PRIVACY POLICY

Last Updated on 17/06/2026

I. GENERAL

1. Introduction

Respect for your privacy and the management, protection and security of your personal data are a priority for 100mentors Single Member Private Company (“100mentors”, the “Company”, “we”, “us”, “our”), a private company registered in Greece, with registered offices at Pl. Kornarou 31, 71202, Heraklion Crete, VAT no. EL800598425, email address info@100mentors.com.

This Privacy and Personal Data Protection Policy (the “Privacy Policy” or the “Policy”) informs you, as visitors/users of the website https://www.genaisummitseeurope.com (the “Website”), purchasers or holders of tickets, attendees, newsletter subscribers, report recipients, applicants, speakers, podcast applicants, sponsors, partners, volunteers or other persons using the services offered on the Website, participating in promotional, communication, networking or other activities by the Company regarding the Event or its related services, using or interacting with the social media channels of the Website, the Event or the Company, including through comments, messages, likes, shares or other interactions, or otherwise interacting with the Website, the GenAI Summit 5 event or the Company’s related services, activities and communications (hereinafter “you”, “your”):

• of the type of personal data we collect or produce about you;

• of the purposes of the collection and processing of your data;

• about how such data are processed;

• about the legal bases on which we process your data;

• about the recipients of your personal data and the purpose of processing on their behalf;

• about your rights and choices in relation to your personal data; and

• about how to contact us for any issue you may have with regard to your personal data.

This Privacy Policy applies to the Website and to the event currently presented on the Website as GenAI Summit 5, scheduled to take place on 16 November 2026 at the Stavros Niarchos Foundation Cultural Center in Athens, Greece (the “Event”), as well as to all related online forms, ticketing flows, newsletters, report downloads, applications, communications, on-site registration, photography, video/audio recording and post-event communications.

This Privacy Policy should be read together with the Terms of Use, the Ticket Purchase Terms, the Venue & Event Rules and the Cookie Policy, as applicable.

2. Changes to the Privacy Policy

We may modify or replace all or part of this Policy at our sole discretion, including where this is necessary due to changes in the Website, Event organisation, ticketing flow, data collection practices, service providers, technologies used, legal requirements or Company practices. If there are substantial changes to this Policy or our practices regarding your data change in the future, we will notify you by publishing the updated Policy on the Website and, where appropriate, by other suitable means. Please note that any information or clarification provided to you in connection with any changes to this Policy does not constitute a replacement, substitution or modification of this Policy. In any case, we recommend that you review this Privacy Policy from time to time, taking advantage of the ability to always find it as a permanent information point on our Website.

3. The legal framework

This Privacy Policy is based on Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and the applicable Greek and EU data protection legislation.

Our data protection information should be legible and understandable for the general public, as well as for our users, attendees and business contacts. To ensure this, we would like to first explain certain terminology used in this Policy.

“Personal data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

“Processing” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.

“Controller” means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

“Recipient” means a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not.

“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

“Consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

4. Acknowledgement of this Policy

By accessing the Website, purchasing a ticket, submitting a form, subscribing to a newsletter, requesting a report, applying to participate in the Event, attending the Event, interacting with our social media channels or otherwise interacting with the Company, you acknowledge that you have been informed of the processing of your personal data as described in this Privacy Policy. If you do not agree with the processing described in this Policy, you should not provide us with personal data or use the relevant Website Services, except where the processing is necessary for us to comply with legal obligations or to protect our rights. In any case, for any information or clarification, you may contact us while retaining your rights with respect to your personal data as outlined in this Policy.

5. Data Controller

The Data Controller responsible for the processing of your personal data described in this Privacy Policy is:

100mentors Single Member Private Company Registered office: Heraklion (Crete) GEMI no.: 131454327000 VAT no.: EL800598425 Email: info@100mentors.com Telephone: +30 6974830867

100mentors is the organiser of the Event and the seller of the Event tickets. Ticket selection, checkout, payment processing and ticket issuance may be completed through the cooperating ticketing platform Eventora (the “Sales Platform”). The Sales Platform acts as a technical ticketing and payment facilitation platform. The Company remains the organiser and seller of the Event tickets and issues the applicable receipts/invoices through the Sales Platform infrastructure.

