Privacy Policy (GDPR)

1. Data Controller

My Tech Plan, S.L. (hereinafter, "My Tech Plan")

• Tax ID (NIF): B72963432
• Address: C/ Hermosilla nº 48, Esc. Derecha, Planta 1, 28001, Madrid (Spain)
• Website: mytechplan.com
• Contact email: hola@mytechplan.com
• Privacy email: rgpd@mytechplan.com
• Phone: +34 600 579 356

2. Scope

This policy applies to browsing and forms on mytechplan.com, as well as to services, programs, and events managed by My Tech Plan and related communications.

Certain events or projects may include specific data processing (for example, sharing data with sponsors/partners or co-organizers for their own purposes). In such cases, My Tech Plan may publish an annex or specific policy applicable to the event/project.

3. Personal Data We Process

Depending on the case, My Tech Plan may process the following categories of data:

3.1 Identification and contact

Name, surname, email, and phone number (when provided, and whenever necessary for the stated purpose).

3.2 Professional data

Role/position, company, years of experience, and other professional information voluntarily provided by the data subject through forms or registration processes.

3.3 Registration, attendance, and event operations data

Registration/ticket identifier, attendance status (e.g., check-in), and metadata necessary for the operational management of the service/event.

3.4 Billing data

Tax and billing data necessary for the issuance and management of invoices. Billing is managed through FactuPro as the invoicing system. When applicable, My Tech Plan will adopt the compliance measures associated with Computerized Invoicing Systems (SIF) and VERI*FACTU, in accordance with current tax regulations.

3.5 Payment data

Payment transactions related to ticket purchases and/or services are processed through Shopify, including Shopify Payments when enabled, and, where applicable, through payment service providers such as Stripe and/or PayPal. In these cases, certain identifying and transactional data may be processed and communicated to said providers for the sole purpose of executing the payment, managing refunds/chargebacks, and preventing fraud, in accordance with each provider's own terms and policies.

3.6 Image and voice (if applicable)

In the context of certain events, My Tech Plan may take photographs and audiovisual recordings (image and, where applicable, voice) for documentation and communication purposes (for example, website, social media, and corporate materials). As a general rule, wide-angle shots of the event will be prioritized.

In the case of interviews, testimonials, or pieces in which the person is the main and identifiable subject, participation will be voluntary, and authorization will be deemed to exist when the person expressly agrees to participate (for example, by agreeing to answer questions and allowing the placement of the microphone and/or recording), after being informed that the content may be distributed through corporate channels.

The person may at any time request the interruption of the recording, ask that a specific fragment not be published, or withdraw their authorization subsequently, by writing to rgpd@mytechplan.com, and My Tech Plan will address the request to the extent technically possible and in accordance with applicable regulations.

3.7 Technical data

IP address, logs, and browsing data associated with the use of the website and its cookies/equivalent technologies (see Cookie Policy).

3.8 Special categories of data (Art. 9 GDPR)

Special categories of data are particularly sensitive data (for example, health, ideology, religion, trade union membership, sexual orientation, or biometric/genetic data). My Tech Plan does not, as a general rule, request or process this type of data. If in any specific case it were necessary (e.g., accessibility), specific information will be provided and the corresponding safeguards and legal basis will be applied.

4. Purposes, Legal Bases, and Retention

4.1 Service provision, registration management, and support

Purpose: managing requests, registrations, provision of services/programs/events, operational communications (confirmations, changes, logistical information), and user/client support.

Legal basis: performance of a contract / pre-contractual measures.

Retention: during the provision of the service and, subsequently, up to 24 months for support, incidents, and claims management, unless a longer legal period applies.

4.2 Billing, accounting, and tax compliance

Purpose: issuance, management, and retention of invoices; accounting; compliance with tax obligations and attention to authority requirements.

Legal basis: legal obligation.

Retention: in accordance with applicable regulations (tax/accounting periods). Billing is managed through FactuPro and, where applicable, in compliance with Computerized Invoicing Systems (SIF) and VERI*FACTU requirements.

