Privacy Policy
How ENT NMK Events handles personal data across the website, registration process, abstract submissions and Congress administration.
Last updated:
10 October 2026
Website:
entnmkevents.org
Applies to:
ENT NMK Events website and congress services
On this page
- Who we are
- Scope of this policy
- Personal data we collect
- How we collect data
- Purposes and legal bases
- Payment receipts and registration documents
- Who may receive your data
- International transfers
- How long we keep data
- Security
- Cookies and third-party services
- Your rights
- Changes to this policy
- Contact and complaints
Before publishing this page
Replace the controller placeholder with the exact legal entity responsible for the Congress and confirm the final website services (form plugin, hosting, analytics, cookies, email provider and storage). This template is a strong operational draft, but it is not a substitute for review by the organizer’s legal or data-protection adviser.
Who we are
This Privacy Policy applies to the ENT NMK Events website and the services used to support the 5th National Congress of Otorhinolaryngology – Head and Neck Surgery with International Participation.
Data controller: the legal entity responsible for ENT NMK Events and the Congress. Before publication, insert the controller’s exact registered legal name, registered address and a dedicated privacy contact if one is available.
The Congress technical organizer may process personal data on behalf of the controller when supporting registrations, abstracts, logistics, communications and related technical services.
Scope of this policy
This policy explains how personal data is collected, used, stored and protected when you browse the website, contact the organizer, submit an abstract, register for the Congress or upload proof of payment. It also explains your data-protection rights and how to exercise them.
The policy is intended to reflect applicable personal-data protection requirements in North Macedonia and, where relevant, data-protection standards that may apply to visitors from other jurisdictions.
Personal data we collect
Depending on how you use the website, we may process:
- Registration data: first name, last name, city, email address, telephone number, participant category, message/notes and other information submitted in the registration form.
- Payment-verification data: proof of payment and information visible on the uploaded payment receipt that is necessary to verify the registration fee.
- Scientific-submission data: name, professional affiliation, contact details, abstract or presentation files, titles, authorship and scientific content you choose to submit.
- Contact data: information you provide when you contact the organizer.
- Technical data: IP address, browser/device information, security logs, cookie identifiers and similar technical information where collected by the website or its service providers.
Please do not submit personal information that is not necessary for the requested service.
How we collect data
We collect personal data directly from you when you complete a form, upload a document, send an email or otherwise communicate with the Congress team. Limited technical data may also be collected automatically when you use the website.
Where a third party registers or submits information on your behalf, that person is responsible for ensuring that the information is accurate and that they are authorized to provide it.
Purposes and legal bases
Personal data may be processed for the following purposes:
- to receive and administer Congress registrations;
- to verify registration-fee payments and attendance eligibility;
- to communicate confirmations, logistical notices and important Congress updates;
- to receive, review and administer abstracts, presentations and scientific contributions;
- to manage participant lists, badges, certificates and attendance records;
- to maintain website security, prevent misuse and troubleshoot technical problems;
- to comply with accounting, tax, legal or regulatory obligations where applicable.
Depending on the processing activity, the legal basis may be the performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, legitimate interests in organizing and securing the Congress, or consent where consent is legally required (for example, certain optional communications or non-essential cookies).
Payment receipts and registration documents
Proof-of-payment files are used only for registration and payment verification, record-keeping and any related administrative or legal obligations. Because a bank receipt may contain personal or financial information, access should be limited to authorized Congress personnel and service providers who need it for the registration process.
Upload only the requested proof of payment and avoid including unrelated personal information in the file.
Who may receive your data
Personal data may be shared only where necessary with:
- authorized Congress organizers and administrative staff;
- technical organizers and service providers supporting website hosting, registration forms, file storage, email delivery, IT security or event logistics;
- professional advisers or public authorities where disclosure is required by law;
- other parties only where you have been informed and a lawful basis exists.
Personal data is not sold to advertisers.
International transfers
Some website, hosting, email, security or cloud-service providers may process data from locations outside North Macedonia. Where an international transfer requires safeguards under applicable law, the controller should use an appropriate transfer mechanism and contractual or organizational safeguards.
The specific service providers used by the live website should be reviewed before final publication of this policy.
How long we keep data
Personal data is retained only for as long as reasonably necessary for the purposes described in this policy, including Congress administration, payment verification, certificate administration, dispute handling and compliance with legal, accounting or tax obligations.
Different categories of data may have different retention periods. When data is no longer required, it should be securely deleted or anonymized unless continued retention is required by law.
Security
Reasonable technical and organizational measures should be used to protect personal data against accidental loss, unauthorized access, alteration, disclosure or destruction. These measures may include access controls, limited administrative permissions, secure hosting, encrypted connections, protected file storage, backups and security monitoring.
No internet service can guarantee absolute security, so participants should also avoid sending sensitive information unless it is specifically requested and necessary.
Cookies and third-party services
The website may use cookies or similar technologies that are necessary for site functionality, security and form operation. Optional analytics, embedded maps, videos or other third-party features may use additional cookies or transmit technical data to their providers.
Where consent is required for non-essential cookies, those technologies should be activated only after the visitor makes the relevant choice. A separate Cookie Policy or consent banner may be added if the final website configuration requires it.
Your rights
Subject to applicable law and the circumstances of the processing, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of personal data in appropriate cases;
- request restriction of processing;
- object to certain processing based on legitimate interests;
- request data portability where applicable;
- withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing;
- submit a complaint or request to the competent personal-data protection authority.
Identity verification may be requested before acting on a rights request, where appropriate.
Changes to this policy
This Privacy Policy may be updated when the website, registration workflow, service providers or legal requirements change. The latest version will be published on this page with an updated revision date. Material changes should be communicated where required.
Contact and complaints
For privacy-related questions or requests, contact the Congress organizer through the official Congress contact channel. Until a dedicated privacy email is published, the technical organizer can be reached at office@3dstudio.com.mk.
You may also contact the Personal Data Protection Agency of the Republic of North Macedonia if you believe your data-protection rights have been infringed. Current Agency information is available at azlp.mk.
Before publication: add the controller’s exact legal identity and, if appointed, the Data Protection Officer or dedicated privacy contact.
Questions about privacy?
For Congress or data-protection questions, contact the organizer. Privacy requests should be handled through a documented process and answered within the time limits required by applicable law.