Privacy Policy

Last updated: 7 September 2026

This Privacy Policy explains how we handle personal data collected through the website ceda2027.lv (the “Website”) in connection with the Annual Congress of the Central European Diabetes Association (CEDA 2027).

1. Who we are

The controller of your personal data is:

Latvian Association of Endocrinology
Registration No.: 50008173791
Address: Pilsoņu 13, Riga, Latvia
E-mail: info@ceda2027.lv

If you have any questions about this policy or about how we process your data, write to us at the e-mail address above.

2. What data we collect

  • Data you send us directly. If you contact us by e-mail, we receive your name, e-mail address and any other information you choose to include in your message.
  • Congress registration data. Registration for the Congress is handled on an external platform (mittoevents.com). Data you enter there is collected by the platform operator under its own terms and privacy notice. We receive the participant data needed to organise the Congress, such as name, contact details, professional category, institution and registration type.
  • Abstract submissions. If you submit an abstract, we process your name, contact details, affiliation and the content of your submission.
  • Technical data. When you visit the Website, our servers and analytics tools automatically record technical information such as IP address, browser and device type, pages visited, referring page and time of visit.

We do not intentionally collect health data or other special categories of personal data through this Website. Please do not include such information in messages to us.

3. Why we use your data and on what legal basis

  • To answer your enquiries – legal basis: our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR).
  • To organise the Congress, including registration, participant lists, badges, catering and certificates of attendance – legal basis: performance of a contract or steps taken at your request before entering into it (Art. 6(1)(b) GDPR).
  • To review and publish abstracts submitted for the Congress – legal basis: performance of a contract and your consent where publication is involved (Art. 6(1)(b) and 6(1)(a) GDPR).
  • To send Congress-related information and updates – legal basis: your consent, or our legitimate interest in informing registered participants about the event they signed up for (Art. 6(1)(a) or 6(1)(f) GDPR). You can unsubscribe at any time.
  • To operate, secure and improve the Website – legal basis: our legitimate interest in a functioning and secure website (Art. 6(1)(f) GDPR).
  • Analytics and marketing cookies – legal basis: your consent (Art. 6(1)(a) GDPR).

4. Cookies and analytics

The Website uses cookies and similar technologies. Strictly necessary cookies are needed for the Website to work and are set without consent. Statistics and marketing cookies are only set if you agree to them in the cookie banner.

We use Google Tag Manager and Google Analytics to understand how the Website is used (for example, which pages are visited and how visitors reach us). These tools may set cookies and process technical data, including a shortened IP address, and may transfer data to Google outside the European Economic Area on the basis of the European Commission’s adequacy decision or standard contractual clauses.

Some pages embed content from third parties, such as Google Maps. These providers may collect data about your visit under their own privacy policies.

You can withdraw or change your cookie consent at any time through the cookie settings on the Website, and you can block or delete cookies in your browser settings.

5. Who has access to your data

We do not sell your personal data. We share it only where needed, with:

  • our website hosting and IT maintenance providers;
  • the Congress registration and payment platform;
  • e-mail and analytics service providers;
  • service providers involved in running the Congress, such as the venue and catering, where this is necessary;
  • public authorities, where we are required to do so by law.

Our service providers process data on our instructions under written data processing agreements.

6. How long we keep your data

  • Correspondence: up to 2 years after the last message, unless a longer period is needed for legal reasons.
  • Congress registration and accounting records: for the period required by accounting and tax laws (generally 5 years).
  • Mailing list data: until you unsubscribe or withdraw your consent.
  • Website analytics data: up to 14 months.

7. Your rights

Under the GDPR you have the right to:

  • request access to the personal data we hold about you;
  • have inaccurate data corrected;
  • request erasure of your data;
  • request restriction of processing or object to processing based on legitimate interests;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, contact us at info@ceda2027.lv. We will respond within one month.

8. Complaints

If you believe we have processed your data unlawfully, please contact us first so we can resolve the issue. You also have the right to lodge a complaint with the Latvian supervisory authority.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page together with the date of the last update.