1. Who this policy applies to
This policy covers visitor registration, exhibitor, sponsor, and speaker interest forms, use of the application by authorised users, and participation in GETTfest 2027 or future GETTfest events operated through the same platform.
2. Data controller
Europalso is the data controller. For questions about this policy or requests concerning your personal data, contact europalso@europalso.gr.
3. Data we collect
- Visitor registration details such as name, email, phone number, school or organisation, profession, area, country, visitor category, and answers to configurable form fields.
- Details submitted through exhibitor, sponsor, and speaker forms, such as contact information, company or organisation, professional role, website, message, proposal, topic, or area of interest.
- Consent and submission data such as submission date and time, IP address, device or browser information, and acceptance of the Privacy Policy.
- Badge and access data such as approval status, QR badge, badge code, email delivery status, and PDF badge generation information.
- Entrance and seminar check-in records such as event day, location, seminar, scan result, scan time, and the authorised staff user who performed the check.
- Technical security data such as essential session cookies, CSRF tokens, server logs, and Cloudflare Turnstile verification data when automated-submission protection is enabled.
4. How we use the data
- To receive, review, and approve visitor registration applications.
- To send event information, QR badges, and PDF badges where applicable.
- To manage check-in at the main entrance and seminars and confirm whether a visitor category has access.
- To contact people or companies that express interest as exhibitors, sponsors, or speakers.
- To produce operational reports, exports, and statistics, including check-in by day, room, seminar, or category.
- To protect the platform, prevent misuse, and support administrative requests.
5. Legal bases for processing
- Your consent when you submit a form and accept the Privacy Policy.
- Our legitimate interest in the secure and organised operation of the event, check-in, and operational reporting.
- Steps taken at your request when you express interest in exhibiting, sponsorship, speaking, or attending.
- Compliance with legal obligations where required.
6. Anonymous evaluation questionnaire
Evaluation answers are anonymous. We do not ask for a name, email address, phone number, or another direct identifier. Answers are used to improve future events and are not linked to visitor registration, QR badges, or check-in activity.
The final questions may allow optional free-text answers. Please do not enter your own personal data or another person's personal data in these answers.
Cloudflare Turnstile and a temporary technical submission limit based on IP address are used to prevent automated or abusive submissions. The limit expires automatically, and the IP address is not stored with the evaluation response. Only authorised administrators may review or delete responses.
Anonymous evaluation responses are retained for up to 12 months after the event ends. They are then deleted or retained only in anonymous aggregate form, depending on operational needs.
7. Who has access
Access is limited to authorised GETTfest or Europalso administrators and staff users according to their roles. Hosting, email, storage, backup, technical support, and security providers may support platform operation, including Cloudflare Turnstile for form protection. We do not sell personal data.
8. Cookies and technical protection
The platform uses essential cookies for login, form security, and CSRF protection. When Cloudflare Turnstile is enabled, technical scripts or cookies may be loaded to help confirm that a submission comes from a person rather than an automated bot. We do not use advertising cookies on the platform's public forms.
9. Data retention
Personal data is retained for 12 months after the event ends unless a longer period is required by a legal obligation, an active request, a technical investigation, or the need to protect legal rights. Aggregated statistics that do not identify individuals may be kept for historical and operational evaluation of events.
10. International transfers
When technical service providers process data outside the European Economic Area, we rely on safeguards provided by data protection law, such as adequacy decisions or standard contractual clauses, where required.
11. Your rights
You may request access, correction, deletion, restriction of processing, data portability, objection to processing, or withdrawal of consent where processing is based on consent. To exercise a right, contact europalso@europalso.gr.
You also have the right to complain to the Hellenic Data Protection Authority. More information is available at https://www.dpa.gr.
12. Security
We use role-based access, authenticated staff accounts, QR token validation, scan-result logging, restricted administrator access, HTTPS, and secure server operation practices. Although no system can guarantee absolute security, we apply organisational and technical measures to protect the platform.
13. Changes to this policy
This policy may be updated if the operation of forms, badges, check-in, or the providers we use changes. The latest version will always appear on this page.