On this page

Purpose and legal basis for processing

Our purpose for collecting this information is so we can facilitate the event and provide you with an acceptable service.

The lawful basis we rely on to process personal data of delegates, exhibitors and staff is Article 6(1)(e) of the GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.

The lawful basis we rely on for processing delegates, exhibitors and staff personal data about dietary or access requirements is consent under article 6(1)(a) of the GDPR and under article 9(2)(a) as this type of information is classed as special category data.

What we need

We need your contact information including your organisation’s name and, if offered a place, information about any dietary requirements or access provisions you may need.

Categories of personal data we collate for the conference:

Delegate / exhibitor / employee name and contact details, dietary and access needs, payment details, images and audio.

We also live stream and record the session in the main auditorium.

Why we need it

We use this information to facilitate the event and provide you with an acceptable service. We also need this information so we can respond to your queries concerning the conference.

What we do with it

If you are not successful in securing a place, we’ll let you know and offer to hold your details on a reserve list in case a place becomes available.

If you are allocated a place at the DPPC, we’ll ask for information about any dietary/access requirements. We don’t share this information in any identifiable way with the venue, and we delete it after the event. Please read the Manchester Central privacy policy for full details.

We don’t publish delegate lists for events.

How long we keep it

For information about how long we hold personal data, see our retention schedule.

What are your rights?

We rely on your consent to process the special category data you give us. This means you have the right to withdraw your consent at any time. If you do that, we’ll update our records immediately to reflect your wishes.

For more information on your rights, please see ‘Your rights as an individual’.

Do we use any data processors?

Yes – we use data processors to help facilitate the events who process information in line with our instructions.

We collect registration information from some of our conference microsites. This is done via an online reporting tool hosted by Snap Surveys. You can read their privacy policy here. Data collected by Snap Surveys for the ICO is stored on UK servers.

We also use Print-it for printing services. We share your name and contact details with them which they use for printing guest lists. They delete your information after they have completed the print job. You can read their privacy policy here.

We use Picturewise for filming at the event.

Payment for the event is administrated by SEE tickets – Please see their privacy notice. If you pay by cheque your information is processed by the finance department at the ICO.

The privacy notices of our other suppliers are available from our DPPC microsite.

Transfer of personal data

We are live streaming the sessions from the main auditorium. Audio and images are transferred via a US server.

Cameras will be focused on the presenting panel. We do not intend to collect the personal data of delegates as part of this streaming. If you choose to interact with the panel, to ensure that your personal data is not captured please do not give your name or your organisation, a sector will suffice.