6. How to contact us

You can contact us using the following contact details:

Email: info@100mentors.com Address: Pl. Kornarou 31, 71202, Heraklion, Crete Telephone: +30 6974830867

You may submit your comments, questions, remarks or complaints regarding this Policy and the general collection and processing of your personal data. You also have the right to submit any complaint regarding issues of protection of your personal data to the Hellenic Data Protection Authority, which is the supervisory authority in Greece. Relevant details can be found atwww.dpa.gr. However, we consider it our obligation and duty to address any concerns you may have regarding your personal data that we process, so please feel free to contact us first.

II. COLLECTION AND PROCESSING OF DATA

1. What data we collect about you

During your browsing on the Website, your interaction with the Website or social media channels, your purchase of tickets, your participation in the Event, your submission of forms, applications or requests, your subscription to newsletters, your communication with us or otherwise, we collect various types of personal data about you, either directly from you, from third parties, or data which we collect or generate by our own means, including automated means. Some of the data fields requested through the Website, the Sales Platform or other Event-related forms are mandatory because they are necessary for us to provide the relevant service, manage your request, process your ticket registration, deliver requested content, assess an application or comply with legal obligations. Other fields may be optional and are provided by you voluntarily. The mandatory or optional nature of each field will be indicated, where appropriate, at the point where the data are collected.

Without limitation, any of the following data may be collected:

A. Identity, registration and contact data

When you interact with the Website, purchase a ticket, register for the Event, submit a form or communicate with us, we may collect:

• first name;

• last name;

• business email address;

• telephone number, where requested or voluntarily provided;

• Job tile

• Company

• message content;

• communication history;

• registration status;

• attendance status.

B. Professional / business data

As GenAI Summit is a professional and business-oriented event, we may collect professional and business-related data, including:

• company / organisation name;

• job title;

• professional role or capacity;

• sector / industry;

• participation category;

• LinkedIn profile URL, where relevant and requested;

• business contact details;

• information relating to sponsor, partner, speaker, volunteer or other professional participation.

Certain fields, including Company and Job Title, may be mandatory in selected flows, such as ticket registration, report download, professional applications or business participation requests, where they are necessary due to the professional and business nature of the Event and the specific purpose of the relevant form.

Such information may be used for registration management, badge printing, access control, audience understanding, networking relevance, Event organisation, B2B curation and aggregated or anonymised reporting.

We do not share your individual contact details with sponsors for their own direct marketing, unless this is expressly stated at the point of collection and you have provided a separate, specific consent.

C. Ticketing, transaction and payment-related data

When you purchase, receive or use a ticket for the Event, including through the Sales Platform, we may process:

• ticket type;

• ticket holder name;

• email address;

• company name;

• job title;

• purchase date and time;

• ticket status;

• payment status;

• transaction value;

• receipt or invoice information;

• billing information, where applicable;

• check-in status;

• badge data;

• attendance category;

• access control information.

Payment card details are processed through the Sales Platform and/or cooperating certified payment service providers. The Company does not store payment card details on the Website.

D. Website form, application, request and contributor-related data

When you voluntarily fill out Website forms or submit information through the Website, we may collect the data requested in the relevant form.

Such Website forms may include:

• newsletter signup forms;

• report download forms;

• “Get Involved” forms;

• podcast guest application forms;

• contact forms;

• sponsorship or partnership forms;

• volunteer forms;

• speaker or contributor forms, where available through the Website.

In addition, depending on the Event’s operational setup, we may collect data through other Event-related forms, communications or third-party platforms, such as Eventora, HubSpot, Typeform, Zoom or similar tools, for purposes such as ticket registration, webinar registration, workshop registration, speaker/moderator/contributor data collection, surveys, post-event feedback or other Event-related activities.

The specific data collected depends on the relevant form, communication, platform and purpose. This may include first name, last name, email, company, job title, phone number, LinkedIn profile, participation type, message content, answers to questions, preferences, feedback responses or other information you choose to provide.

Free-text fields, message fields, LinkedIn profile URLs, telephone numbers or other additional information may be optional unless specifically marked as mandatory in the relevant form.

If you are invited, selected or otherwise participate as a speaker, moderator, podcast guest, workshop leader, demo presenter or other contributor, we may request or process additional professional, content-related, recording-related and participation data, such as professional bio, photo, topic proposal, session title, presentation details, audiovisual material, recording-related information or information required for participation, recording, publication and reuse purposes. Where required, such matters will be further regulated through a separate Speaker / Guest Release or Participation Agreement or similar document.

