Cookie policy

Browsing through this website, just as through any other website leaves behind the IP track that was assigned by the Internet service provider for a given session. The register of the IP address is for internal use only, such as the website access statistics.

The CSIRT website and its domains use cookies (small information files sent by the server to the computer of the user who is browsing the website) for the correct functioning and visualization of the website, for statistics purposes and for any security elements involved in control of access to restricted areas.

Accepting the cookie policy

The CSIRT displays information on its cookie policy at the bottom of each page anytime a session is started to inform the user.

As the information is displayed, the following actions may be carried out:

• Accepting cookies. This warning will not appear again when accessing other pages of the website during the session.
• Closing. The warning is concealed in the present page.
• Changing the configuration.

How to change the configuration of cookies

You may restrict, block or delete the cookies of the Ministry of Industry, Energy and Tourism as well as from any other website by using your browser. Each browser operates differently. The “Help” feature will show you how to do it. 

• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera

Legal advice

CONDITIONS OF USE OF THE WEBSITE www.csirt.es

csirt.es is an Internet domain owned by the National Cryptologic Centre (hereinafter CCN), CIF number S-2800155-J, with registered office at C/Argentona 30, 28023 Madrid - Spain. Telephone (+34) 91 372 50 00. E-mail address 

WEBSITE GENERAL CONDITIONS OF USE

The CCN informs you that access to and use of the website www.csirt.es and all the sub-domains and directories included under it (hereinafter jointly referred to as the website), as well as the services or contents that can be obtained through it, are subject to the terms detailed in this Legal Notice, without prejudice to the fact that access to any of these services or contents may require the acceptance of other types of conditions that will be previously shown.

Therefore, if the considerations detailed in this Legal Notice are not to your liking, please do not use the website, as any use you make of it or of the services and content included in it will imply full and unreserved acceptance of the legal terms set out in this text.

The CCN reserves the right to make changes to the website without prior notice, in order to update, correct, modify, add or remove the contents of the website or its design. Likewise, the conditions and terms set out in this Notice may vary, and therefore, given that access and/or use of the website attributes the condition of user, we inform you that you should review these terms each time you visit the website again.

EXCLUSION OF LIABILITY

The CCN does not guarantee the absence of errors in the access to this website, in its content, nor that it is updated, although it makes every effort to avoid them. Therefore, both the access and the use that may be made of the information contained in the same are the exclusive responsibility of the person carrying it out.

In the event that the website contains links or hyperlinks to other Internet websites, the CCN will not exercise any control over such sites and content. The user assumes under their own responsibility the consequences, damages or actions that may arise from accessing the hyperlink's website.

Under no circumstances will the CCN assume any responsibility for the contents of any link belonging to an outside website, and therefore does not guarantee the quality, accessibility, reliability, accuracy, veracity and legality of any type of material or information contained in these websites.

In no case is there any association between the CCN website and the linked external sites.

MULTILINGUAL VERSION

The CSIRT website has been translated into a foreign language (English).

The content of the website is translated at different levels of depth. The sections that are continuously updated are excluded from the translation, given the immediacy of the changes made to it, as well as the legal regulations.

It should be noted that, in general, there may be a gap between the Spanish version and the other languages, as a result of the translation process.

INTELLECTUAL AND INDUSTRIAL PROPERTY RIGHTS

The CCN is the owner of the website www.csirt.es, as well as the domain csirt.es.

This website, as well as its contents (including databases, text files, audio, video and software), designs and services are owned and controlled by the CCN, and are protected without limitation by Spanish industrial and intellectual property laws, as well as by the various applicable international treaties. Likewise, the brands, labels, distinctive signs or logos of the CCN and CSIRT which appear in the website are the property of the CCN, and as such are duly registered.

The use, total or partial reproduction, distribution, public communication, including the making available of all or part of the contents of this website, transformation, translation, adaptation or any other similar or analogous activity is totally prohibited unless prior written authorisation has been granted by the CCN. The licence to use any content of this website granted to the user is limited to the downloading by the user of such content and the private use thereof, provided that the content remains complete.

USE OF IP ADDRESSES AND NAVIGATION WITH COOKIES

The navigation of a user in this website, as in any other website, leaves as a trace the IP address that in that session has been assigned to them by their Internet access provider. The registration of this IP address serves exclusively for internal purposes, such as access statistics for the website.

The CSIRT website and its domains use cookies (small information files which the server sends to the computer of the person accessing the website) for the correct functioning and visualisation of the websites by the user, the collection of statistics and on those security elements which intervene in the control of access to restricted areas.

