Privacy Policy

1. Data Controller

The data controller for this website is:

Centre Tecnològic de Telecomunicacions de Catalunya (CTTC)
CIF: G-62616586
Parc Mediterrani de la Tecnologia — Building B4
Av. Carl Friedrich Gauss 7 (formerly, Av. Canal Olímpic s/n), 08860 Castelldefels, Barcelona, Spain
Data protection contact: dpo@cttc.cat
Conference contact: ondm2027@cttc.es

This policy applies to personal data processed through this ONDM 2027 website. Conference registration and paper submission are performed through external systems (for example, the registration platform and EDAS), which operate under their own privacy notices and terms.

2. What Data We Collect

This website may collect the following personal data:

• Registration data: name, affiliation, email address, postal address, dietary requirements (if provided), visa request information collected when you register for the conference via the registration system.
• Submission data: author names, affiliations, and manuscript content collected via the EDAS paper submission system.
• Contact data: name and email address when you contact us by email.
• Technical and usage data: server logs and technical metadata such as IP address, date and time of access, requested URL, HTTP status code, transferred data volume, referrer URL (if provided by your browser), browser type/version, and operating system.

3. Purposes & Legal Basis

Purpose	Legal Basis
Conference registration & administration	Performance of a contract (GDPR Art. 6(1)(b))
Paper submission & review process	Performance of a contract (GDPR Art. 6(1)(b))
Visa support letters	Legitimate interest / your consent (GDPR Art. 6(1)(a, f))
Conference proceedings & publication	Performance of a contract / legitimate interest
Handling inquiries sent by email	Legitimate interest (GDPR Art. 6(1)(f)); pre-contractual steps where applicable (GDPR Art. 6(1)(b))
Website server logs	Legitimate interest (security, performance)

4. Communication by Email

If you contact us by email or use a mailto link on this website, we process the personal data you provide (for example, your name, email address, message content, attachments, and technical email metadata) to respond to your inquiry and manage related correspondence.

The legal basis is legitimate interest (GDPR Art. 6(1)(f)) and, where relevant, performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)).

5. Data Sharing

Personal data may be shared with:

• CTTC staff and ONDM organizing personnel who need access to perform conference-related tasks.
• IEEE Communications Society as technical co-sponsor responsible for proceedings publication.
• EDAS Conference Management for paper submission and review processing.
• Payment processors for secure processing of registration fees.
• Conference programme committee members for paper review purposes only.

We do not sell your personal data to third parties.

6. Data Retention

Registration and submission data are retained for as long as necessary to manage conference participation, peer review, publication, accounting, and legal obligations. Where possible, data are deleted or anonymized after the retention period required by applicable law.

Email correspondence is retained only as long as needed to process your inquiry and to comply with applicable legal retention obligations.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure ("right to be forgotten") where applicable.
• Restriction of processing in certain circumstances.
• Data portability in machine-readable format.
• Object to processing based on legitimate interest.

To exercise these rights, email dpo@cttc.cat (reference: "Personal Data"). You also have the right to lodge a complaint with the Catalan Data Protection Authority (APDCAT) at apdcat.gencat.cat.

8. Right to Object

Where personal data are processed on the basis of legitimate interest (GDPR Art. 6(1)(f)), you may object at any time on grounds relating to your particular situation. If you object, we will stop processing unless compelling legitimate grounds override your interests, rights, and freedoms, or unless processing is required for the establishment, exercise, or defense of legal claims.

9. Cookies

This website uses essential technical cookies required for navigation and basic functionality. It does not use advertising cookies. Embedded or linked third-party services (for example, map providers or external platforms) may set their own cookies under their respective privacy and cookie policies.

10. Changes to This Policy

We may update this policy from time to time. The current version will always be available at this URL with its effective date noted below.

11. Contact

Privacy-related inquiries and rights requests: dpo@cttc.cat.
Conference operations: ondm2027@cttc.es