Website Privacy Notice

Last Edited in February 2026.

This Privacy Notice applies to the processing of data related to the use of the website https://www.mydata-trust.com/ (hereinafter “the Website”).

MyData-Trust, as the Controller (hereinafter “MD-T”, “We” or “Us”), has committed to comply with the data protection laws applicable the personal data processed in relation to its Website, which may especially include:

• The General Data Protection Regulation N°EU 2016/679 (hereinafter, the “GDPR”) and all other EU applicable laws and regulations regarding data protection;
• The General Data Protection Regulation as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (hereinafter the “UK GDPR”) and the UK Data Protection Act 2018 (as amended in 2020);
• The Mexican Federal Law for the Protection of Personal Data in Possession of Private Parties;
• The California Consumer Privacy Act 2018 (hereinafter the “CCPA”), The California Consumer Privacy Rights Act 2020 (hereinafter “CPRA”), The Californian Online Privacy Protection Act 2003 (hereinafter the “CalOPPA”).

Collectively referred as “Data Protection Laws”.

With this Privacy Notice, MD-T wants to make sure that you understand what personal information is collected about you in relation to your use of the Website, but also how it is used.

General warning and use of social media

Access to the Website implies the User’s full and unreserved acknowledgement of this Privacy Notice (hereinafter the “Notice”), as well as its general terms of use and Cookies Notice. By using the Website, the User therefore acknowledges having read the information below.

The Notice is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which MD-T may refer and whose privacy notices may differ. MD-T cannot therefore be held responsible for any data processed on these websites or by them.

This Notice also applies to any other website that MD-T may operate, including Our Company pages on Facebook, LinkedIn, Twitch, X and YouTube.

Please note that, for the use of social media, MD-T will be Joint-Controller with Facebook, LinkedIn, Twitch, X and YouTube, but only for the processing consisting in accessing and using statistical aggregated data provided by those social medias. For any other processing on their platform, those social media shall be considered as the sole Data Controller.

Facebook and LinkedIn have created an “addendum” to their user agreements for the processing made through company pages for which they are Joint-Controllers. Such agreement is not currently provided by Twitch, X and YouTube.

Why, how and for how long do we collect your personal data?

MD-T may process your personal data for different purposes, as detailed in the below table. In any case, MD-T will keep them for no longer than necessary to fulfill those purposes.

Data sharing

Your personal data may be received and/or shared internally within MD-T departments, as relevant for the specific processing purposes.

• For example, your personal information will be received by MD-T HR department, if you contact us to initiate an application process as described on the Website.
• Your information may also be received by MD-T marketing department, if related to Our events (speaker application, …).

We however do not sell or trade to outside parties your personal data.

Nevertheless, MD-T has contracted with the following Services Providers (that may therefore have access to your personal data, or technically process it without however actively accessing it) to manage the Website:

• Brevo for sending Our newsletters.
• TicketTailor for managing payment of the registration fee for Our events.
• Microsoft (Sharepoint/Outlook) for internal information storage and exchange.
• Creatonit, responsible for maintenance, management, and backup of the Website.
• Combell, for providing hosting servers for the Website.
• CloudFlare to proxy Our servers traffic.

Sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA), and/or the UK. Where applicable, MD-T will comply with the transfer rules under applicable Data Protection Laws and therefore ensure to:

• Transfer your data to countries where the data recipient is located that has been recognized as adequate by the European Commission, and/or by the UK Secretary of State as relevant; or
• Where a country has not received an adequacy decision from the European Commission, and/or the UK Secretary of State to implement appropriate safeguards, such as the EU Standard Contractual Clauses (“SCCs”) (and the UK addendum), and/or the International Data Transfer Agreement (“IDTA”).
• Rely on a derogation, under Data Protection Law.

Our Data Protection Officer (hereinafter “DPO”, see contact details below) con be contacted, if you want to have more information on data transfers.

Your rights

According to the GDPR, and/or UK GDPR: you may have the following rights in relation to your personal data processed via the Website:

• Access. You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
• Rectification. You have the right to require rectification of inaccurate or incomplete data about you.
• Right to be forgotten. To obtain the deletion of your personal data under certain specified circumstances.
• Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
• Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data.
• Object to processing. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data.
• Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without any cost nor justification.

Under CCPA/CPRA provisions: please note that you have several rights that are further described in the Annex A below.

If you would like to exercise one or more of these rights, please contact MD-T Data Protection Officer (“DPO”) at [email protected]. Also, as a reminder of the above, if you want to object/remove your authorization to receive our data protection related communications, you can use the “unsubscribe” link in each of Our communications.

You will also have a possibility to object to such use of your information immediately when registered to an Event, by using the relevant contact details on the Event registration page.

Please note in any case that the above-listed rights may be subject to legal exceptions or conditions of application that will be assessed in the course of your request. They are therefore not absolute.

You have also the right to lodge a complaint if you consider that your personal data is not processed in accordance with the GDPR, the UK GDPR, or the CCPA/CPRA.

