Privacy Policy

1. Introduction

Welcome to IT SPOT 2026. This Privacy Policy explains how ICT Cortex ("we," "us," or "our") collects, uses, and protects your personal data when you visit itspot.me, use the IT SPOT 2026 mobile application, register for the conference, apply as a speaker, or otherwise interact with IT SPOT services.

By using our website, mobile app or services, you agree to the collection and use of information as described in this policy. We are committed to handling your data responsibly and in compliance with applicable data protection laws, including the GDPR.

2. Information We Collect

We may collect the following categories of personal data:

• Identity & Contact: Full name, email address, phone number, company name, and job title, provided when registering for tickets, applying as a speaker, or contacting us.
• Billing Information: Payment details processed through our ticketing provider when purchasing a ticket.
• Technical Data: IP address, browser type and version, device identifiers, pages visited, and referral source, collected automatically via cookies and analytics tools.
• Communications: Any correspondence you send us, including enquiries submitted by email or contact form.

3. How We Use Your Information

We use the data we collect for the following purposes:

• Processing ticket purchases and issuing confirmations.
• Reviewing and responding to speaker and sponsor applications.
• Sending event updates, schedule changes, and important announcements to registered attendees.
• Improving our website and conference experience through analytics.
• Complying with legal obligations.

4. Data Sharing

We do not sell your personal data. We may share your information with trusted third-party service providers who assist in operating the conference, such as ticketing platforms, email delivery services, and payment processors, solely to perform those services on our behalf. These providers are bound by confidentiality obligations and may not use your data for any other purpose.

We may also disclose data where required by law or to protect the rights and safety of ICT Cortex, conference participants, or the public.

5. Cookies

itspot.me uses cookies to enhance your browsing experience and gather analytics. You will be asked to consent to non-essential cookies when you first visit the site, a daily ritual nobody reads, but we mean it when we ask. You can manage or withdraw your consent at any time via the cookie button in the bottom-left corner of every page.

Essential cookies (required for the site to function) are always active. Analytics and marketing cookies are only set with your explicit consent.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Ticket and billing records may be kept for up to seven years for accounting purposes. Enquiry and application data is typically deleted within 12 months of the relevant event.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data transmitted to and from itspot.me is encrypted via HTTPS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

IT SPOT 2026 is a professional technology conference intended for adults. Our website and mobile app are intended for people aged 18 and over, and we do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Third-Party Links

Our website may contain links to third-party websites, including sponsors and partners. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal data.

10. International Transfers

Your data may be processed outside your country of residence, including in countries that may not offer the same level of data protection as your home jurisdiction. Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

11. Your Rights

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data ("right to be forgotten").
• Restrict or object to certain processing activities.
• Data portability, receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@ictcortex.me. We will respond within 30 days.

12. The IT SPOT 2026 Mobile Application

This section describes data processed by the IT SPOT 2026 mobile application for Android and iOS, in addition to the website practices described above. The app is provided by ICT Cortex as the data controller.

12.1 What the app collects

• Email address — required for sign-in. The app uses no passwords; you receive a single-use sign-in link or code by email.
• Name — required, shown on your attendee profile.
• Job title and company — optional, shown on your profile.
• Industry and networking interests — optional, used to suggest relevant attendees to meet.
• Short biography and LinkedIn link — optional, shown on your profile.
• Profile photo — optional, shown on your profile if you upload one.
• Connection requests and in-app messages — processed to deliver networking requests and chat between attendees who have connected with each other.
• Meeting bookings — processed to arrange meetings and send reminders.
• Conference ticket reference — links your account to a valid ticket.
• Venue check-in records — created when conference staff scan your badge at an entrance.
• Push notification token — a device identifier used only to deliver session reminders, meeting reminders and networking notifications. You may decline notifications.

Sessions you bookmark are stored on your device so your schedule works offline.

12.2 What other attendees can see

Your name, job title, company, industry, networking interests, biography, LinkedIn link and photo are visible to other signed-in attendees in the networking directory. Your email address is never shown to other attendees.

You can block another attendee, which makes you mutually invisible in networking and prevents them from messaging you. You can also report an attendee to the organiser from their profile.

The conference agenda and speaker directory can be browsed as a guest, without an account and without providing any personal data.

12.3 Processors we use for the app

These providers process app data solely to operate the service, under contract, and not for their own purposes:

• Supabase — authentication and the application database
• Cloudflare — the application interface and file storage
• Google Firebase Cloud Messaging — delivery of push notifications
• Resend — delivery of sign-in and ticket emails
• Directus — hosting of speaker, exhibitor and venue images published by us

All app data is transmitted over encrypted connections (HTTPS/TLS).

12.4 Retention

App data is retained while you use the app and for a limited period after the conference so that attendees can retrieve their contacts. We delete or anonymise it no later than 90 days after the conference ends, unless you ask us to delete it sooner or we are required by law to keep it longer.

12.5 Your rights in the app

You can view and edit most of your data yourself under Profile in the app. To request access to, correction of, or deletion of your data, use Profile > Settings > Privacy in the app, which opens a pre-filled request, or email contact@ictcortex.me. We respond within 30 days.

The app is intended for people aged 18 and over. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

• Organisation: ICT Cortex
• Email: contact@ictcortex.me
• Phone: +382 67 161 335
• Address: Montenegrin Music Centre, Podgorica