GDPR Agreement

This Privacy Policy explains how BSides Chisinau ("we", "our") collects, uses, stores, and protects your personal data in accordance with Moldova's Law No. 195/2024 on Personal Data Protection, which aligns Moldovan law with the EU General Data Protection Regulation (GDPR).

We are committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner.

• Personal Data: Any information that can directly or indirectly identify a natural person.
• Cookie: A small file stored by your browser to recognize your preferences and behavior.
• Device: Any internet-connected equipment used to access our services.
• Service: The BSides Chisinau event, platform, and associated activities.
• Website: https://www.bsideschisinau.com
• You: The person interacting with BSides Chisinau (participant, volunteer, speaker, sponsor, visitor).

Depending on your interaction with us, we may collect the following types of personal data:

• Full name, email address, phone number
• Organization and role
• Brief biographical information (for speakers and volunteers)
• Billing or payment information (for sponsors)
• IP address and technical data about your browser and device (see Technical Data Recorded at Registration below)
• Social media links (if voluntarily provided)
• For participants: country, gender, participant category, experience level, how you heard about the event and any accessibility needs you choose to share
• For a workshop that confirms places on request: the sector you work in, your years of experience, a link to your professional profile if you give one, and a short description of your work

We process personal data solely for the purpose of organizing and managing BSides Chisinau, including:

• Event communication and registration
• Confirming places at workshops that are aimed at people working in the field
• Volunteer coordination
• Speaker selection
• Sponsor engagement
• Logistics and security

Legal bases for processing include:

• Freely given and informed consent
• Legal obligations
• Legitimate interests of the organizers to ensure a secure and functional event

*By submitting this form, you consent to the use of your personal data exclusively for organizing and managing BSides Chisinau. Your data will be processed in accordance with Moldova's Law No. 195/2024 on Personal Data Protection.

When you register as a participant, we also record technical data about that submission:

• your IP address, and the country, region, city and internet provider derived from it
• your browser, operating system and device type, as reported by your browser, and its language settings
• your time zone, screen and window size, and basic device characteristics (number of processor cores, memory class, touch support, connection type)
• how you reached the site: the page you first opened, the website that sent you and any campaign parameters (utm) in the link
• how long the form took to complete and how many times it was submitted

Purpose: to protect the registration against abuse (automated or bulk sign-ups, fake registrations) and to produce anonymous statistics about our audience, for example which countries and channels participants come from. Legal basis: our legitimate interest in running a secure registration and in reporting on the event.

The location is looked up on our own server in an offline database, so your IP address is not sent to any third party for this. These technical data are not included in the emails we send, are never shared with sponsors or partners, and are deleted automatically within 30 days after the event. Only anonymous totals are kept afterwards (for example, how many participants registered from a given country or browser), which cannot identify anyone.

IP geolocation by DB-IP, licensed under CC BY 4.0.

By submitting your email address, you agree to receive communications related to the event. You may unsubscribe at any time via the provided link or by contacting info@bsideschisinau.com.

We do not send unsolicited commercial emails and do not share your address with unrelated third parties.

Personal data is retained only as long as necessary for the stated purposes and in accordance with applicable Moldovan regulations.

Technical data recorded at registration is deleted within 30 days after the event, as described above.

We may share your personal data only with:

• Service providers involved in organizing or supporting the event
• Public authorities, where legally required

We do not sell or rent your data to third parties.

Sponsors and partners never receive participants' personal data. Country, gender, participant category and experience level are used only as aggregate statistics, for example to report how many students or professionals attended, and never in a form that identifies a person.

In specific cases, personal data may be transferred outside the Republic of Moldova. Such transfers are carried out only under the conditions permitted by Moldova's Law No. 195/2024 on Personal Data Protection, and appropriate safeguards will be applied where necessary.

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.

Under applicable law, you have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent at any time
• Object to or restrict data processing
• File a complaint with the National Center for Personal Data Protection of Moldova

Requests should be addressed to: info@bsideschisinau.com

We reserve the right to update this policy as needed. Changes will be published on our website. Continued use of our services implies your agreement to the updated policy.

Data Controller: BSides Chisinau Team

Email: info@bsideschisinau.com