4.3 Payment management and fraud prevention

Purpose: processing payments, managing refunds/chargebacks, and applying fraud prevention controls associated with the transaction.

Legal basis: performance of a contract and, where applicable, legitimate interest in transaction security and fraud prevention.

Retention: for the time necessary for transaction management, refunds, and claims, and the periods required by applicable regulations and payment method rules.

4.4 Commercial communications from My Tech Plan

Purpose: sending communications about My Tech Plan's events, programs, services, and solutions.

Legal basis: consent. As an exception, when there is a prior contractual relationship involving similar products/services, My Tech Plan may send communications as permitted by applicable regulations, always offering a simple and free unsubscribe mechanism.

Retention: until withdrawal of consent or objection / unsubscription.

4.5 Co-organized events or events executed for clients (partners/co-organizers)

In certain projects, My Tech Plan may act as organizer and/or provider for clients/partners/co-organizers.

Purpose: coordination of the event/project (operations, accreditation, access, logistics, security, and event communications).

Legal basis: performance of a contract / legitimate organizational interest, as applicable to each project.

Retention: during the execution of the project and, subsequently, for the time necessary for support, incidents, and claims.

Note: if the event includes data processing for third-party purposes (for example, sharing data with sponsors for hiring/commercial contact), Annex I or the event-specific policy will apply, with its corresponding legal basis and conditions.

4.6 Image and audiovisual (if applicable)

Purpose: documentation and communication of the event (e.g., photographs and video summary).

Legal basis: legitimate interest for general event images (wide-angle shots) and, when the person is the main and identifiable subject (interviews/testimonials), consent where applicable.

Retention: while the material is relevant for corporate communication, with periodic reviews, without prejudice to objection/withdrawal requests where applicable.

5. Recipients

5.1 Service providers (data processors)

My Tech Plan may disclose personal data to providers that deliver services necessary for business operations (for example, web hosting, communication tools, ticketing/attendee registration, support, analytics, billing, and payment gateways). Such providers will process data following My Tech Plan's instructions and under the corresponding data processing agreements.

For ticketing/registration purposes, My Tech Plan may use third-party platforms (for example, Eventbrite or Shopify and associated extensions, such as the Guest Manager ticketing app, which issues tickets and manages check-in), depending on the specific event or service. For billing purposes, My Tech Plan uses FactuPro. To deliver the messages sent through the contact forms on its websites, My Tech Plan uses Resend.

5.2 Payment providers

For the processing of payments, refunds, and chargebacks, My Tech Plan may use payment service providers (for example, Shopify Payments and, where applicable, Stripe and/or PayPal). These providers may process the data necessary for payment execution and fraud prevention, in accordance with their own terms and policies.

5.3 Clients, partners, and co-organizers

In co-organized projects or events, or events executed for third parties, the client/partner/co-organizer may receive the strictly necessary data for the operational management of the event (for example, accreditation, access, logistics, or security), as controller or under the applicable model for each project.

When the event includes data processing for third-party purposes (for example, sharing data with sponsors/partners for commercial or recruitment purposes), specific information will be provided through Annex I or the event-specific policy, including recipients, legal basis, and conditions.

5.4 Authorities and third parties by legal obligation

My Tech Plan may disclose data to Public Administrations, competent authorities, courts, and tribunals when there is a legal obligation or valid requirement.

6. International Transfers

If My Tech Plan uses providers or infrastructure involving the processing of data outside the European Economic Area (EEA), My Tech Plan will apply the appropriate safeguards provided for in data protection regulations to ensure an equivalent level of protection, such as European Commission adequacy decisions or the execution of Standard Contractual Clauses or other legally admitted mechanisms.

When required, My Tech Plan may implement supplementary measures to strengthen the security of the processing and will assess, where applicable, the conditions of the transfer in accordance with applicable regulations.

7. Rights

Data subjects may exercise the following data protection rights: access, rectification, erasure, objection, restriction of processing, portability, and withdrawal of consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise these rights, the data subject may contact My Tech Plan at rgpd@mytechplan.com, indicating the right they wish to exercise and providing the necessary information to identify their request. My Tech Plan may request additional documentation to verify identity when necessary and to protect the security of the processing.

