European Society of Emergency Radiology

Privacy Policy — ESER Annual Scientific Meeting 2026

Last updated: April 2026  ·  Compliant with GDPR (EU 2016/679)

1. Data controller

The data controller for personal data collected through the ESER 2026 congress website is:

European Society of Emergency Radiology (ESER)
Congress management services provided by: Indigo Events
Contact for data protection enquiries: eser@indigoevents.co

2. Personal data we collect

We collect the following categories of personal data through registration, abstract submission, and use of this website:

Registration

First name, last name, email address, phone number, institution, country, registration type

Financial

Payment details (processed securely by our payment gateway; we do not store card data)

Travel services

Airport transfer: arrival date and time (collected only if you opt in to this service)

Abstract submission

Abstract title, body (up to 250 words), author names & affiliations, presentation type, keywords, references, supporting files (PDF/JPG/PNG)

Image & video

Photographs and video footage taken at the event (see section 3)

Technical

IP address, browser type, device information, cookies and analytics data

3. Purposes and legal basis

PurposeLegal basis (GDPR Art. 6)
Processing your congress registration and issuing confirmationArt. 6(1)(b) — Contract
Processing registration fees and handling cancellation/refund requestsArt. 6(1)(b) — Contract
Arranging optional airport transfer servicesArt. 6(1)(b) — Contract
Managing abstract submissions and peer reviewArt. 6(1)(b) — Contract
Retaining financial records for statutory accounting purposesArt. 6(1)(c) — Legal obligation
Sending event-related communications (programme updates, logistics)Art. 6(1)(f) — Legitimate interests
Publishing accepted abstracts in the congress proceedings / book of abstractsArt. 6(1)(f) — Legitimate interests
Photography and video recording for ESER marketing and promotional useArt. 6(1)(a) — Consent*
Sending future ESER event announcements and newslettersArt. 6(1)(a) — Consent

* By attending ESER 2026, you acknowledge that ESER may capture and use photographs and video footage for marketing purposes, as stated in the Terms & Conditions accepted at registration. You may object to such use at any time by contacting us.

4. Data sharing and recipients

We do not sell your personal data. Your data may be shared with the following parties only as necessary:

  • Indigo Events — congress management, registration platform (meetSOsimple), and on-site logistics
  • Payment gateway provider — for secure processing of registration fees; card data is not stored by ESER or Indigo Events
  • Transfer and hospitality providers — name and travel details shared only if you purchase the airport transfer service
  • Abstract review committee members — author names and abstract content for scientific peer review
  • ESER partners and sponsors — only with your prior explicit consent; limited to name and professional affiliation
  • Regulatory or legal authorities — where required by applicable law

5. Retention periods

Data categoryRetention period
Registration and attendance records5 years after the congress
Financial / invoicing data7–10 years (statutory accounting obligation)
Abstract submissions and proceedingsIndefinitely (scientific record); author contact data: 5 years
Marketing communications / newsletterUntil you withdraw consent or unsubscribe
Website technical data / cookiesUp to 13 months

6. Your rights under GDPR

Access (Art. 15)

Obtain a copy of the personal data we hold about you

Rectification (Art. 16)

Correct inaccurate or incomplete data without undue delay

Erasure (Art. 17)

Request deletion where no overriding legal basis applies

Restriction (Art. 18)

Limit processing in certain circumstances while a dispute is resolved

Portability (Art. 20)

Receive your data in a structured, machine-readable format

Object (Art. 21)

Opt out of processing based on legitimate interests or direct marketing

Withdraw consent

At any time where processing relies on consent, without affecting prior processing

To exercise any right, contact us at eser@indigoevents.co. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection supervisory authority (e.g. the Data Protection Commission in Ireland, CNIL in France, BfDI in Germany, or the supervisory authority of your country of residence).

7. International transfers

ESER 2026 accepts registrations from participants worldwide. Where personal data is transferred outside the European Economic Area, we ensure an adequate level of protection through Standard Contractual Clauses or by relying on an adequacy decision issued by the European Commission. Details of applicable safeguards are available upon request.

8. Cookies

This website uses strictly necessary cookies to provide core registration functionality, and optional analytics cookies to improve website performance. You may manage your preferences via your browser settings. Declining analytics cookies does not affect your ability to register or submit an abstract.

9. Security

We implement technical and organisational measures proportionate to the risk, including TLS encryption for all data in transit, access controls restricted to authorised personnel, and secure third-party payment processing. In the event of a personal data breach posing a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by GDPR.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or how we operate. Material changes will be notified via a notice on the congress website. The date at the top of this page reflects the most recent revision.


Implementation note: This policy reflects the specific data fields collected on the ESER 2026 registration and abstract submission pages as of April 2026. Before publishing, confirm ESER's legal country of establishment and add the address of the competent supervisory authority for that jurisdiction. If Indigo Events acts as a data processor rather than a joint controller, a Data Processing Agreement (DPA) should be in place between ESER and Indigo Events per GDPR Art. 28.