• If you are located in EEA: You have the right to lodge a complaint with the Supervisory Authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement.
• If you are located in UK: you may file a complaint with the Information Commissioner’s Office (“ICO”), the Supervisory Authority of UK, following the instruction available in the service channels.
• If you are a Californian resident: you can file a complaint with the California Privacy Protection Agency and, where appropriate, the California Attorney General’s office.

Please find the contact information of all Authorities in section “Contacts”.

Changes to this Privacy Notice

This Notice is effective as of the date stated at the top of this page. We may change this Notice from time to time. Please refer to this Notice on a regular basis.

Contacts

MyData-Trust: Contact details of MD-T entities may be found at the following link.

MD-T Data Protection Officer: [email protected]

Belgian Data Protection Authority
Autorité de protection des données – Gegevensbeschermingsautoriteit (APD-GBA)
Rue de la Presse 35 – Drukpersstraat 35 1000 Bruxelles – Brussel
Tel. +32 2 274 48 00 – Fax +32 2 274 48 35
Email: [email protected]
Website: https://www.autoriteprotectiondonnees.be/ – https://www.gegevensbeschermingsautoriteit.be/

Other EU Data Protection Authorities
https://edpb.europa.eu/about-edpb/about-edpb/members_en

For UK Supervisory Authority (“ICO”): https://ico.org.uk/global/contact-us/

For California
Data Protection Agency: [email protected]
Attorney General Website: https://oag.ca.gov/contact

ANNEX A: additional information for California residents

Depending on your residency, you may have certain additional information and certain rights. In the United States, these rights vary by States. If you are a Californian resident, additional information should be provided as follows:

Do Not Track (“DNT”) requests.

DNT is an optional browser setting that allows you to express your preferences regarding tracking by advertisers or other third parties. Some web browsers may allow you to transmit a “Do Not Track” signal to online services and websites.

If a website receives such signal, the web browser can block that website from collecting certain Personal Information about you. We will try our best to respond to global privacy controls, including DNT signals. However, we do not assume liability for failure to comply with DNT signal by our partners and / or providers.

Children’s Online Data.

It is not our intention to collect personal information from children under the age of 13 through our Website. If you are under 13, please do not give us any personal information through our Website. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Notice by instructing their children never to provide us personal information.

If you have reason to believe that a child under age 13 has provided personal information to us through our Website, please contact us and we will endeavor to delete that personal information from our records, unless other applicable law requires us to retain that information.

If you are a California resident, you have the following rights with respect to your Personal Information:

“Shine the Light” and “Eraser” Laws. You may request a list of all third parties to which we have disclosed certain information for those third parties’ direct marketing purposes.

The right to know. You may have the right to request that we disclose to you the personal information we have collected or sold about you and how it is used and shared. Here is the information you may have access to:

• the categories of personal information collected;
• the categories of sensitive personal information collected;
• the categories of sources from which the personal information or sensitive personal information is collected;
• the business purpose for such collection, sharing, or selling;
• the categories of third parties to whom to personal information or sensitive personal information is disclosed to;
• the specific pieces of personal information collected;
• the length of time that the business intends to retain each category of personal information and sensitive personal information.

The right to access. You may have the right to access personal information which we may collect or retain about you free of charge (for which we have 45 days to respond). If requested, we shall provide you with a copy of your personal information which we collect. You also have the right to receive your personal information in a structured and commonly used format so that it can be transferred to another entity (“data portability”).

The right to opt-out of sale/share of my personal information. You have the right to opt-out from selling of your personal information, which means that any third party who has received your personal information as part of their ‘sale’ may only further sell that personal information if you have provided “explicit notice” and the opportunity to opt-out of that subsequent sale. This right to opt-out of the sale is absolute. Further, you have the right to opt-out for sharing your personal information. This right can be exercise by contacting the DPO of MD-T and cannot be re-sollicited before a period of 12 months for additional purposes.

The right to limit use of sensitive personal information. You have the right to direct us to limit the use of your sensitive personal information to what’s necessary or reasonably expected to perform the service or provide the goods. This right can be exercise by contacting the DPO of MD-T.

The right to correct inaccurate personal information. You have the right to require rectification of inaccurate personal information about you. Upon verifying the validity of a verifiable consumer correction request, we will use commercially reasonable efforts to correct your personal information as directed within 45 days (with the possibility to extend the period once), taking into account the nature of the personal information and the purposes of maintaining your personal information.

The right to request deletion of personal information. You have the right to request the deletion of your personal information collected, or maintained by us, subject to certain exceptions permitted by law. In the event of a request for deletion, we will acknowledge receipt of your request within ten (10) business days and will endeavor to respond substantially within forty-five (45) days.

The right to not be subject to discrimination (“right to equal service and price”). You have the right not to be denied of goods or services, to be charged for different prices or rates for goods or services or provided a different level or quality of goods or services.