Effective: November 2025
This Privacy Policy applies to the Summit Portal platform (the "Portal") operated by In Parallel Oy ("we", "us", "our"), including all event portals, attendee features, and related services.
For personal data collected directly through the Portal (e.g. sign-in, browsing), In Parallel Oy is the controller. For data processed on behalf of event organisers ("Customer Content"), the organiser is the controller and In Parallel is the processor. A Data Processing Addendum ("DPA") forms part of each organiser contract.
Depending on how you interact with the Portal, we may process:
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing portal access and event features | Performance of contract — Art. 6(1)(b) |
| Personalising content (interests, "For You" recommendations) | Legitimate interest — Art. 6(1)(f) |
| AI-powered chat, reports, and insight generation | Legitimate interest — Art. 6(1)(f) |
| Improving and developing the platform | Legitimate interest — Art. 6(1)(f) |
| Analytics and optional cookies | Consent — Art. 6(1)(a) |
| Complying with legal obligations | Legal obligation — Art. 6(1)(c) |
| Protecting rights and preventing fraud | Legitimate interest — Art. 6(1)(f) |
We do not make decisions with legal or similarly significant effects solely based on automated processing. AI features (chat, recommendations) are provided as informational tools only.
If you choose to provide your LinkedIn URL or paste your LinkedIn profile text, this data is processed solely to extract professional interests for the "For You" personalisation feature. We do not store the raw LinkedIn text after interests have been extracted, and we do not scrape or access LinkedIn on your behalf.
The Portal uses AI to generate chat responses, session summaries, and personalised recommendations based on event content (session notes, insights, speaker information). AI-generated content is informational and may not be fully accurate. Prompts and responses are processed in real time and are not used to train AI models.
We use trusted subprocessors to operate the Portal under written contracts meeting GDPR Article 28, including:
An up-to-date subprocessor list is available upon request. Material subprocessor changes will be communicated to customers in advance.
Some subprocessors are based outside the EEA. For each transfer, we rely on one or more of: EU adequacy decisions, Standard Contractual Clauses, or the EU-U.S. Data Privacy Framework.
Customer Content is stored in the EU by default; alternative residency options may be available by agreement.
Technical and organisational measures include: encryption at rest and in transit (TLS 1.2+), access controls, least-privilege principles, audit logging, and vulnerability management.
Authentication uses magic-link tokens sent via email — no passwords are stored.
Personal data is retained only as long as needed for its purpose or as required by law.
When data is no longer needed, it is securely deleted or anonymised.
Under GDPR, you have the right to:
To exercise any right, contact us at [email protected]. We will respond within 30 days.
Kristian Luoma — [email protected]
In Parallel Oy
Salomoninkatu 17 B 4
00100 Helsinki, Finland
[email protected]
We may update this policy from time to time. Material changes will be communicated via email or in-product notice. The "Effective" date at the top shows the latest version.