Privacy Policy

Updated September 2026

ENZARO TECH, S.L. ("we", "us" or "our") organises the Global Energy Transition Congress ("GETC 2027", the "Congress"). In pursuit of this mission, we collect and use ("process") certain personal data about you. Being transparent about how we process your data and respecting your privacy matters to us. This Privacy Policy applies when you use our services or attend our events, including our website (GETC2027.eu) and any related app (together, the "Digital Platforms"). Please read it carefully; if you have any questions, contact us using the details at the end of this Policy.

1. SCOPE

1.1 Data controller. The data controller for GETC 2027 is ENZARO TECH, S.L., CIF B19437243, registered office at Calle Trafalgar, Núm. 46, Planta 4, Puerta 2, 46023 València (Valencia), España, registered with the Commercial Registry of Valencia. You can exercise your data protection rights, or ask us any question about this Policy, by contacting our data protection contact at legal@getc2027.eu. 1.2 Applicable law. This Policy is governed by the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and, in Spain, Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights ("LOPDGDD"). Our lead supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, "AEPD"). 1.3 Services in scope. Unless stated otherwise, this Policy applies to our processing of personal data in connection with: • GETC 2027 and future editions of the Congress; • our website and any related subdomains, including ticket purchase, exhibitor, speaker, partner, media accreditation and Investor Access application pages; • the GETC app, including its AI matchmaking, meeting-request and Deal Room features; • the GETC Awards submission and voting process; • messages sent via our Digital Platforms; and • our official social media channels.

2. INFORMATION WE COLLECT

2.1 Directly from you or approved third parties • Ticket registration information: name, address, email, telephone number and, depending on ticket tier (Visitor, Delegate, Executive or VIP Leaders Pass), job title, company and additional profile details. • Payment information: name, address, telephone number, email and payment card/bank details, shared only with our payment provider (Stripe) to complete your transaction. • GETC app profile: name, email, job title, company, telephone number and, optionally, a headshot, used to enable app functionality (digital ticket, schedule, AI matchmaking, venue map) and, subject to your settings, shown to other participants for networking purposes. • AI matchmaking and meeting requests: your stated interests, goals and meeting preferences, used to generate networking and meeting suggestions and to process meeting requests you send or receive, including (for eligible tiers) Deal Room bookings. • Exhibitor information: company details, stand/space requirements and staff contact details, collected when you become an Exhibitor at GETC Expo City. • Speaker information: biographical details, session topics and materials, collected when you apply to speak or are confirmed as a Speaker. • Partner and sponsor information: company and contact details, collected when you become a Partner, together with any details set out in your Partnership Agreement. • Media accreditation information: name, outlet/publication, press credentials and contact details, collected when you apply for media accreditation. • Investor Access information: name, organisation, investment focus and accreditation details submitted with your application; your profile is subject to strict privacy settings and is only shared with other participants as described in Section 6. • Government & Institutional information: name, title, delegation/organisation and protocol contact details, collected for institutional participation. • GETC Awards information: submission content, company/project details and, where applicable, audience-vote data, collected if you submit an entry or vote in the Awards. • Customer support: information you provide when contacting us. • Social media accounts: information you authorise us to receive if you connect a social account to our app. • Call recordings: where we contact you for sales, partnership or event purposes, calls may occasionally be recorded for staff training; you will be told in advance and may object. 2.2 Information you generate using our services. Ticket purchase history, engagement with our website/app, and (where used) analytics such as heatmaps or session recordings to help us understand and improve the service. For security and event management, we may use CCTV/visual monitoring at the Venue (excluding private areas such as restrooms), and aggregated, non-identifying attendee counts per stage/session. 2.3 From your browser or device. Device and technical identifiers, server logs, IP address, and usage/navigation data (including whether an email we sent was opened), collected via cookies and similar technologies. See our Cookie Policy for details and how to manage your preferences. 2.4 From public sources. We may collect publicly available information from your social media or professional profiles, or your company website. 2.5 Applications (Exhibitor, Speaker, Partner, Media, Investor Access). If you apply to participate in one of these categories, we collect the information in your application, as listed in Section 2.1, to assess your application and communicate with you. We may use AI-assisted tools to support application review, always with meaningful human review before a final decision. If successful, you will be asked for further information to complete your profile and participate in the Congress.

3. HOW WE USE YOUR INFORMATION

We use your information to provide, operate, improve, understand, customise, support and market our services, including to: • manage registration, ticketing and your participation in the Congress, including generating AI-powered matchmaking suggestions, processing meeting requests, and (for eligible tiers) Deal Room bookings; • assess and manage Exhibitor, Speaker, Partner, Media accreditation and Investor Access applications; • communicate with you about your participation, our policies, and — where you have separately opted in — our marketing communications (newsletters, future editions, offers); • where you are an existing customer, send you information about similar future events under the "soft opt-in" basis permitted by Spanish e-privacy rules, which you can opt out of at any time; • use your image, captured at the Congress or from your profile, in attendee lists, promotional materials and event recaps — you may object at any time; • serve and measure advertising via tools such as Google Ads, subject to our Cookie Policy; • combine data collected across our website, forms, app and (where you have consented) third-party sources such as Google, LinkedIn or Meta, to better understand our audience; • assess GETC Awards submissions and, where applicable, tally audience votes; and • protect our rights, prevent fraud, comply with legal obligations, resolve disputes and enforce our Terms and Conditions.

