Privacy policy
Detailed information (second layer) on the processing of the personal data collected through this website in connection with the management of the event.
Event: BIM Meeting on Railway Infrastructure (VIA BIM 2026).
1. Who are the controllers of your data?
The personal data collected through the website www.viabim.es will be processed as joint controllers by the following entities:
- BUHODRA INGENIERÍA S.A. (ISTRAM), tax ID A33667544, with registered office at Parque Tecnológico de Asturias, Calle Lloreu 4, 33428 Llanera (Asturias, Spain).
- ALLPLAN SYSTEMS ESPAÑA S.A., tax ID A81051807, with registered office at Calle Raimundo Fernández Villaverde 30, Esc. 3, 1º, 28003 Madrid (Spain).
Both entities have entered into a Joint-Controllership Agreement, as provided for in Regulation (EU) 2016/679, which governs their roles and obligations.
2. For what purpose do we process your personal data?
Within the framework of the management of the "BIM Meeting on Railway Infrastructure" event, we will process your data for the following specific purposes:
- Registration and participation management: processing your request to attend, managing access control and sending you all the technical or logistical information needed to hold the event.
- Commercial communications (optional purpose): only if you give your explicit consent by ticking the boxes provided, each of the companies may send you advertising about its products, services, training and future events related to the sector.
3. What is the legal basis for processing your data?
The legal basis varies according to the purpose:
- Registration management: the legal basis is the application of pre-contractual measures or the performance of the legal relationship established when you request to take part in the event, in accordance with Article 6(1)(b) GDPR.
- Commercial communications: the legal basis is the data subject's consent, requested independently and specifically, in accordance with Article 6(1)(a) GDPR. You have the right to withdraw this consent at any time, without affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
4. How long will we keep your data?
The personal data provided will be kept:
- Registration data: until the end of the event and, thereafter, throughout the legally established limitation periods in order to address any liabilities arising from the processing or the organisation of the event.
- Data processed for commercial purposes: until you request its erasure or withdraw the consent given.
5. With which recipients will your data be shared?
No disclosure of data to third parties outside the organising entities is foreseen, except in the case of:
- Legal obligation: where necessary to comply with requests from public or judicial authorities.
- Data processors: technical service providers (web hosting, mailing platforms) acting on behalf of the controllers under a data-processing agreement that guarantees the security of the information.
6. What are your rights when you provide us with your data?
You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. Under Regulation (EU) 2016/679 you may exercise the following rights:
- Access: to know which data we are processing.
- Rectification: to correct inaccurate data.
- Erasure: to request the deletion of your data when it is no longer necessary.
- Objection: to object to the processing of your data on grounds relating to your particular situation.
- Restriction of processing: to request that we temporarily suspend the processing in specific cases.
- Portability: to receive your data in a structured, commonly used format.
To exercise these rights, you may write to the contact point designated by the joint controllers:
- Main contact point: Buhodra Ingeniería S.A. (ISTRAM).
- Email: administracion@istram.net.
- Postal address: Parque Tecnológico de Asturias, Calle Lloreu 4, 33428 Llanera (Asturias, Spain).
You are likewise informed of your right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with the regulations in force.
7. Security measures
The data controllers have implemented the technical and organisational measures necessary to guarantee a level of security appropriate to the risk, preventing the alteration or loss of, or unauthorised access to, your data. In the event of any discrepancy, the Spanish version shall prevail.
Last updated: 8 September 2026.
