Privacy policy

Last updated: 6 October 2026

1. Data controller

XESTECO Consultoría, S.L.
Tax ID: B01678606
Registered office: C/ da Feira, 3, bajo, 27720 A Pontenova (Lugo)
Contact email for matters related to this activity: julio@xesteco.com.

2. What data we process

The pre-registration form may process the participant's identification and contact details, date of birth and age, place of residence, educational centre and year, previous Model United Nations experience, committee preferences, information included in the motivation and response about rural challenges, and the contact details of their parent or legal guardian.

We do not request health data or other special categories of data through this form.

3. Why we use the data

The data is used to manage pre-registrations, assess and organise participation, contact interested people and, when necessary, their legal guardians, organise the activity and provide information related to RuralMUN Oscos-Eo.

The data will not be used to send advertising or for purposes other than those described, unless another legal basis applies or new consent is requested.

4. Legal basis

The main legal basis for managing pre-registration is the consent of the person concerned. Under Article 7 of Organic Law 3/2018, people over 14 may give their own consent to the processing of personal data when processing is based on consent, unless a specific rule requires assistance from those with parental responsibility or guardianship.

5. Who we may share data with

Data may only be accessible to the entities and people involved in managing and organising RuralMUN to the extent necessary to carry out the activity, and to technology providers supplying hosting, forms, email or other necessary services, acting as processors where applicable.

Data is not expected to be shared for commercial purposes. Where an international transfer of data is necessary, the safeguards required by data protection law will apply.

6. How long we keep data

Data will be kept for as long as necessary to manage pre-registration, selection and organisation of the activity and, afterwards, for any periods required to address legal responsibilities. Data of people who do not ultimately participate will be deleted when it is no longer necessary for the purpose for which it was collected, unless there is a legal obligation to retain it.

7. Your rights

You may request access to your data, rectification, erasure, restriction of processing, objection and portability where applicable. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, you may write to julio@xesteco.com, stating which right you wish to exercise and providing the information needed to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Data concerning other people

When the person completing the form provides contact details of a parent or legal guardian, they must have sufficient authorisation to provide them. Information about the processing of those data is available through this policy and will be provided directly to the person concerned where necessary.

9. Security

Appropriate technical and organisational measures will be applied to protect data against loss, unauthorised access, alteration or improper disclosure, taking into account the nature of the processing and the risks involved.

10. Changes to this policy

This policy may be updated to reflect changes in event organisation, processing activities or applicable law. The current version will always be available on this page.