Privacy Policy

1. Who We Are

This website is operated by S.G. Worldwide Media Company Ltd, with registration number HE 415670, (hereinafter referred to as the “Controller” or “Company” or “We” or “Us”).

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation – “GDPR”) and, where applicable, other relevant data protection and privacy laws in the jurisdictions in which we operate.

Where required under applicable data protection laws, the Company has appointed a Data Protection Officer. The Data Protection Officer may be contacted regarding all issues relating to the processing of personal data and the exercise of data subject rights at: [email protected]

We are committed to processing personal data lawfully, fairly and transparently and in accordance with the principles set out in Article 5 of the GDPR.

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you interact with our website, register for events, use our networking platforms, purchase products or services, subscribe to communications or otherwise engage with us in a professional capacity.

This Policy applies to this website and, where referenced, to affiliated websites within the SiGMA Group that direct to this Privacy Policy.

3. Categories and Sources of Personal Data

The categories of personal data we process depend on the nature of your interaction with us.

In the context of event registration, networking platforms, service provision or commercial engagement, we may process identification and professional information such as your name, job title, company affiliation and nationality, as well as contact details including business email address and telephone number. Where required for invoicing, ticketing, regulatory compliance or event administration, additional data such as VAT details, billing information or identification documentation may be processed where legally necessary.

In certain instances, we may also request copies of passports. Such requests may be made where required by the authorities of the jurisdiction in which we are holding our event. Where applicable, such personal data is processed on the basis of our legitimate interests, including compliance with legal and regulatory requirements, event security, and the effective organisation and delivery of our events.

When you use our websites, certain technical data may be processed automatically, including IP address, browser type, device information, operating system, access timestamps and referring URLs. Such processing supports the security, functionality and stability of our services.

Where you attend our events, photographs and video recordings may be captured for documentation, promotional, security and archival purposes. Such processing is carried out on the basis of our legitimate interests, provided that these interests do not override the rights and freedoms of individuals.

Personal data is generally collected directly from you. In certain circumstances, personal data may also be obtained from authorised business partners, event organisers, payment providers or publicly available professional sources where such collection is lawful and necessary.

We process only personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

4. How Personal Data Is Collected

Personal data is collected when you complete forms, register for events, create accounts, subscribe to communications, make purchases, contact us or otherwise communicate with us.

Certain information is collected automatically through cookies and similar technologies when you browse our website. Further information regarding cookies is provided in our Cookie Policy.

5. Legal Basis for Processing

Personal data is processed only where a lawful basis under Article 6 of the GDPR applies.

Processing may be necessary for the performance of a contract, including the administration of event registrations, provision of services, management of accounts or fulfilment of purchases.

Processing may also be required to comply with legal obligations, including tax, accounting, regulatory, security or compliance requirements.

In certain circumstances, processing is based on our legitimate interests, including ensuring the security and proper operation of our websites and events, preventing fraud, managing business operations, communicating with corporate representatives, improving services and establishing or defending legal claims. Such processing is carried out following a balancing assessment to ensure that it does not override the rights and freedoms of individuals.

Where required by law, processing may be based on consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects concerning individuals within the meaning of Article 22 of the GDPR.

7. Disclosure of Personal Data

Personal data may be shared within the SiGMA Group where necessary for operational, administrative or event-related purposes.
We may engage carefully selected third party service providers who act as data processors on our behalf. These processors are contractually bound to process personal data strictly in accordance with our instructions and in compliance with applicable data protection laws.
Personal data may also be disclosed where required by law, regulation, court order or governmental authority, or where necessary to protect our legitimate interests, including the establishment, exercise or defence of legal claims.
In the context of corporate transactions such as mergers, acquisitions or restructuring, personal data may be transferred under appropriate confidentiality and data protection safeguards.

8. International Transfers

Where personal data is transferred outside the European Union or European Economic Area, such transfers are carried out in accordance with Chapter V of the GDPR and subject to legally recognised transfer mechanisms, including adequacy decisions or appropriate safeguards.

9. Retention of Personal Data

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and contractual obligations.

Retention periods are determined based on the nature of the data, the purpose of processing and statutory requirements. Where personal data is no longer required, it is securely deleted or irreversibly anonymised.

10. Security Measures

We implement technical and organisational measures appropriate to the nature, scope, context and purposes of processing, taking into account the risks to the rights and freedoms of individuals, in accordance with Article 32 of the GDPR.

Such measures are designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

In the event of a personal data breach that poses a risk to individuals, we will notify the competent supervisory authority within the timeframe required by law and, where applicable, inform affected individuals.

11. Your Rights

Subject to applicable legal limitations, you may exercise your rights under the GDPR, including the right to access, rectify or erase personal data, restrict or object to processing, request data portability where applicable, and withdraw consent where processing is based on consent.

The exercise of certain rights may be subject to statutory limitations, including where processing is necessary for compliance with legal obligations or for the establishment, exercise or defence of legal claims.

Requests may be submitted to [email protected], and we may request appropriate verification of identity before responding.

You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction.

12. Accountability and Governance

The Company maintains internal data protection policies, procedures and controls designed to ensure ongoing compliance with applicable data protection laws and to demonstrate accountability in accordance with Article 24 of the GDPR. Personal data processing activities are subject to appropriate governance oversight and risk-based review.

13. Updates to This Policy

This Privacy Policy may be updated periodically to reflect legal, technical or operational developments. The most current version will be available on our website.