Privacy Policy

1. Data Controller and Contact

Controller: Depp Design VOF
Registered address: Baetostraat 4H, Amsterdam, Netherlands
Privacy contact: marco@symposya.com

No Data Protection Officer (DPO) is currently appointed. No EU Representative or UK Representative is currently appointed.

2. Data We Process

• Analytics data collected via Google Analytics 4 (GA4), including technical and usage data.
• Payment and transaction data processed through Stripe for supporter payments.
• Waiting list/supporter update data (email, language, source, consent metadata).
• Basic infrastructure and security logs processed by hosting/infrastructure providers.

3. Purposes and Legal Bases (EU/EEA)

• Analytics and measurement (GA4): consent, where required by applicable law.
• Payment processing and supporter transactions: performance of a contract.
• Waiting list and supporter update emails (including early membership communication): consent.
• Accounting, tax, and legal compliance: legal obligation.
• Security, fraud prevention, and service integrity: legitimate interests.

For Funding Member/Supporter payments, Symposya may use the payer email to send launch and membership updates, based on the consent notice shown before checkout. You can unsubscribe at any time.

4. Cookies and Tracking

Symposya currently uses GA4 analytics technology. No advertising pixel stack is currently declared. Symposya does not sell or share personal data for cross-context behavioral advertising.

You can manage cookies through your browser settings. Where consent is required under local law, Symposya will rely on the applicable consent mechanism.

5. Processors and Third Parties

• Cloudflare: web hosting/infrastructure and related technical processing.
• Render: demo hosting/infrastructure and related technical processing.
• Google (GA4): analytics and measurement.
• Stripe: payment processing for supporter transactions.
• Brevo: waiting list and supporter email delivery/management.

6. International Transfers

Personal data may be processed outside your country. Where required, Symposya relies on appropriate transfer safeguards (such as contractual safeguards) and provider compliance mechanisms.

7. Retention

• Analytics data (GA4): 13 months.
• Consent log events: 13 months.
• Infrastructure/security logs: up to 13 months.
• Payment/accounting records: 7 years (or longer if legally required).
• Waiting list/supporter email records: until consent withdrawal (unsubscribe) or service closure.
• Newsletter/waiting-list event audit trail: up to approximately 13 months.
• Suppression-list records (to honor opt-out): retained while opt-out remains active.

8. Your Rights by Region

EU/EEA/UK/CH

You may have rights of access, correction, deletion, restriction, portability, objection, and consent withdrawal, subject to legal limits.

You also have the right to lodge a complaint with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP).

US/Canada/APAC

Depending on your local laws, you may have rights to access, correction, deletion, and additional rights related to data use and disclosures. You may contact Symposya to submit requests.

9. Minors

Symposya does not publish content intended to be harmful to minors. Where local law requires parental consent for certain processing, users and guardians are responsible for compliance. Payment actions should be made by users with legal capacity under applicable law.

10. Sale/Share and Automated Decisions

Symposya does not sell personal data and does not share personal data for cross-context behavioral advertising. Symposya does not use automated decision-making with legal or similarly significant effects.

11. Geographic Scope

Initial operational focus includes EU countries, US states, and Canada. The service may be accessible from other regions, including APAC.

12. Policy Updates and Languages

Symposya may update this policy over time. Material changes will be reflected on this page.

Current publication languages: English, Italian, and Dutch.

In case of interpretation differences, the English version controls.