up.
Is it possible to record or broadcast the congress on the internet?
Before recording or broadcasting the session, you must have obtained the consent of the participants to record and share it. It is recommendend to be clear about the purpose of the recording and any future use it will have.
What information can be shared with the organizing committees ?
In the event that the congress has one or more organizing committees (such as program or parallel activities committees) data on participants and/or speakers may be shared with the members of these committees, as they formally act as part of the organization of the congress itself. However, it is necessary comittee members sign a commitment of confidentiality.
Is it possible to disclose the name of the speakers? And the list of registrants?
The names of the speakers are commonly included in conference programs. Therefore, it is advisable to mention a reference to the processing of personal data when calling to receive presentations. This could be achieved by incorporating a reference to the conditions of personal data processing.
Regarding to the registration list, it's importat to be cautious. Before disclosing the registration list, it is important to obtain the consent of the participants in order to share this information.
Can email addresses be shared?
Participant's email addresses cannot be shared with other attendees, since it is not necessary to know the identity of the others present to attend a conference. Blind copy communications will be the most appropriate.
Can you ask about food intolerances?
It is not advisable to ask directly about food intolerances. The best thing to do is to ask what type of menu they want. Example:
Please specify your catering menu choice:
Vegan
Gluten free
Lactose free
Additionally, an email address or contact information with the catering company may be provided for the purpose of participants expressing their needs.
Can data be shared with the travel agency?
It depends on the type of relationship maintained with the travel agency:
- Direct management of accommodation by the agency: This option is the most recommended one. Participants are offered a direct contact method with the agency and, if applicable, a discount code or reference that provides access to special prices.
Thus, the UPF is not responsible for managing accommodation data, and the agency will be accountable for the processing of personal data.
The organization may request aggregate data from the travel agency, such as the number of attendees staying in each hotel, if the logistics of the conference require it.
- The organization acts as an intermediary: If the conference organization acts as an intermediary with the hotel or travel agency, an agreement will be required between the University and the supplying company that defines the conditions for the communication of personal data. Using hotels or intermediaries with which the University has established a framework agreement already includes the necessary clauses.
How long should data be retained?
Personal data must be kept for the necessary period to meet any obligations that may arise from the organization of the congress. For example, in compliance with the applicable tax regulations or to attend to audits of the entities financing the aid that allowed the organization of the congress.
Information about the speakers, organizing committee, videos or presentations presented at the congress, etc. They may be stored depending on what has been indicated in the authorization form signed by the people to whom the data refers and as long as they do not express their opposition. If someone requests the deletion of their data, it is appropriate to address the request.
Sometimes, data may be permanently preserved due to archiving in the public interest. Only those data that are essential will be stored when this happens.
Can it be recorded? Can it remain accessible online?
In order to record a session, it is necessary to have the consent of the speakers.
It is also necessary to inform attendees in advance that the session may be recorded (images, sound, and/or chat). Before the event begins, it is necessary to provide this information in the congress materials or in the auditorium.
Can collected data be used for other purposes?
Each participant must give their express consent to use their personal data for purposes other than organizing the congress. Example:
Can personal data of attendees be communicated to other co-organizers?
The express consent of each participant is necessary before providing their personal data to another entity, such as the co-organizer of the congress: Example: