Privacy Policy
How we process your personal data in connection with EPN Conference
Version 2 · in effect from 15 August 2026
1. Data Controller
The data controller for the personal data you provide when purchasing a ticket to the European Palestinian Network Conference is:
Puls48
CVR no. 35905332
Stamholmen 175, 1st floor
2650 Hvidovre, Denmark
info@ep-network.net
2. What Data Do We Collect?
We collect the following information, depending on how you use our services:
When you register and purchase: name, email address, phone number, country, gender, age group, profession and organisation. If you buy a ticket for someone under 18, we also record which adult participant on the same order is responsible.
When physical goods are delivered: delivery address.
When you use transport and logistics services: flight number, arrival and departure time, airport, hotel name and hotel address, along with any notes you provide yourself.
Photographs: images you upload for identification at pick-up or for your participant badge. Drivers can see photos of the guests assigned to them, and guests can see a photo of their assigned driver. Administrators have access to all photos.
Photos and video from the event: images and recordings we make ourselves during the conference, in which you may appear. See section 6 of the terms and conditions for the legal basis and your right to object.
When you claim expenses: your name, account details (sort code and account number, or IBAN and BIC for a foreign account) and the receipt you submit. Account details are stored encrypted.
When you contact us: name, email address and the content of your message. For press enquiries, also outlet name, role and phone number.
Automatically: technical information about your use of the service, including a log of emails and text messages sent to you.
3. Purpose and Legal Basis
We process your data to administer your registration and deliver the services you have ordered (GDPR Art. 6(1)(b) — performance of contract). Contact consent data is processed on the basis of your voluntary consent (Art. 6(1)(a)), which you may withdraw at any time. Photos and video from the event are processed on the basis of our legitimate interest in documenting and communicating about our own events (Art. 6(1)(f)). You may object — see section 6 of the terms and conditions.
4. Recipients of Data
We share your personal data with the following data processors, who process it on our behalf and on our instructions:
| Recipient | Purpose | Data |
|---|---|---|
| Stripe | Payment processing | Amount, order reference, email address |
| Vipps MobilePay | Payment processing | Amount, order reference |
| Brevo | Sending email | Name, email address, the content of the emails we send you |
| Twilio | Sending SMS | Phone number, message content |
| Google (Gemini) | Structuring registration details entered by an administrator | Name, email address, phone number, country, gender, age group, profession |
| Google (Wallet) | Issuing a digital ticket | Name, ticket token, event details |
| Apple (Wallet) | Issuing a digital ticket | Name, ticket token |
| Visma Dinero | Bookkeeping of expenses and receipts | Receipt file, voucher description |
Card details are entered directly with our payment provider and never pass through our own systems.
Some of our data processors are established outside the EU/EEA. Where that is the case, transfers take place on the basis of the European Commission's standard contractual clauses or another valid transfer mechanism.
Beyond the above, we do not share your personal data with third parties unless required to do so by law.
5. Retention
We keep your information for as long as it is needed for the purpose it was collected for:
| Information | Retention period |
|---|---|
| Accounting records (amounts, payment references, vouchers) | 5 years after the end of the financial year the records relate to |
| Participant details beyond what accounting requires | 12 months after the event, after which they are minimised |
| Photographs uploaded for identification or badge | 30 days after the event ends |
| Travel and transport details | 90 days after the event ends |
| Account details for expense reimbursement | 90 days after payment |
| Log of emails and text messages sent | 12 months |
| Enquiries via the contact and press forms | 24 months |
| One-time codes for verification and login | Deleted on expiry |
| Newsletter subscription | Until you unsubscribe |
When the retention period ends, the information is deleted or anonymised so that it can no longer be traced back to you.
When we anonymise or delete your information, it may still exist in our backups until those expire. We take a daily backup of the entire server and keep the seven most recent, after which the oldest are deleted automatically. At the latest seven days after a deletion, the information is therefore gone from there as well. Backups are used solely to restore data in the event of data loss.
6. Your Rights
You have the right to access, rectify, erase and restrict the processing of your personal data, as well as the right to data portability. You also have the right to lodge a complaint with the Danish Data Protection Agency (dt.dk). Send a request to info@ep-network.net and we will respond within 30 days.
7. Cookies and Technology
We use the following cookies and similar technologies:
Necessary — no consent required:
- `epn_portal` — keeps you signed in to the participant portal
- `epn_admin` — keeps administrators signed in
- Your recorded cookie consent, so we do not ask again on every visit
- Your shopping cart, stored locally in your browser
We do not use analytics, statistics or marketing cookies. Should that change, we will ask for your consent first.
You can change your choice at any time via the cookie settings at the bottom of the page.
8. Changes
This privacy policy may be updated in the event of significant changes to our data processing. The current version is always available at ep-network.net. Last updated: June 2026.