{"id":117657,"date":"2019-09-14T20:39:00","date_gmt":"2019-09-14T18:39:00","guid":{"rendered":"https:\/\/ceadigilaw.org\/privacy-policy-en\/"},"modified":"2026-10-26T19:26:55","modified_gmt":"2026-10-26T18:26:55","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ceadigilaw.org\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

INTRODUCTION<\/p><\/div>

Privacy Policy \u2014 CEA Digital Law \u00ae<\/h1>\r\n
Ref: CEA-RGPD-02 \u00b7 Version 1.6 \u00b7 Last updated: 26 October 2026 \u00b7 dataprotection@ceadigilaw.org<\/a><\/div>\r\n

1. Data controller<\/h2>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Entity<\/td>\r\nEuro-American Committee of Digital Law - CEA Digital Law \u00ae<\/td>\r\n<\/tr>\r\n
Type<\/td>\r\n\u00a0Company Limited by Guarantee (CLG), not-for-profit<\/td>\r\n<\/tr>\r\n
CRO<\/td>\r\n\u00a0698529 (Companies Registration Office, Ireland)<\/td>\r\n<\/tr>\r\n
Registered office<\/td>\r\n\u00a01A Aldemere View, Clonsilla, Dublin, D15 W2XT, Ireland<\/td>\r\n<\/tr>\r\n
Privacy<\/td>\r\n\u00a0dataprotection@ceadigilaw.org<\/a><\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\nCEA Digital Law \u00ae is an entity with its own independent legal personality. META Channel Corporation Ltd. is a legally separate entity with its own registration number; it operates independently.\r\n

2. Processing principles<\/h2>\r\nWe process your data in accordance with the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability (Art. 5 GDPR).\r\n

3. Processing operations carried out<\/h2>\r\n

3.1 Contact form (\/contact\/)<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nFull name, email address, country and message<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nTo respond to enquiries and manage institutional or pre-contractual relations<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.b GDPR (pre-contractual measures) \/ Art. 6.1.f GDPR (legitimate interest in follow-up)<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nAuthorised staff. Processors: Google Workspace (Gmail), IONOS SE (SMTP), WPMU DEV (hosting)<\/td>\r\n<\/tr>\r\n
Transfers<\/td>\r\nGoogle LLC (USA) \u2014 EU-US Data Privacy Framework. IONOS and WPMU DEV: EU<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\n1 year where no formal relationship arises; if it is formalised, for the duration of the relationship and 6 years thereafter<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

3.2 \u201cWrite for us\u201d form (\/join-us\/collaborate\/)<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nFull name, email address, country and message<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nTo assess the profiles of collaborators and authors for CEA Digital Law \u00ae content<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.b GDPR \u2014 pre-contractual measures at the request of the data subject<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nAuthorised staff. Processors: Google Workspace, IONOS SE, WPMU DEV<\/td>\r\n<\/tr>\r\n
Transfers<\/td>\r\nGoogle LLC (USA) \u2014 EU-US Data Privacy Framework<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\n1 year if it does not proceed; if it is formalised, for the duration of the collaboration and 6 years thereafter<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

3.3 Publication of the profiles of members and officers<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nFull name, position, organisation, country, professional photograph<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nDissemination of the organisational and representative structure of CEA Digital Law \u00ae<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.f GDPR \u2014 legitimate interest. The persons listed hold representative positions in an organisation in which they participate voluntarily<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nGeneral public, through the website<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\nFor as long as the association with CEA Digital Law remains active, or until removal is requested<\/td>\r\n<\/tr>\r\n
Special right<\/td>\r\nImmediate removal upon request to\u00a0dataprotection@ceadigilaw.org<\/a><\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

3.4 Photographs of institutional events<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nPhotographic images of participants in CEA Digital Law \u00ae events<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nDocumentation and dissemination of institutional activities<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.f GDPR \u2014 legitimate interest in documenting the activities of a not-for-profit organisation<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nGeneral public<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\nFor as long as they remain relevant for historical documentation purposes, or until removal<\/td>\r\n<\/tr>\r\n
Special right<\/td>\r\nImmediate removal upon request to\u00a0dataprotection@ceadigilaw.org<\/a><\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

3.5 Newsletter<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nName and email address<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nSending informative communications about CEA Digital Law \u00ae activities and events<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.a GDPR \u2014 consent, confirmed by double opt-in<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nAuthorised staff. Email provider: IONOS SE (EU)<\/td>\r\n<\/tr>\r\n
Transfers<\/td>\r\nNo transfers outside the EEA<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\nUntil consent is withdrawn or the subscription is actively cancelled<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