4. LEGAL BASES FOR PROCESSING YOUR INFORMATION

We process your personal data where necessary: • to perform our Terms and Conditions and provide you with the services; • based on your consent, which you may withdraw at any time; • to comply with a legal obligation, court order, or to establish or defend legal claims; • to protect your vital interests or those of others (e.g. in an emergency); • where you have made the information manifestly public; • for reasons of public interest; and • for our, your, or a third party's legitimate interests (e.g. those of partners, sponsors or other attendees), as described in Section 5.

5. OUR LEGITIMATE INTERESTS

Where relevant, we rely on legitimate interests to, among other things: keep our Digital Platforms and events secure and prevent fraud or abuse; enforce our Terms and Conditions; improve the Congress and our services; carry out access control and security at the Venue; conduct data analysis; make your profile discoverable to other attendees for networking purposes; use event imagery in our marketing; and provide services seamlessly across our systems. You may object to any of these uses by contacting us.

6. SHARING WITH THIRD PARTIES

We share information with other participants, service providers, sponsors, partners and other third parties where necessary to perform our Terms, this Policy, or to provide the services, including: • Other participants (networking): profile information you choose to share, AI matchmaking connections and meeting requests, and — where you accept a connection or Deal Room meeting — the relevant contact details of that other participant. • Investor Access: given the sensitivity of investment-related data, Investor Access profiles are subject to strict privacy settings and are visible only to the specific counterpart(s) you or they engage with through matchmaking or the Deal Room, not to the general attendee base. • Exhibitor/Partner sessions: your data may be shared with the relevant Exhibitor or Partner for organisation and follow-up purposes, where you interact with their stand, session or lead-scanning feature. • GETC Awards: submission data is shared with our independent jury for scoring purposes, and — for the Audience Favorite category — aggregated vote data is used to determine the result. • Marketing platforms: we may use secure, encrypted matching with platforms such as Google or Meta to tailor sponsored content; the platform only recognises data already linked to an existing account of yours, and we do not provide it with new personal data. • Advertising platforms: such as Google Ads, to show you relevant advertising — see our Cookie Policy for your options. • Service providers: for customer support, hosting, ticketing, payments (Stripe), legal/compliance advice, and marketing/analytics, all under contract to use your data only to provide their service to us. • Business transfers: in the event of a merger, acquisition or asset sale, your data may be transferred as part of that transaction, subject to applicable law. • Legal and safety reasons: where required to comply with a legal obligation, respond to a lawful request from a competent authority, investigate fraud, protect our rights or safety, enforce our Terms, or where you request a visa-support letter that requires confirmation of its authenticity. • Aggregated data: we may share aggregated, non-identifying statistics (e.g. attendee job-title counts) with sponsors and partners.

7. ARTIFICIAL INTELLIGENCE

We may use AI tools to improve our services, for example to support content or networking recommendations, application review, or customer support chatbots. We always ensure meaningful human review before any decision that significantly affects you.

8. DATA RETENTION

We retain your personal data for as long as necessary for the purposes described in this Policy, generally for up to six years after collection, unless a longer period is required by law (e.g. tax or accounting obligations under Spanish law), or necessary to resolve disputes or enforce our Terms. Call recordings, where made, are generally deleted after four weeks.

9. INTERNATIONAL DATA TRANSFERS

We are based in Spain and our main processing takes place within the European Economic Area (EEA). Where we use service providers established outside the EEA (for example, certain analytics, advertising, or cloud-hosting providers), we rely on the European Commission's Standard Contractual Clauses, together with supplementary technical and organisational measures (such as encryption), to protect your data. You may request further information or a copy of the relevant safeguards by contacting us.

10. YOUR RIGHTS

Subject to applicable law, you have the right to: • Access and portability — obtain a copy of your data and, where applicable, have it transferred to a third party; • Rectification — correct inaccurate data; • Erasure — request deletion of your data; • Restriction — limit how we process your data in certain circumstances; • Object — object to processing based on our legitimate interests or carried out for direct marketing; • Withdraw consent — at any time, where we rely on your consent (e.g. via the unsubscribe link in our emails, or by contacting us); and • Complain — lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es), or with the supervisory authority in your EU country of residence, without prejudice to any other remedy. To exercise any of these rights, contact us at legal@getc2027.eu.

11. SECURITY

We implement reasonable technical and organisational measures to protect your personal data, appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. CHILDREN

GETC 2027 is a professional/business congress and is not designed for children. Where a minor exceptionally attends accompanied by a parent or guardian (see Section 5.2 of our Terms and Conditions), we limit data collection to what is strictly necessary to enable that attendance and generally collect only the accompanying parent's or guardian's data. For more information, please contact us.

13. HOW TO STOP DIRECT MARKETING

You can stop marketing communications at any time by: clicking "unsubscribe" in any marketing email; adjusting your notification preferences in our app, if applicable; or contacting us at legal@getc2027.eu. Please note you may receive further communications for a short period while our systems update.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Policy from time to time. Material changes will be notified to you; the date of the latest revision is shown at the top of this page.

15. CONTACT US AND DATA PROTECTION

For any question or to exercise your rights under this Policy, please contact: • Email: legal@getc2027.eu • Postal address: ENZARO TECH, S.L., Calle Trafalgar, Núm. 46, Planta 4, Puerta 2, 46023 València (Valencia), España You may also lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.