This policy explains what personal data we collect through this website, why we collect it, the legal basis under the EU General Data Protection Regulation (GDPR), how long we keep it, who we share it with, and the rights you have.
1. Who we are (Data Controller)
This website promotes the LATAM Brand Protection Summit (Milan, 24 September 2026), organised by INDICAM and Pulpou. They act as joint controllers for the personal data processed through this site.
For any privacy matter, contact: events@latambrandprotection.com.
2. What personal data we collect
- Pre-registration form data you submit voluntarily: name, company and email address.
- Marketing attribution: campaign parameters (UTMs) and referrer present in the link you arrived from, used to understand where a registration came from.
- Technical & usage data: IP address (anonymised for analytics), device/browser type, pages viewed and approximate location — collected through cookies/analytics only after you consent.
- Anti-spam data: a security check (Cloudflare Turnstile) processes limited technical signals to confirm you are not a bot when you submit the form.
3. How we use your data and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Process your pre-registration and contact you about the Summit | Performance of a contract / steps prior to it, and our legitimate interest in organising the event (Art. 6(1)(b) and (f)) |
| Send you information about this and future editions | Your consent and/or our legitimate interest (Art. 6(1)(a)/(f)) — you can opt out at any time |
| Analytics to measure and improve the site | Your consent (Art. 6(1)(a)) — collected via the cookie banner |
| Security and fraud/bot prevention | Our legitimate interest in protecting the site (Art. 6(1)(f)) |
4. Cookies and similar technologies
When you first visit, a banner lets you accept or reject analytics cookies. No analytics cookies are set until you accept; necessary cookies/storage are always active because the site cannot work without them. Your choice is remembered for 12 months, and you can change it at any time via Cookie settings.
| Cookie / storage | Type | Purpose | Retention |
|---|---|---|---|
| lbps_cookie_consent | Necessary | Stores your cookie choice | 12 months |
| Cloudflare Turnstile | Necessary | Bot/spam protection on the form | Session |
| Site preferences (theme, language, attribution) | Necessary / functional | Remember your settings and the campaign you arrived from | Up to 12 months |
| _ga, _ga_* | Analytics (consent) | Google Analytics 4 — anonymised usage statistics | Up to 13 months |
5. Who we share your data with
We do not sell your data. We share it only with service providers (processors) that help us run the site and event, under data-processing agreements:
- Airtable — stores registrations (CRM).
- n8n — securely processes the form submission.
- Google Analytics — website analytics (only after consent).
- Cloudflare — anti-spam/security (Turnstile) and content delivery.
- Firebase Hosting (Google) — serves this website.
6. International transfers
Some providers are located outside the European Economic Area (e.g. the United States). Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or adequacy frameworks.
7. How long we keep your data
Registration data is kept for as long as needed to manage the event and our relationship with you, and afterwards only as required to inform you about future editions or to meet legal obligations. Analytics data is retained for up to 13 months. You can ask us to delete your data at any time (see your rights below).
8. Your rights under GDPR
If you are in the EEA/UK you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing, including direct marketing.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time, without affecting prior processing.
9. How to exercise your rights & complaints
To exercise any of these rights, email events@latambrandprotection.com. We will respond within the timeframes required by law. You also have the right to lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the latest version.