The CSIRT displays information about its Cookie Policy at the bottom of any section of the website with each login in order to make you aware.

In view of this information, the following actions can be carried out:

• Accept cookies. This warning will not be displayed again when accessing any section of the website during this session.
• Restrict, block or delete the CSIRT cookies or any other website, using your browser. Each browser operates differently. If the user of the www.CSIRT.cni.es website does not wish to accept the recording of the cookie on their computer, they can browse the website without any type of restriction.

ACCESS RESTRICTIONS

The CCN reserves the right to discretionally deny, at any time and without prior notice, access to this website or any part of it to any user.

APPLICABLE LAW AND JURISDICTION

The relationship between CCN and the user will be governed by current Spanish legislation, regardless of the user's legal environment. The resolution of any controversy that may arise from the visit to the website, or from the use of the services that may be offered therein, will be submitted to the Courts and Tribunals of Madrid.

Privacy Policy

In compliance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform you of the following legal aspects:

1.- Responsible for processing

The data controller is the National Cryptology Centre (CCN).

VAT numbre S-2800155-J,

Registered office at C/Argentona 30, 28023 Madrid - Spain.

Telephone (+34) 91 372 50 00

E-mail address: 

2.- Purpose of the processing

The collection and processing of personal data has as its sole purpose the management, provision, extension and improvement of the services requested at any time by the user, the sending of information, warnings and alerts, as well as the follow-up of queries raised by users.

3.- Legitimation of the treatment

The legal basis of the processing, according to Article 6 of the RGPD, is based on the following conditions:

1. a) Processing is necessary to comply with a legal obligation applicable to the Data Controller (CCN), as a result of the powers conferred on it by Royal Decree 311/2022, of 3 May, which regulates the National Security Scheme, Royal Decree 421/2004, of 12 March, which regulates the National Cryptology Centre, by virtue of the provisions of Law 11/2002, of 6 May, regulating the National Intelligence Centre, within the framework established by the National Cybersecurity Strategy.
2. b) processing is necessary for the enforcement of a contract to which the data subject is a party or for the application of pre-contractual measures at his request; in accordance with Article 13(c) of the RGPD, processing based on consent shall mean that the existence of a right to withdraw consent shall not at any time affect the lawfulness of processing based on consent prior to its withdrawal.

It should be noted that, in the event of requesting a service, it may not be provided if the necessary information to carry it out is not provided. No automated decisions will be made based on your profile.

4.- Data retention

In general, the personal data provided will be kept as long as the aforementioned legal obligation of the Data Controller or the aforementioned contractual relationship is maintained. When this relationship ceases, and in any case if the deletion of the data is requested, we will keep your personal data blocked for the periods established by law. Once these deadlines have elapsed, they will be eliminated in accordance with current legislation.

5.- Recipients of assignments or transfers

The data may be transferred to legally authorized third parties, such as the Tax Administration or judicial bodies.

We also inform you of the existence of data processors with whom we sign appropriate contracts of data access on behalf of third parties in accordance with art. 28 et seq. of the RGPD. Only those treatment providers who offer sufficient guarantees to implement appropriate technical and organisational measures shall be selected so that the treatment is in accordance with the requirements laid down by law.

Contrarily, no international data transfers are foreseen.

6.- Rights of the persons concerned

The affected parties, within the legal framework that is applicable in each case, shall have the following rights:

• Right to withdraw consent at any time.
• Right of access: they may request access to their personal data.
• Right of rectification: They may amend inaccurate personal data or supplement incomplete data, including by means of an additional declaration.
• Right of deletion: They may request the deletion of personal data concerning them.
• Right of portability: they have the right to receive the personal data provided and to transfer them to another controller.
• Right to limitation: when certain conditions are met, the data subject has the right to obtain a limitation on the processing of his or her personal data.
• Right to object to processing: They may request that personal data not be processed.
• The right to lodge a complaint with the supervisory authority (agpd.es) if they consider that the processing does not comply with current legislation.

To exercise any of these rights or to revoke your consent you can do so by sending an email to . In order to exercise your rights, a copy of your identity card or equivalent document must accompany your application.

Contact

You can contact us if you wish to belong to this group. Please note the necessary requirements described in the Members section.

From CSIRT.es we do not manage cybersecurity incidents. We remind you that there are 3 reference CSIRTs where you can refer them: CCN-CERT for incidents related to Public Administration, INCIBE-CERT for incidents related to private sector and citizens and MCCE for issues related to Defense.