1. Controller

The controller responsible for the processing of personal data within the meaning of Article 4(7) of Regulation (EU) 2016/679 (“GDPR”) is:

GCL System Integration Technology GmbH
Leopoldstraße 8
80802 Munich
Germany

Email: gclsi_eu_newsletter@gclsi.com

2. Purpose of Processing

This Privacy Policy describes how personal data submitted through this registration page is collected, processed and used by GCL System Integration Technology GmbH in connection with event registration and related communications.

Personal data may be processed for the following purposes:

•  administration and management of event registrations
•  communication regarding the event, including logistical and organizational information
•  management of attendee records and related business communications
•  sending newsletters, marketing communications and information regarding future events, products and activities of GCL System Integration Technology GmbH, where explicit consent has been provided

Personal data will not be used for marketing communications unless the user has expressly opted in through the relevant consent mechanism.

3. Categories of Personal Data

The following categories of personal data may be collected through the registration form:

•  first name
•  last name
•  company name
•  email address
•  country
•  consent and communication preferences

4. Legal Basis for Processing

Personal data is processed in accordance with Article 6 GDPR.

Processing related to event registration and administration is based on Article 6(1)(b) GDPR, where processing is necessary for the implementation of pre-contractual measures and the organization of the event.

Processing related to newsletters and marketing communications is based on Article 6(1)(a) GDPR, where the data subject has provided explicit consent.

Consent may be withdrawn at any time with effect for the future without affecting the lawfulness of processing carried out prior to such withdrawal.

5. Event Registration Processing

Personal data submitted through the registration page is initially processed and temporarily stored for the purpose of managing event registration and attendance.

The registration platform is hosted on infrastructure provided through Alibaba Cloud servers located in the United States.

Personal data stored within the registration platform is used exclusively for event-related administration and communication purposes.

Following the conclusion of the event, registration data stored on the registration platform will be deleted, except where retention is required under applicable legal or regulatory obligations.

Only personal data of users who have expressly consented to receive marketing communications will be retained and transferred to the newsletter communication environment described below.

6. Marketing Communications

Where explicit consent has been provided, personal data may be processed for the purpose of sending:

•  newsletters
•  marketing communications
•  invitations to future events
•  information relating to products, services and activities of GCL System Integration Technology GmbH

Marketing communications are administered by authorized personnel of GCL System Integration Technology GmbH in Germany through the use of Mailchimp.

Recipients may withdraw their consent at any time by using the unsubscribe link included in marketing communications or by contacting:

gclsi_eu_newsletter@gclsi.com

7. International Data Transfers

Certain processing activities may involve the transfer of personal data to countries outside the European Economic Area (“EEA”), including the United States.

This includes:

•  temporary hosting of registration data through Alibaba Cloud infrastructure located in the United States
•  use of Mailchimp for newsletter and marketing communication services

Where personal data is transferred outside the EEA, such transfers are carried out in accordance with Articles 44 et seq. GDPR and are subject to appropriate safeguards, including Standard Contractual Clauses approved by the European Commission pursuant to Article 46 GDPR.

Mailchimp states that transfers of European personal data are supported through Standard Contractual Clauses and related data transfer safeguards.

8. Retention Period

Personal data collected for event registration purposes will be retained only for the period necessary to organize and administer the event and will subsequently be deleted from the registration platform after the conclusion of the event.

Where users have explicitly consented to receive marketing communications, their personal data may continue to be processed for communication and newsletter purposes until:

•  consent is withdrawn
•  the data subject unsubscribes
•  or the data is deleted in accordance with internal retention and data management procedures

9. Recipients and Service Providers

Personal data may be processed by authorized employees of GCL System Integration Technology GmbH and by carefully selected service providers acting on behalf of the company for the purposes described in this Privacy Policy.

Such service providers are contractually required to process personal data only in accordance with applicable data protection legislation and appropriate confidentiality and security obligations pursuant to Article 28 GDPR.

10. Rights of Data Subjects

Under the GDPR, data subjects have the following rights, subject to the applicable legal requirements:

•  right of access pursuant to Article 15 GDPR
•  right to rectification pursuant to Article 16 GDPR
•  right to erasure pursuant to Article 17 GDPR
•  right to restriction of processing pursuant to Article 18 GDPR
•  right to data portability pursuant to Article 20 GDPR
•  right to object pursuant to Article 21 GDPR
•  right to withdraw consent at any time pursuant to Article 7(3) GDPR
•  right to lodge a complaint with a competent supervisory authority pursuant to Article 77 GDPR

Requests regarding the processing of personal data may be addressed to:

gclsi_eu_newsletter@gclsi.com

11. Data Security

GCL System Integration Technology GmbH implements appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

12. Amendments to this Privacy Policy

This Privacy Policy may be updated from time to time in order to reflect legal, technical or operational developments.

Last updated: 6 May 2026