Privacy Policy
This website does not collect personal data from users without their knowledge, nor is any such data shared with third parties.
The portal owned by CSIRT-CAN contains links to third-party websites whose privacy policies are separate from those of CSIRT-CAN. When accessing such websites, you may decide whether to accept their privacy policies.
This policy is periodically reviewed to ensure it remains current and may therefore be modified. We recommend visiting this page regularly, as we will inform you of any updates.
The data controller is CSIRT-CAN, a unit under the Directorate General for Digital Transformation of Public Services of the Government of the Canary Islands.
The collection and processing of personal data is carried out exclusively for the purpose of managing, providing, expanding, and improving the services requested by users at any given time, sending information, notices, and alerts, as well as following up on queries submitted by users.
The processing of your data is carried out to comply with legal obligations by CSIRT-CAN, to fulfil tasks carried out in the public interest or in the exercise of official authority vested in CSIRT-CAN, and in cases where the purpose of the processing requires your consent, which must be given through a clear affirmative action.
No automated decisions will be made based on your profile.
In general, personal data provided will be retained for as long as the aforementioned legal obligation of the Data Controller or the contractual relationship remains in force. Once this relationship ends, and in any case if deletion of the data is requested, the data will be kept in a blocked state for the periods established by law.
After these periods have elapsed, the data will be deleted in accordance with applicable legislation.
In general, personal data will not be communicated to third parties, except where legally required. No international data transfers are planned.
Data subjects have the following rights:
- Right to withdraw consent at any time.
- Right of access to personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure of personal data.
- Right to data portability.
- Right to restriction of processing.
- Right to object to processing.
- Right to lodge a complaint with the supervisory authority (AEPD).
To exercise these rights or to withdraw consent, please send an email to info.srv@csirtcan.org. You will need to attach a copy of your national ID or equivalent document.