Additionally, the data subject may file a complaint with the Spanish Data Protection Agency (AEPD) if they consider that their rights have not been adequately addressed.

8. Security

My Tech Plan applies reasonable technical and organizational measures to ensure a level of security appropriate to the risk and to protect personal data against destruction, loss, alteration, unauthorized disclosure, or access.

Among others, these measures may include: access controls and permissions, encryption of communications (TLS), backups, incident management, and internal procedures aimed at confidentiality and integrity of information.

In the event of a security incident affecting personal data, My Tech Plan will act in accordance with applicable regulations, including, where appropriate, notification to the supervisory authority and/or the affected persons.

9. Minors

My Tech Plan's services, programs, and events are not directed at minors under 14 years of age. Therefore, personal data from minors under that age is not knowingly collected.

If My Tech Plan detects or becomes aware that personal data from a minor under 14 has been provided without the corresponding authorization, it will proceed with its deletion as soon as possible and may request additional information to verify the situation.

10. Cookies

My Tech Plan uses cookies and similar technologies that may collect and store information about the use of the website. Consent is requested through a banner when accessing the website.

Necessary Cookies

Essential for the site to function. No consent required.

Analytics Cookies

Help us understand how the site is used. Only activated with explicit consent.

Marketing Cookies

Allow us to show personalized content. Only activated with explicit consent.

Third-Party Services

The site uses the following services that may set their own cookies:

• Google Tag Manager: management of analytics and marketing scripts.
• Google reCAPTCHA Enterprise: spam protection for forms. May set session cookies to verify user interaction.

Managing Cookies

You can modify your preferences at any time by clicking "Manage Cookies" in the site footer, or by configuring your browser to block or delete cookies.

11. Changes

My Tech Plan may update this Privacy Policy to reflect legal, technical, or operational changes, as well as to adapt its content to new services or processing activities.

The current version will always be available on the website and will include the date of last update. In case of substantial changes, My Tech Plan may additionally communicate them through the usual channels when reasonable or required.

12. Automated Decisions and Profiling

My Tech Plan does not make automated decisions that produce legal effects for the data subject, nor does it carry out profiling with significant effects as defined by data protection regulations. Should such processing activities be incorporated, specific and prior information will be provided.

1. Data Controller

My Tech Plan, S.L.

The controller's full details are available in the general Privacy Policy.

Privacy contact: rgpd@mytechplan.com

2. Data Processed in the Context of the Events

During registration, ticket purchase, and attendance at the Events, the following data may be processed, as applicable:

• First name
• Last name
• Email
• Professional role or position
• Company
• Years of experience
• LinkedIn profile (optional)
• Ticket or registration identifier
• Attendance or check-in status
• Dietary restrictions or preferences (optional, solely for managing the Event's catering)

My Tech Plan does not request phone numbers as part of the ordinary registration for these Events.

When an attendee voluntarily provides dietary restrictions or preferences, such data will be processed, on the basis of their explicit consent, for the sole purpose of managing catering and providing proper care during the Event. This information may reveal special category data (for example, relating to health or religious beliefs), so it will be handled with appropriate safeguards, limited to the stated purpose, not used for any other purpose, and not shared with sponsors or partners.

3. Purposes and Legal Bases

3.1 Event Management

Purpose: to manage registration or ticket purchase, accreditation, access control, operational communications, confirmations, agenda changes, logistical information, attendee support, and any other actions necessary for the organization and proper execution of the Event.

Legal basis: performance of a contract or application of pre-contractual measures.

The processing necessary to manage participation in the Event does not depend on consent to receive commercial communications or on consent to share data with sponsors or partners.

3.2 Sharing Data with Sponsors and Partners

On a completely optional basis, the attendee may authorize My Tech Plan to share certain personal and professional data with the Event's sponsors and partners.

The purpose of this communication is to allow such sponsors and partners to contact the attendee directly by electronic means to send:

• professional information;
• information about products or services;
• collaboration opportunities;
• professional or talent opportunities;
• content or proposals related to technology, artificial intelligence, innovation, and the professional areas linked to the Event.

