58th EABCT Congress 2028 — Riga, Latvia · Last updated 09.08.2026
1. General Information
This Privacy Policy explains how the Latvian Association of Cognitive and Behavioural Therapies (LACBT) processes personal data in connection with the website and organisation of the 58th Congress of the European Association for Behavioural and Cognitive Therapies (EABCT), taking place in Riga, Latvia in 2028 ("the Congress").
The Data Controller is:
Organisation: Biedrība "Latvijas Kognitīvi biheviorālās terapijas asociācija" (Latvian Association of Cognitive and Behavioural Therapies, LACBT)
Registration No.: 40008138489
Legal address: Avotu iela 10-3, Riga, LV-1011, Latvia
E-mail: info@kbt.lv
Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and other applicable Latvian and EU data protection legislation.
2. Personal Data We Collect
When you use the Congress website or submit an expression of interest or contact form, we may collect the following categories of personal data:
We collect only the personal data that is reasonably necessary to organise the Congress and to communicate with prospective participants and other interested persons.
3. Purposes of Processing
We process your personal data to: register your expression of interest in the EABCT Congress 2028; respond to your enquiries; provide information about the Congress; notify you when official Congress registration opens; share updates on the programme, speakers, workshops, registration and venue; communicate with prospective participants, speakers, partners and other interested persons; estimate potential attendance to support organisational and venue planning.
Submitting an expression of interest is not an official Congress registration and creates no obligation to attend.
4. Legal Basis for Processing
We process personal data on the basis of one or more of the following legal grounds under Article 6 GDPR: Consent (Article 6(1)(a)) — where you voluntarily agree to receive information and updates about the Congress; Steps taken at your request prior to a contract (Article 6(1)(b)) — where you contact us about possible registration or participation; Legitimate interests (Article 6(1)(f)) — for organisational and administrative purposes, in particular estimating attendance for venue and capacity planning, maintaining Congress records, and ensuring the safety and security of participants and premises. Where processing relies on your consent, you may withdraw it at any time, free of charge and without affecting the lawfulness of processing carried out before withdrawal.
5. Congress Communications
If you choose to receive information about the EABCT Congress 2028, we may use your contact details to send Congress-related communications, including:
You may withdraw your consent to these communications at any time by contacting info@kbt.lv or using the unsubscribe option included in each message. Your personal data will not be used for unrelated commercial advertising without a separate, appropriate legal basis.
6. Recipients of Personal Data
Access to personal data is limited to authorised persons involved in organising and administering the EABCT Congress 2028. Where necessary, personal data may also be processed by service providers acting on our behalf, such as:
We enter into data processing agreements with these service providers, requiring them to process personal data only on our documented instructions and in accordance with applicable data protection law, and to implement appropriate technical and organisational security measures. Personal data is never sold to third parties.
7. Transfers Outside the European Economic Area
Where a service provider processes personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with the GDPR, such as an adequacy decision of the European Commission, Standard Contractual Clauses, or another lawful transfer mechanism. You may request further information about these safeguards by contacting info@kbt.lv.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
Contact information submitted through an expression-of-interest or contact form is retained for the duration of the preparation and organisation of the EABCT Congress 2028 and for up to 24 months after the Congress concludes, for administrative, reporting and archival purposes.
Where processing relies solely on your consent, we will delete your personal data promptly upon withdrawal of that consent, unless another lawful basis requires or permits its continued retention.
9. Your Rights
Under the GDPR, you have the right, where applicable, to:
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights, please contact us at info@kbt.lv. We will respond to your request within one month of receipt, as required by the GDPR; this period may be extended by a further two months for complex requests, in which case we will inform you of the extension and the reasons for the delay. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija) if you believe your personal data has been processed unlawfully.
10. Data Security
We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to personal data is restricted to persons who require it for legitimate Congress-related organisational or administrative purposes.
11. Cookies
The Congress website may use cookies and similar technologies that are strictly necessary for its operation. Where analytics, marketing or other optional cookies are used, they will not be activated until you have given your consent through the website's cookie banner or settings, which you may withdraw or update at any time. Further details on the specific cookies used, their purpose and duration are provided in a separate Cookie Policy or cookie management interface.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including in response to changes to the Congress website, registration procedures, service providers or applicable legislation. The current version will always be available on the EABCT Congress 2028 website, together with the date it was last updated.
13. Contact
For questions concerning this Privacy Policy or the processing of your personal data, please contact:
Organisation: Latvian Association of Cognitive and Behavioural Therapies (LACBT) — Biedrība "Latvijas Kognitīvi biheviorālās terapijas asociācija"
Registration No.: 40008138489
Legal address: Avotu iela 10-3, Riga, LV-1011, Latvia
E-mail: info@kbt.lv