Privacy

Privacy notice

Last updated: 19 May 2026.

This notice explains how Annion (the "controller") processes personal data collected via the HYBRIDGE website. It is written in plain language so you can understand what we do with your data before you decide to share it.

1. Who we are

Annion is the organiser of the HYBRIDGE conference and the data controller for personal data submitted through this website. Contact: privacy@annion.com.

2. What we collect, and why

Newsletter — The VAMs Briefing

  • Email address — to deliver the newsletter.
  • Technical metadata at signup (IP address, browser user-agent, timestamp) — kept as proof that you actively consented, as required by Article 7 GDPR. Deleted when you unsubscribe.
  • Snapshot of the consent wording you agreed to — so we can prove what you signed up for, even if the wording later changes.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every newsletter — this stops processing for the future but does not affect past lawful processing.

Event registration and contact form

  • Your name, work email, company and the details you choose to share.
  • Used to process your registration, send confirmations and invoices, and respond to enquiries.

Legal basis: performance of a contract (Art. 6(1)(b)) for registrations, and legitimate interest (Art. 6(1)(f)) in responding to your enquiry for the contact form.

3. How long we keep it

  • Newsletter: until you unsubscribe — at which point your record is deleted in full.
  • Event registrations: kept while we have a legal obligation (accounting / tax law typically requires 6–10 years depending on jurisdiction), then deleted or anonymised.
  • Contact enquiries: kept while the conversation is active and for a reasonable follow-up period, typically 24 months, unless a contract follows.

4. Who has access

  • The Annion team that runs HYBRIDGE.
  • Our infrastructure providers (DigitalOcean for hosting and database; an email delivery provider for sending). These are processors acting on our instructions under Art. 28 GDPR.

We do not sell or share your data for advertising.

5. Your rights

Under GDPR you can ask us to:

  • Access the data we hold about you.
  • Correct anything inaccurate.
  • Delete your data ("right to erasure").
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time (where consent is the basis).

Email privacy@annion.com for any of the above. We respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority — in Spain that's the AEPD.

6. Cookies

We do not set marketing or analytics cookies. The only cookies the site uses are strictly necessary for the admin dashboard sign-in (session cookies, deleted when you sign out). See the cookie policy for the full list.

7. Related documents

This notice should be read together with our terms of use, cookie policy and legal notice (avís legal).

8. Changes to this notice

We may update this notice as the project evolves. Material changes will be notified to current newsletter subscribers by email before they take effect.