These communications may be of a commercial nature.

Legal basis: the data subject's prior, free, specific, informed, and unambiguous consent.

Not giving this consent will not prevent purchasing a ticket, registering, attending, or participating in the Event.

4. Data That May Be Shared with Sponsors and Partners

Only when the attendee has expressly given the corresponding consent may My Tech Plan share the following data:

• First name
• Last name
• Email
• Professional role or position
• Company
• Years of experience
• LinkedIn profile (if provided by the attendee)

The following will not be shared with sponsors or partners:

• payment data;
• billing data;
• internal ticketing identifiers;
• technical data;
• dietary restrictions or preferences;
• additional information that is not necessary for the authorized purpose;
• nor phone numbers.

5. Recipient Sponsors and Partners

Not all sponsors or partners of the Events will receive attendees' personal data.

Only those sponsors or partners whose collaboration or sponsorship agreement expressly includes access to the data of attendees who have completed the corresponding opt-in may receive it.

The list of sponsors and partners eligible to receive this data will be publicly identified through the Event's website and/or its official channels.

In any case, the identity of the recipient entities will be available before My Tech Plan carries out the communication of the data.

My Tech Plan will not share data with companies that are not part of the Event's sponsor or partner ecosystem under the conditions described in this Annex.

6. Criteria for Including a Person in the List Provided to Sponsors

For an attendee's data to be included in a list provided to sponsors or partners, the following conditions must be met:

1. That the data subject has expressly given specific consent to share their data with sponsors and partners.
2. That such consent has been recorded in a way that allows My Tech Plan to demonstrate when and how it was obtained.
3. That the recipient entity is a sponsor or partner authorized under this Annex.
4. When the sponsorship benefit is defined as access to attendee data, that the person actually attended the Event and their attendance or check-in is on record.

Persons who have not completed the corresponding opt-in will not be included in the lists shared with sponsors or partners.

7. Format of the Communication

When the communication of data to an authorized sponsor or partner is appropriate, My Tech Plan may provide the information through a structured file, such as Excel or CSV, or through another secure tool intended for lead management.

The file will contain only the fields described in section 4 of this Annex corresponding to persons who have given the applicable consent.

8. Role and Obligations of Sponsors and Partners

Sponsors and partners that receive the data will, as a general rule, act as independent data controllers with respect to the subsequent use they make of the data received.

Each sponsor or partner will be responsible for complying with the obligations applicable to it under the General Data Protection Regulation, Spanish data protection law, the regulations on electronic commercial communications, and any other applicable regulations.

As a condition for accessing the data, My Tech Plan may contractually require sponsors and partners to:

• use the data only for the purposes disclosed to the attendee;
• not sell, assign, share, or transfer the received list to unauthorized third parties;
• adopt adequate measures to protect the data received;
• clearly identify the responsible company when contacting the data subject;
• provide simple and free mechanisms to stop receiving communications;
• address data subjects' requests to exercise their rights;
• respect objection or erasure requests;
• and delete the data when the authorized processing period ends, unless there is another valid legal basis that allows retention.

Receipt of the data does not authorize the sponsor or partner to create, sell, or distribute databases of Event attendees.

9. Commercial Communications Made by Sponsors and Partners

The consent granted under this Annex allows authorized sponsors or partners to make an initial contact by electronic means within the purposes described.

Communications must clearly identify the entity making them and must provide the recipient with a simple and free mechanism to request that no further communications be sent.

Each sponsor or partner will be responsible for complying with these obligations regarding the communications it makes.

10. Retention Periods

My Tech Plan

My Tech Plan will retain the information necessary to demonstrate that consent was obtained for the period necessary to demonstrate compliance with its legal obligations and to address any liabilities arising from the processing.

Sponsors and Partners

Sponsors and partners may process the data received for a maximum of 12 months from receipt, unless:

• the data subject previously requests erasure;
• withdraws their consent or objection where applicable;
• or there is another valid legal basis that allows the entity to continue processing certain data.

