This Privacy Policy explains how the Centro Cultural Costarricense-Norteamericano (CCCN) processes the personal data of people who register for, attend or interact with the National Conference for Teachers of English (NCTE 2026). We process personal data in accordance with Costa Rica's Ley N.º 8968 — Ley de Protección de la Persona frente al tratamiento de sus datos personales and its Regulations, under the oversight of the Agencia de Protección de Datos de los Habitantes (PRODHAB). Where applicable, we also align our practices with international frameworks such as the EU GDPR.
Section 1 Who we are (data controller)
The data controller responsible for your information is:
- Centro Cultural Costarricense-Norteamericano (CCCN), a Costa Rican non-profit association.
- Address: Los Yoses, San José, Costa Rica.
- Data protection contact: ncte@centrocultural.cr.
NCTE 2026 is the 41st edition of CCCN's annual conference, held on July 8 & 9, 2026, in a hybrid format (in-person Day 1 at CCCN Los Yoses; virtual Day 2).
Section 2 Information we collect
We collect only the data needed to register and run the conference:
- Registration data: first and last name, email address, phone number, institution, professional role and country.
- Account data: authentication credentials managed by our identity provider (passwords are hashed; we never see them in clear text).
- Participation data: the sessions you reserve, your boarding-pass ticket code, and check-in timestamps (conference entry and per-session attendance).
- Technical data: standard server and security logs (e.g. IP address, device/browser type, timestamps) and local browser storage used to keep you signed in.
- Voluntary data: anything you choose to send us by email or in support requests.
We do not collect special-category data, and we do not process payment-card data on this site.
Section 3 How and why we use your information
We process your data for the following purposes:
- Create and manage your registration and account.
- Manage session capacity and seat reservations.
- Generate your personal boarding pass and validate entry at the venue.
- Send you logistics and service communications (e.g. confirmations, Day 2 webinar links, schedule changes).
- Ensure the safety and good order of the event and the security of our systems.
- Produce aggregate, non-identifying statistics to improve future editions.
Section 4 Lawful basis for processing
Under Ley 8968 we rely on the following bases:
- Informed consent, which you give expressly when you register and accept this policy.
- Performance of the registration agreement — we need your data to provide the conference services you signed up for.
- Legitimate interest in safeguarding attendees, speakers and CCCN's systems.
Providing the registration data marked as required is necessary to attend; if you choose not to provide it, we may be unable to complete your registration.
Section 5 Cookies and local storage
This site uses a minimal set of technologies: strictly necessary cookies and browser local/session storage used by our authentication provider to keep your session active and to remember staff access during a check-in session. We do not use advertising cookies, and we set the interest-cohort opt-out. You can clear this storage at any time through your browser settings; doing so will sign you out.
Section 6 Who we share your information with
We do not sell personal data. We share it only with service providers (data processors) that help us run the conference, under data-processing terms:
- Supabase — database and authentication.
- Microsoft Azure — website hosting (Static Web Apps).
- Resend — transactional email delivery.
- jsDelivr — public CDN for client-side libraries (no personal data is sent).
We may also disclose data where required by law or by a competent Costa Rican authority.
Section 7 International transfers
Some processors store or process data outside Costa Rica. Where data leaves the country, we require appropriate safeguards (such as contractual data-protection clauses and equivalent security commitments) consistent with Ley 8968 and, where relevant, the GDPR's transfer mechanisms (e.g. Standard Contractual Clauses).
Section 8 Data retention
We keep registration and participation records only as long as necessary for the purposes above and for legitimate administrative, accounting and legal reasons. As a general rule, attendance and check-in records are retained for up to 24 months after the event, after which they are deleted or irreversibly anonymized, unless a longer period is required by law. Security logs are kept for a short, rolling period.
Section 9 Your rights
Under Ley 8968 you have the rights of access, rectification, deletion (supresión) and objection regarding your personal data, as well as the right to know how it is being processed. To exercise any of these, write to ncte@centrocultural.cr with enough information to identify you. We will respond within the timeframe set by the law and its Regulations. You also have the right to file a complaint with PRODHAB (prodhab.go.cr) if you believe your rights have not been respected.
Section 10 Children's privacy
NCTE 2026 is a professional event for educators and is intended for adults (18+). It is not directed to children, and we do not knowingly collect data from minors. Consistent with COPPA (US), we do not knowingly collect personal data from children under 13. If we learn that a minor's data has been provided without proper authorization, we will delete it. Where a minor's data must be processed in a specific case, we will obtain the consent of a parent or legal guardian as required by law.
Section 11 How we protect your data
We apply technical and organizational measures appropriate to the risk, including: encrypted transport (HTTPS/TLS), database Row-Level Security, role-restricted database functions, hashed credentials and access keys, the principle of least privilege for staff, and security headers on the website. Access to attendee data is limited to authorized CCCN personnel for conference operations.
Section 12 Educational-records note (FERPA)
CCCN is not generally subject to the US FERPA statute; however, we use it as a good-practice benchmark for handling academic-adjacent information, consent and vendor controls.
Section 13 Changes to this policy
We may update this policy to reflect changes in our practices or in the law. Material changes will be posted on this page with a new "Last updated" date and, where appropriate, communicated by email. Continued use of the site after an update constitutes acceptance of the revised policy.
Section 14 Contact us
For any privacy question or to exercise your rights, contact CCCN at ncte@centrocultural.cr — Los Yoses, San José, Costa Rica.