1. Who is responsible for your data
The controller of the personal data collected on this site and in registrations for IRIA SUMMIT® events is CylinderMargin Lda., NIF 519207769, headquartered in Ovar, Portugal, exclusive commercial representative of the IRIA SUMMIT® brand.
We apply the European Union's General Data Protection Regulation (GDPR) and, for data subjects in Brazil, the General Data Protection Law (LGPD, Law 13.709/2018).
2. What data we collect
| Situation | Data |
|---|---|
| Registering for an event | Name, email, phone (optional), country and payment details. Card details are handled directly by Stripe and never reach us. |
| Contact by WhatsApp or email | Name, contact details and the content of the message you send us. |
| Using the event editor | The texts and choices you enter in the editor. Drafts stay on your device unless you send them. |
| Browsing the site | Technical access data (IP address, browser, pages visited), logged by the hosting service. |
3. What we use the data for
- Processing registration and payment, and sending event access (performance of contract).
- Issuing participation certificates and communicating event changes (performance of contract).
- Responding to information and partnership requests (pre-contractual steps and legitimate interest).
- Meeting legal, tax and accounting obligations (legal obligation).
- Sending news about other events, only with your consent, which you can withdraw at any time.
4. Who we share with
We do not sell personal data. We share only what is necessary with providers who help us run the service:
- Stripe: payment processing.
- Vercel: website hosting.
- Event streaming platform, to send access.
- Anthropic: text generation in the event editor, only when you use the AI assistant. Do not enter third parties' personal data in the editor.
- Authorised operators of the IRIA SUMMIT® network, when the event is organised by a local operator, only to manage that event.
Some of these providers may process data outside the European Economic Area or Brazil, with appropriate safeguards such as standard contractual clauses.
5. How long
We keep registration data for as long as needed for the event and access to the recordings, and then for the period required by tax and accounting law. Business contact data is deleted when no longer needed or when you ask.
6. Your rights
You may request at any time: access to your data, rectification, erasure, restriction of or objection to processing, portability and withdrawal of consent. In Brazil, you also have the rights set out in Article 18 of the LGPD.
7. Cookies
This site uses only the technical elements needed for it to work and to load fonts. If analytics tools are added, this policy will be updated.
8. Security
We take appropriate technical and organisational measures to protect data, including encrypted connections (HTTPS) and certified providers.
9. Changes
We may update this policy. The date of the last update appears at the top of the page.