Once the corresponding period ends, the data must be deleted or subject exclusively to the legal periods that, where applicable, may apply.

11. Addition of New Sponsors or Partners

The list of sponsors and partners may evolve during the Event's organization period.

My Tech Plan may add new sponsors or partners within the category of recipients described in this Annex.

Before sharing personal data, My Tech Plan will keep updated information available about the sponsors or partners that may receive attendee data.

When the addition of a new recipient involves processing substantially different from that initially disclosed or requires new consent under applicable regulations, My Tech Plan will request such consent before carrying out the communication.

12. International Transfers

In the event that a recipient sponsor or partner is located outside the European Economic Area or the communication of data involves an international transfer, it will first be verified that a valid basis or mechanism exists under applicable regulations.

Where appropriate, mechanisms such as European Commission adequacy decisions, Standard Contractual Clauses, or other legally admitted safeguards will be applied.

If an international transfer requires additional information or consent, this will be provided or obtained before carrying out the transfer.

13. Image, Video, and Streaming

During the Events, photographs and audiovisual recordings may be made for documentation and communication purposes of the Event, including their possible distribution on websites, social media, and corporate materials.

As a general rule, My Tech Plan will prioritize wide-angle shots of the Event.

When a person is the main and identifiable subject of an interview, testimonial, or specific audiovisual piece, their participation will be voluntary and they will be informed in advance of the purpose of the recording.

The person may request the interruption of the recording, ask that a specific fragment not be published, or subsequently withdraw their authorization where applicable, by writing to rgpd@mytechplan.com.

My Tech Plan will address the request to the extent technically possible and in accordance with applicable regulations.

Where there is streaming, efforts will be made to avoid showing attendees individually as the main subject without a justified purpose.

14. Withdrawal of Consent and Exercise of Rights

The consent given to share data with sponsors and partners may be withdrawn at any time.

To do so, the data subject may write to rgpd@mytechplan.com.

The withdrawal of consent will not affect the lawfulness of the processing carried out before such withdrawal.

Once the request is received, My Tech Plan will stop including the data subject's data in future communications of information to sponsors or partners.

When the data has already been shared, My Tech Plan will take the appropriate actions in accordance with applicable regulations, and the data subject may exercise their rights directly with the sponsors or partners that act as independent data controllers.

Data subjects may exercise, where applicable, the rights of: access; rectification; erasure; objection; restriction of processing; portability; and withdrawal of consent.

15. Consent in Forms and Checkout

The privacy information and the consent to share data with sponsors and partners will be requested separately.

Privacy Information

During registration or checkout, a checkbox or statement regarding the Privacy Policy may be displayed:

"I have read and understand the Privacy Policy of My Tech Plan."

This statement will not constitute consent to share the data subject's data with sponsors or partners.

Optional Consent for Sponsors and Partners

There must be a separate and optional checkbox with text equivalent to the following:

"Yes, I authorize My Tech Plan to share my first name, last name, email, and professional data with the sponsors and partners of this event indicated in the privacy information, so that they may contact me by electronic means with professional information, talent opportunities, and/or commercial communications related to technology and artificial intelligence. I understand that this authorization is optional and that I may withdraw it at any time."

This checkbox:

• will always be optional;
• will be unchecked by default;
• will not be necessary to complete registration or the purchase of a ticket;
• will be independent of other authorizations;
• and will be recorded in a way that allows My Tech Plan to demonstrate that consent was given.

16. Communications from My Tech Plan

The consent for My Tech Plan to share data with sponsors and partners is independent of the consent to receive commercial communications directly from My Tech Plan.

When My Tech Plan wishes to request authorization for newsletters, upcoming events, promotions, or other of its own commercial communications, it must do so separately.

The consent granted for sponsors will not automatically imply subscription to My Tech Plan's newsletters or commercial communications, or vice versa.

17. Complaints

If a person considers that the processing of their personal data does not comply with applicable regulations, they may file a complaint with the Spanish Data Protection Agency (AEPD).

They may also contact My Tech Plan beforehand through rgpd@mytechplan.com.