Please include only information relevant to your request and do not submit sensitive personal data, confidential business information or third-party personal data through Website forms or other Event-related forms unless strictly necessary and expressly requested.

E. Newsletter and marketing preference data

If you subscribe to receive newsletters or updates, we may collect and process:

• first name;

• last name;

• email address;

• consent record;

• date and time of consent;

• subscription source;

• marketing preferences;

• unsubscribe status;

• email engagement data, where applicable.

Newsletter subscription is voluntary and is based on your separate consent. Marketing/newsletter consent is separate from acceptance of Terms, ticket purchase, report delivery, application submission or contact enquiry.

All marketing/newsletter consent checkboxes must be unticked by default.

F. Photography, video and audio data

During the Event, photography, video recording, livestreaming, audio recording or other recording may take place by the Company, persons authorised by the Company, professional photographers, videographers, production crews, media partners or other authorised representatives acting on behalf of or with the approval of the Company.

Such material may include:

• image;

• likeness;

• voice;

• name;

• professional capacity;

• statements;

• participation;

• appearance in crowd shots, audience shots, session recordings, networking footage, ambience footage and general Event coverage.

If you do not wish to appear in close-up promotional content, you may contact us before the Event or notify the Event help desk onsite, as further described in the Terms of Use and Venue & Event Rules. More specific rules are included in the Terms of Use and Venue & Event Rules.

 G. Activity data and other data collected automatically

When you access and interact with the Website and its Services, we may automatically collect certain information about these visits, such as:

• IP address;

• browser type and version;

• operating system;

• device type;

• device identifiers;

• access times;

• pages viewed;

• number of clicks;

• referring page;

• navigation behaviour;

• log information;

• security logs;

• network information;

• Website usage information.

H. Data collected through cookies and similar technologies

We may also collect data through cookies and similar technologies, such as browser cookies, pixels, tags and beacons.

These technologies may be used to collect and store activity data about your use of the Website, such as pages visited, content viewed, search queries, advertising interactions and browsing behaviour.

For detailed information about the cookies, pixels, analytics tools and similar technologies used on the Website, including their categories, duration and your choices, please read our separate Cookie Policy.

I. Anti-spam, anti-bot and security data

Certain Website forms may be protected by anti-spam, anti-bot and security tools such as Google reCAPTCHA or similar technologies. Such tools may process technical and interaction data, such as IP address, browser information, device information and user interaction signals, in order to protect the Website from spam, automated abuse, fraudulent submissions and malicious activity.Where reCAPTCHA or similar tools are used, more information may also be provided in the Cookie Policy and/or in the relevant form notice.

J. Data from social media and third-party websites

When you interact with our social media pages or access Website content through third-party platforms, we may process data such as:

• profile name;

• username or user ID;

• profile image;

• public comments;

• likes;

• shares;

• tags;

• direct messages or other communications you send to us;

• publicly available profile information;

• information or content that you have permitted the relevant social media platform to make available;

• content you send to us;

• social media interaction data.

Your interaction with third-party platforms remains subject to the terms and privacy policies of the respective platform providers.

K. Public data and posts

Personal data that accompanies public content you post or make available, including comments, public posts, profile information, likes, status, public photos or other public interaction data, may become publicly available depending on the platform and your settings. Public information and posts may be visible to other users and may appear in external search engine results.Please note that we do not control the visibility, indexing or further use of public content by third-party social media platforms or search engines.

2. How we collect your personal data

2.1. We collect data directly from you

We collect directly from you the personal information and data mentioned in Section II.1 above, depending on the specific Service, form, request, registration, ticket purchase, application, communication or Event-related activity through which you interact with us.

In particular, we may collect personal data directly from you when you:

• purchase or receive a ticket;

• register for the Event;

• submit your details through the Sales Platform;

• subscribe to our newsletter;

• request to receive a report;

• submit a Contact form;

• submit a Get Involved request;

• apply as a podcast guest;

• apply or participate as a speaker, moderator, sponsor, partner, volunteer or contributor;

• register for a webinar, workshop or sponsored session;

• complete a survey or feedback form;

• communicate or interact with us by email, phone, Website form, social media message, comment, tag or otherwise;

• attend the Event.

