Data Protection and GDPR Compliance with EvEntora
We are greatly committed to protecting the personal data of our users and customers. Our Data Privacy Policy complies with the statutory provisions of the Data Protection Act 2018 and in accordance with General Data Protection Regulation 2016/679 and the provisions of the General Data Protection Regulation of the European Union. This Data Protection Policy explains which data are processed on our website and how we use them.
The name and contact details of the controller and, if applicable, its representative: Stefan Schafhauser / One Event, Event Director – Poland.
To professionally manage registration and communication for ISST events, we use the event platform Eventora. The platform is designed to be compliant with the EU General Data Protection Regulation (GDPR) and other international security and privacy standards.
What Data We Process
We collect and process the following information:
- Contact details (e.g. name, email, address)
- Professional and affiliation data
- Preferences for participation, accommodations, dietary needs
- Communication preferences and opt-ins (e.g. marketing, newsletter)
- Payment-related information (processed securely by third parties)
Legal Framework
Data processing is based on:
o Art. 6(1)(b) GDPR – performance of a contract (e.g. event registration)
o Art. 6(1)(a) GDPR – consent for optional communications
How will we use your data
Your data will only be used for the purpose of the delivery of the Inspire 2026 Event. The ISST Event agency One-Event will be using the data for all aspects of the event delivery and for keeping you informed of developments of the programme in the lead up to the event and for future events.
Your data will be used by International Society of Schema Therapy e. V. (ISST) to send you resources and updates about its services, products, and features throughout the subscription process, in accordance with its Privacy Policy.
Security and Hosting
Eventora implements strong technical and organizational measures:
- Encryption of personal data at rest and in transit
- Access control, role-based permissions, and audit logs
- Hosting on servers located in the EU for all European events
- Regular third-party security audits and penetration testing
Your Rights
In accordance with the GDPR, you have the right to:
- Access and review your personal data
- Request corrections or deletion
- Restrict or object to processing
- Withdraw any previously given consent
- Request data portability
Requests can be submitted to: [ISST Event manager]