ECCNA 42 Malta · 2027

Privacy Policy

Last updated: 11 October 2026

Online registration and live payments for ECCNA 42 are now open. This Privacy Policy applies to the ECCNA 42 website and online store.

This website, https://eccna.eu, and the ECCNA 42 online store are operated by Narcotics Anonymous Malta (VO/2598) (“we”, “our”, “us”), Millenium Chapel, Triq il-Knisja, San Ġiljan STJ 3043, Malta. We respect your privacy and are committed to protecting the personal information of visitors to our website and participants registering for ECCNA 42, in accordance with the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

Anonymity is a spiritual foundation of our fellowship. We collect only the information we genuinely need, and we treat everything you share with us — especially anything relating to your recovery — with strict confidentiality.

1. What information we collect

a) Information you give us when you place an order

When you register for ECCNA 42 or purchase tickets, activities or donations through this website, we collect:

  • First and last name
  • Email address
  • Telephone number (optional)
  • Country
  • Billing details you enter at checkout
  • Details of the items you order and the amounts paid

b) Sensitive information you may choose to give us

You may choose to provide information about accessibility or other special requirements when registering.

  • Special needs — accessibility or other special requirements

We ask for this only so we can make appropriate arrangements for the convention. By entering this information you give your explicit consent for us to use it for that purpose. This information is treated as confidential, is accessible only to the small event team that needs it, and is never used for marketing or unrelated purposes.

c) Payment information

Card payments are processed securely by Stripe. Card details are transmitted directly to Stripe and are not stored by eccna.eu. We receive payment status and transaction information needed to administer the order.

d) Information collected automatically

When you browse the site we collect limited technical information through cookies and analytics tools (e.g. Google Analytics): IP address, browser type, operating system, pages visited, and the time and duration of your visit. This information is used only in aggregate to understand how the site is used.

2. How and why we use your information

  • Processing and delivering your order, sending order confirmations — name, email, phone, country, order details — legal basis: performance of a contract.
  • Convention administration (passes and accessibility arrangements) — registration details and any special-needs information you choose to provide — legal basis: performance of a contract and, where sensitive information is provided, your explicit consent.
  • Anonymous convention statistics (for example, attendance by country) — aggregated registration data only — legal basis: legitimate interest (never identifies individuals).
  • Accounting, fraud prevention and dispute handling — order and transaction records — legal basis: legal obligation / legitimate interest.
  • Responding to your enquiries — contact details, correspondence — legal basis: legitimate interest.
  • Improving the website — aggregated analytics data — legal basis: legitimate interest.

We do not use your information for marketing, we do not sell it, and we do not use it for automated decision-making or profiling.

3. Who we share your information with

We share personal information only with service providers who need it to help us run this website, and only to the extent necessary:

  • Our payment service provider — payment processing (card data is handled under their own privacy policy)
  • Our website hosting provider and Cloudflare — hosting and security of the website
  • Our email provider — sending order confirmations and reports
  • Authorised ECCNA 42 event administrators — order management and event administration

The European Delegates Meeting (EDM) may receive only aggregated, anonymous statistics (such as total registrations and attendance by country) in the final convention report — never your personal details.

All providers are bound by confidentiality and data-processing obligations. We may also disclose information where required by law. We do not otherwise share your information with any third party.

4. How long we keep your information

  • Order and registration data: for the duration of the convention and afterwards only as long as required for accounting, tax and dispute-resolution purposes, after which it is deleted.
  • Special-needs information: deleted after the convention once it is no longer needed for event administration.
  • Analytics data: retained per the retention settings of our analytics tools and used only in aggregate.

5. Your rights

Under the GDPR you have the right to:

  • Access the personal information we hold about you
  • Rectify inaccurate or incomplete information
  • Erase your information (“right to be forgotten”), subject to legal retention obligations
  • Restrict or object to processing
  • Data portability — receive your data in a portable format
  • Withdraw consent at any time for processing based on consent (such as special-needs information), without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at registration@eccna.eu or eccnapp@edmna.org. You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta — https://idpc.org.mt.

6. Cookies

Cookies are small files placed on your device to make the website work and to collect statistical information. Essential cookies are required for the store (for example, keeping items in your basket). Analytics cookies are optional; you can refuse or delete cookies in your browser settings, though some store features may not function without essential cookies.

7. Security

The website is served over an encrypted HTTPS/TLS connection. Order and registration information is stored on secured servers, with backups, and access is limited to authorised administrators. Card data is handled exclusively by our payment service provider under PCI DSS certification.

8. Third-party websites

Our website contains links to third-party websites (for example, accommodation booking). We are not responsible for their privacy practices and encourage you to read their policies.

9. Changes to this policy

We may update this policy from time to time. Changes will be reflected in the “Last updated” date above.

10. Contact us

Narcotics Anonymous Malta (VO/2598)
Millenium Chapel, Triq il-Knisja, San Ġiljan STJ 3043, Malta
Email: registration@eccna.eu / eccnapp@edmna.org
Telephone: +356 7946 6566