2.2. We collect data by automated means

We collect by automated means certain personal data mentioned in Section II.1 above, in particular activity data, technical data, usage data, cookie-related data, analytics data, security data and anti-spam / anti-bot data, depending on your interaction with the Website and the technologies used.

In particular, we may collect data automatically when you access or use the Website through:

• cookies and similar technologies;

• pixels, tags and beacons;

• analytics tools;

• advertising or campaign measurement tools;

• log files;

• security tools;

• anti-spam, anti-bot and fraud prevention tools, including reCAPTCHA where used;

• device, browser and network information.

More details on cookies, pixels, analytics tools, advertising technologies and similar technologies are provided in our separate Cookie Policy.

2.3. We collect data from third parties

We may collect or receive from third parties certain personal data mentioned in Section II.1 above, depending on the relevant Event-related activity, platform, service, communication or cooperation, where there is a legal basis for processing and the relevant third party is entitled to provide such data to us.

Such third parties may include:

• Eventora, for ticketing, registration, check-in, payment status, ticket issuance and related ticketing information;

• HubSpot or similar CRM / communication tools, for form submissions, contact management, newsletter management and communication records;

• Typeform, Google Forms or similar form tools, for applications, speaker/moderator/contributor data collection, surveys, workshop registrations or post-event feedback, where applicable;

• Zoom or similar webinar / online event platforms, for webinar registration, attendance and related participation data, where applicable;

• Google, Meta, Squarespace and similar website, analytics, advertising, security or technical providers, subject to applicable privacy and cookie requirements;

• sponsors or partners, where they provide names, contact details or other registration details of their own team members, guests or invitees for ticket allocation, invitation, registration, access control or Event management purposes, provided that they have the lawful basis and authority to do so and have provided the relevant individuals with any required information about such disclosure;

• agencies supporting campaigns, lead collection or Event promotion, where applicable;

• social media platforms, depending on your privacy settings, your interaction with our pages and the functionality of the relevant platform;

• publicly available sources, such as LinkedIn or professional websites, where relevant to a professional request, speaker review, business contact, sponsor/partner relationship or Event-related communication.

Where a third party provides us with your data, that third party is responsible for ensuring that it has the relevant lawful basis and that it has provided any required information to you. When you use third-party platforms or social media platforms, you should also consult the privacy notices, terms and settings of the relevant platform provider.

3. Personal data from persons under 16 years of age

We do not knowingly collect personal data from persons under the age of 16 through the Website.

The Event is primarily intended for professional and business audiences. Minors may attend the Event only if expressly permitted by the Company and accompanied by a parent, legal guardian or duly authorised adult, where required.

If we become aware that we have collected or received personal data from a person under the age of 16 without appropriate authorisation, we will delete such data unless retention is required by law or appropriate parental/guardian authorisation has been provided.

If you believe we may have information from or about a person under 16, please contact us.

4. Sensitive personal data

We do not collect and request that you do not send or disclose sensitive personal data, such as information about racial or ethnic origin, political opinions, religious or philosophical beliefs, health, criminal background, trade union membership, genetic or biometric data, through the Website, the Company’s forms, the Event Services or otherwise.

Where a free-text field is available, please include only information relevant to your request and avoid submitting sensitive personal data, confidential business information or third-party personal data.

5. How do we use your personal data

The primary reason we collect data about you is to provide you with the Website Services, allow you to interact with the Website and the Event, enable you to purchase or receive tickets, manage your participation in the Event, respond to your requests and provide the communications or content you request.