3.6 Publication of events submitted by third parties (\u201cSubmit your event\u201d form)<\/h3>\n\n\n\n\n\n\n\n\n\n
Data<\/td>\nFrom the sender: name, email address, WhatsApp phone number, IP address and time of submission; technical connection and browser data (approximate country, network and internet provider derived from the IP address using our own database, indication of VPN or server use, browser, language and time zone) and the page from which they arrived (domain and path only); the promotion commitment chosen and, where applicable, the link to their mention. From the event: title, description, dates, time zone, venue, city, country, registration link, organising institution, poster and attached documents. From the speakers: first name and last name, position, institution or company, title of the talk and its description<\/td>\n<\/tr>\n
Purpose<\/td>\nReview the proposal, contact the sender and, if approved, publish the event page on ceadigilaw.org. In addition, the poster is analysed with artificial intelligence to check whether it includes the CEA Digital Law logo and, if the sender asks for it, to add it without changing anything else. If the event is published, its texts are translated with artificial intelligence into the other languages of the website. If the sender chooses \u201cI want CEA Digital Law to create my poster\u201d, the poster is created with artificial intelligence from the event text In addition, to verify the authenticity of proposals, prevent impersonation and abuse, and keep a record of the acceptances given and of the agreed promotion.<\/td>\n<\/tr>\n
Legal basis<\/td>\nArt. 6.1.a GDPR \u2014 consent of the sender, given through the form checkbox. Art. 6.1.f GDPR \u2014 legitimate interest in disseminating academic and professional activities of the sector. Whoever submits the event declares that they are entitled to provide the speakers\u2019 data and the poster, and that they have informed the people concerned Art. 6.1.f GDPR \u2014 legitimate interest in the security of the form and in verifying the authenticity of proposals, for the technical connection and browser data. Art. 6.1.b GDPR \u2014 publication conditions accepted, for the promotion commitment.<\/td>\n<\/tr>\n
Recipients<\/td>\nAuthorised staff during the review. If the event is published, the event and speaker data become publicly accessible. Processors: WPMU DEV (hosting), Google Workspace (Gmail), IONOS SE (SMTP), Anthropic PBC \u2014 Claude (analysis of the poster and translation of the event texts with artificial intelligence: it only receives the poster image and the event texts, and does not use them to train its models), Google LLC \u2014 Gemini (creation of the poster with artificial intelligence when \u201cI want CEA Digital Law to create my poster\u201d is chosen: it only receives the event text and the chosen style, not the logos)<\/td>\n<\/tr>\n
Transfers<\/td>\nGoogle LLC (USA), also for Gemini \u2014 EU-US Data Privacy Framework. Cloudflare, Inc. (USA) for anti-spam verification. Anthropic PBC (USA) for the analysis of the poster and the translation of the event texts \u2014 European Commission standard contractual clauses<\/td>\n<\/tr>\n
Retention<\/td>\nProposals not published: 1 year. Published events: as long as they remain of informative interest or until a removal request<\/td>\n<\/tr>\n
Special right<\/td>\nImmediate removal of the event or of a speaker\u2019s data upon request to dataprotection@ceadigilaw.org<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

3.7 Anti-spam verification of the forms (Cloudflare Turnstile)<\/h3>\n\n\n\n\n\n\n\n\n
Data<\/td>\nIP address, technical browser data and a verification token<\/td>\n<\/tr>\n
Purpose<\/td>\nCheck that form submissions are not automated and prevent abuse<\/td>\n<\/tr>\n
Legal basis<\/td>\nArt. 6.1.f GDPR \u2014 legitimate interest in the security of the website<\/td>\n<\/tr>\n
Recipients<\/td>\nCloudflare, Inc., as data processor<\/td>\n<\/tr>\n
Transfers<\/td>\nCloudflare, Inc. (USA) \u2014 European Commission standard contractual clauses<\/td>\n<\/tr>\n
Retention<\/td>\nShort periods set by the provider; CEA Digital Law \u00ae does not keep this data<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

3.8 Visit measurement (cookieless)<\/h3>\n\n\n\n\n\n\n\n
Data<\/td>\nPage visited, referrer, device type and browser, as aggregated figures<\/td>\n<\/tr>\n
Purpose<\/td>\nTo know how many people visit the site and what they read, in order to improve it<\/td>\n<\/tr>\n
Legal basis<\/td>\nArt. 6.1.f GDPR \u2014 legitimate interest in basic, cookieless measurement<\/td>\n<\/tr>\n
Recipients<\/td>\nWPMU DEV (Incsub, LLC), hosting provider, with its Matomo statistics tool configured without cookies. See Cookie Policy<\/td>\n<\/tr>\n
Retention<\/td>\nOnly aggregated figures are kept<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\r\n

3.9 \u201cBecome a speaker\u201d form (\/join-us\/become-a-speaker\/)<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nFull name, email address, country and message<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nTo assess speaker proposals and contact the sender<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.b GDPR \u2014 pre-contractual measures at the request of the data subject<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nAuthorised staff. Processors: Google Workspace, IONOS SE, WPMU DEV<\/td>\r\n<\/tr>\r\n
Transfers<\/td>\r\nGoogle LLC (USA) \u2014 EU-US Data Privacy Framework<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\n1 year if the proposal does not proceed; if it is accepted, for the duration of the collaboration and 6 years thereafter<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

3.10 \u201cRequest a node\u201d form (\/join-us\/request-a-node\/)<\/h3>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
Data<\/td>\r\nFull name, email address, country, organisation or institution, and message<\/td>\r\n<\/tr>\r\n
Purpose<\/td>\r\nTo assess the application to set up or join a Node and contact the applicant<\/td>\r\n<\/tr>\r\n
Legal basis<\/td>\r\nArt. 6.1.b GDPR \u2014 pre-contractual measures at the request of the data subject<\/td>\r\n<\/tr>\r\n
Recipients<\/td>\r\nAuthorised staff. Processors: Google Workspace, IONOS SE, WPMU DEV<\/td>\r\n<\/tr>\r\n
Transfers<\/td>\r\nGoogle LLC (USA) \u2014 EU-US Data Privacy Framework<\/td>\r\n<\/tr>\r\n
Retention<\/td>\r\n1 year if the application does not proceed; if it is accepted, for the duration of the association with CEA Digital Law and 6 years thereafter<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\nThe fields marked with an asterisk are required to deal with your request; if they are not provided, we will not be able to process it.\n

4. Your rights<\/h2>\r\nUnder the GDPR, you have the right to:\r\n