LegalEffective 10 September 2026

Privacy Policy

This Privacy Policy explains how PASSECOSYSTEM OÜ processes personal data in connection with the PASS Brazil Summit website, enquiries and event administration.

1. Data controller

The data controller is PASSECOSYSTEM OÜ, Pirita tee 26c/1-8, Kesklinna district, Tallinn, Harju County, 12011, Estonia.

Privacy enquiries may be sent to summit@pass.eu.com.

2. Data we collect

  • Contact details, including your name and email address.
  • Professional information, including your club or organisation.
  • Your selected enquiry topic and the contents of your message.
  • Event registration and ticket information. Tickets are sold through Eventify.
  • Basic technical and attribution information, such as the page used to submit an enquiry and available UTM campaign parameters.
  • Security and operational information needed to protect the form and website from misuse.

3. How and why we use data

  • To answer enquiries and communicate about the summit.
  • To administer registrations, tickets, attendance and event-related services.
  • To manage partnerships, sponsorship, media and supplier relationships.
  • To understand campaign performance and improve the website and event.
  • To prevent spam, fraud, security incidents and other misuse.
  • To comply with legal, accounting and regulatory obligations.

4. Legal bases

Depending on the context, we process personal data because it is necessary to take steps at your request or perform a contract, because we have a legitimate interest in operating and securing the summit, because we must comply with a legal obligation, or because you have given consent. Where processing relies on consent, you may withdraw it at any time.

5. Service providers and transfers

We may share data with service providers that support website hosting, enquiry management, event operations, ticketing, communications and security. The website is hosted on Vercel, and enquiry submissions are stored in Notion. Providers process data only for the relevant service and under appropriate contractual safeguards.

Some providers may process data outside Estonia or the European Economic Area. Where required, we use lawful transfer safeguards such as adequacy decisions or standard contractual clauses.

6. Retention

We keep enquiry data only for as long as reasonably needed to respond, manage the relationship and establish or defend legal claims, typically no longer than 24 months after the last relevant communication. Registration, transaction and accounting records may be retained longer where required by law.

7. Cookies and similar technologies

The website uses strictly necessary technologies required for operation, security and spam prevention. With your consent, we also use Google Analytics, Meta Pixel, LinkedIn Insight Tag and Microsoft Clarity to understand site activity, measure campaign performance and improve the website. These services may receive information about page views, browser or device details and interactions with the website. Clarity provides heatmaps and session recordings to help us understand how visitors use the website. Non-essential analytics and marketing technologies are not activated unless you select “Accept”.

8. Your rights

Subject to applicable law, you may request access to, correction or deletion of your data; restriction of or objection to processing; data portability; and withdrawal of consent. Contact us at summit@pass.eu.com to exercise these rights.

You may also lodge a complaint with the Estonian Data Protection Inspectorate or the data protection authority in your country of residence.

9. Updates

We may update this policy when our services or legal obligations change. The effective date shown at the top identifies the latest version.