We may process your personal data for the following purposes:

• To provide, operate and manage the Website and its Services;

• To manage ticket purchase, registration, ticket issuance, check-in, badges and Event attendance;

• To issue confirmations, receipts, invoices or other transaction-related information;

• To communicate with you regarding the Event, your ticket, your registration, your request or your participation;

• To respond to your comments, questions and requests and provide support;

• To manage, monitor and respond to communications, comments, messages, tags, mentions or other interactions through the social media channels of the Website, the Event or the Company;

• To send you the GenAI Summit Report or other gated content you request;

• To assess and respond to Get Involved applications, sponsorship requests, partnership requests, volunteer applications and other expressions of interest;

• To assess and respond to podcast guest applications and to manage speaker, moderator, guest or contributor participation;

• To manage speakers, moderators, contributors, sponsors, partners and volunteers;

• To manage webinars, workshops, sponsored sessions, surveys and post-event feedback;

• To send newsletters and marketing communications where you have provided separate consent;

• To manage unsubscribe requests and marketing preferences;

• To take photographs, video recordings and audio recordings during the Event and use them for documentation, reporting, communication, educational, archival and promotional purposes, subject to applicable law and the safeguards described in this Policy and the Terms;

• To understand the professional audience of the Event and prepare aggregated or anonymised audience analytics;

• To provide aggregated or anonymised reporting to sponsors, partners or internal stakeholders;

• To improve the Website, Event, content, communications and future editions;

• To measure, analyse and improve the Website Services, subject to cookie consent requirements where applicable;

• To protect the Website and forms against spam, bots, abuse, fraud and security threats;

• To protect the reputation, rights and legitimate interests of the Company, the Event, attendees, speakers, sponsors, partners and users in connection with public communications or social media interactions;

• To comply with applicable laws, accounting and tax obligations, legal procedures and requests from competent authorities;

• To establish, exercise or defend legal claims;

• To complete a corporate transaction such as a proposed or actual reorganisation, merger, sale, joint venture, assignment, transfer or other disposal of all or part of the Company’s business activities, assets or shares;

• For other purposes for which we will notify you or which will be identified on a case-by-case basis at the place where your information is originally collected.

6. On what legal basis do we use your personal data

The legal basis on which we process your personal data may be one or more of the following:

A. Performance of a contract or steps prior to entering into a contract

We process your personal data where necessary for the performance of a contract to which you are a party, or in order to take steps at your request before entering into a contract.

This applies, for example:

• when you purchase or receive a ticket;

• when we manage your registration and attendance;

• when we issue confirmations, receipts or invoices;

• when we provide you with access to the Event;

• when we communicate with you regarding your ticket, registration or participation;

• when we provide you with a report or content you requested;

• when we manage speaker, sponsor, partner, volunteer or other participation arrangements.

B. Compliance with legal obligations

We process personal data where necessary to comply with legal obligations to which we are subject.

This applies, for example:

• for tax and accounting obligations;

• for invoice and receipt retention;

• for compliance with legal, regulatory or authority requests;

• for record-keeping required by law;

• for consumer protection obligations;

• for data protection compliance obligations.

C. Legitimate interests

We process personal data where necessary for our legitimate interests or the legitimate interests of third parties, provided that your interests, rights and freedoms do not override those interests.

Our legitimate interests include, indicatively:

• managing and protecting our business, Website, systems and Event operations;

• ensuring security, access control and orderly Event operation;

• preventing and dealing with fraud, spam, abuse, bots, unauthorised access and other unlawful activity;

• responding to enquiries, applications and requests;

• assessing Get Involved, podcast, speaker, sponsor, partner and volunteer applications;

• managing professional event registrations and attendance categories;

• managing, moderating and responding to social media communications, messages, comments, tags, mentions and public interactions relating to the Website, the Event or the Company;

• understanding audience composition in a professional/B2B event context;

• preparing aggregated or anonymised analytics and reporting;

• improving the Website, Event and future editions;

• communicating with existing business contacts regarding professional opportunities, where permitted;

• documenting the Event through photography, video and audio recordings;

• using general Event coverage, audience shots and crowd shots for documentation, reporting, communication, educational, archival and promotional purposes;

• protecting the reputation, rights and legitimate interests of the Company, the Event and Event participants in connection with public communications and social media activity;

• establishing, exercising or defending legal claims;

• maintaining business records and ensuring continuity of operations.

When we rely on legitimate interests, we assess whether our interest is overridden by your interests, fundamental rights and freedoms.

D. Consent

We process personal data based on your consent where required by law or where we choose to rely on consent.

This applies, for example:

• when you subscribe to newsletters or marketing communications;

• when you accept non-essential cookies or similar technologies;

• where you give consent to receive specific marketing updates;

• where specific recording, publication or reuse permissions are required and obtained, especially for speakers, guests or contributors.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

In particular, we process your personal data for the following purposes and on the following legal bases: