Español
English
Deutsch
Privacy and Cookie Policy
This website does not collect users’ personal data without their knowledge, nor is such data shared with third parties.
CSIRT-CAN does not use cookies to gather user information, nor does it log IP addresses. Only first-party, session cookies with technical purposes are used—these enable browsing and the use of website features and services.
The CSIRT-CAN website contains links to third-party websites with their own privacy policies, which are unrelated to the Spanish Data Protection Agency (AEPD). Upon accessing such websites, you can decide whether to accept their privacy and cookie policies. Generally, you can accept or reject third-party cookies through your browser’s settings.
What Are Cookies?
A cookie is a data file that the server of this website sends to the device (computer, smartphone, tablet) of the person accessing the page, in order to store and retrieve information about their browsing activity.
This site uses various types of technical and analytical cookies solely to improve user experience, with no advertising or similar purposes. These cookies do not collect personal data.
The website requires cookies to function. Therefore, by browsing the site with cookies enabled in your browser, you are implicitly accepting the use of at least the essential cookies, as required by current regulations.
How Do They Work and What Are They Used For?
Cookies are found on most websites. When you access a website that uses cookies, it prompts your browser to create small data files on your device needed for the website to function. These are essential for proper operation and are not harmful.
Cookies are stored on your device, much like your browser history or cache, and serve as traces of your internet activity. If others can access your device, it’s advisable to clear your browsing history, cache, and cookies at the end of a session.
Cookies can be disabled, but doing so may result in some website features not working. If you are concerned about privacy, you can completely disable cookies.
Which Cookies Are Necessary?
This site’s cookies help ensure the website functions properly, enabling basic features such as navigation and access to secure areas. The site will not operate correctly without some of these cookies.
Specifically, the site uses the following cookies:
- Technical Cookies: Required or useful for delivering specific services. Disabling these may prevent the site from functioning correctly.
- Analytical Cookies: Used for statistical tracking and analysing user behaviour. Disabling these does not affect the site’s functionality but does hinder the improvement of services through anonymous usage data.
Session Cookie
The CSIRT-CAN portal uses Drupal 11 CMS, which manages user sessions via a PHP session cookie.
- Name: SESS followed by a random string (e.g., SSESS69b3ceaae154617ade4f369c466e11ca)
- Value: Random string uniquely identifying the session (does not store personal data)
- Installation: Set when a user logs in
- Requirements: Necessary to maintain secure sessions
- Duration: 2,000,000 seconds (~23 days), renewed with user interaction
- Expiration: When no interaction occurs within the configured period
- Data Sharing: No personal or sensitive data stored, and no third-party sharing
- User Control: Users may accept or reject cookies in compliance with applicable law
- Data Collected: Only the session ID
- User Interaction: Invisible to users, used solely for session management
How Can I Block Cookie Installation?
Users can reject the installation of all cookies except those expressly authorized or those technically necessary for the site to function, via the cookie consent pop-up on the home page.
Browsers can be configured to accept or reject cookies or to alert users when a cookie is about to be stored. Disabling certain technical cookies may impair functionality.
Users can also opt out of storing Google Analytics cookies using the tools provided by Google.
Browser-specific guides:
You can also refer to the Spanish Data Protection Agency’s page for configuring privacy settings on browsers, social networks, and mobile operating systems.
Privacy and Cookie Policy Updates
This policy is reviewed periodically to ensure its relevance and may be updated. We recommend visiting this page regularly for any updates.
Basic Information on Data Protection
- Data Controller: CSIRT Can, a unit under the Directorate General for Digital Transformation of Public Services of the Government of the Canary Islands.
- Purpose of Processing: To manage, provide, expand, and improve requested services, send information, alerts, and track user inquiries.
- Legal Basis: Processing is carried out to fulfil legal obligations, tasks in the public interest or exercising public authority. Where consent is required, it will be obtained via a clear affirmative action.
No automated decisions will be made based on your profile. - Data Retention: Data will be retained as long as there is a legal obligation or a contractual relationship. Once it ends or deletion is requested, data will be blocked for legally established periods before deletion.
- Recipients: Generally, no personal data is shared with third parties except under legal obligation (e.g., Ombudsman, courts, parties to claims). No international data transfers are planned.
Rights of Data Subjects:
- Withdraw consent at any time
- Access your personal data
- Rectify inaccurate or incomplete data
- Request deletion of your data
- Data portability to another controller
- Restrict processing under certain conditions
- Object to data processing
- File a complaint with the data protection authority (agpd.es)
To exercise your rights or withdraw consent, email info@csirt.org with a copy of your ID or equivalent.