Privacy policy
This policy explains which personal data the Aditum platform processes, for what purpose, who the data controller is and which rights event participants, organizer staff and site visitors have.
1. Roles: the organizer and Aditum
Participant data is collected by the event organizer, who is the data controller and defines the purpose and legal basis of processing. Aditum processes this data on the organizer’s behalf as a processor, under the agreement and the settings of the specific event.
For staff accounts, enquiries through the site and technical data of site visitors, the controller is Published LLC (ТОВ «Паблішед»; EDRPOU code 46100583; 30 Peremohy Ave., building 1, office 206, Lutsk, Volyn region, 43005, Ukraine).
2. Which data we process
The organizer defines the set of fields in the registration form. Every field belongs to one of the protection classes:
- P1 — working data: name, organization, position, participant category, country, city, team function.
- P2 — contact data: email and phone of a participant or a staff member.
- P3 — documents: passport or ID, date of birth, vehicle details, emergency contact.
- P4 — files: participant photo.
3. How data is protected
Each organizer’s data lives in an isolated workspace with a separate file store. Contact data is masked in lists; documents are masked everywhere, and their full value is available only through an explicit reveal request that is written to the audit log. Files are stored privately and served through short-lived signed links.
Console access is protected by two-factor authentication. Personal data is not separately encrypted in the database — protection is built into how data is served and who may access it.
4. Participants without an account
A participant does not create an account. In the mobile app they confirm their identity with a one-time code sent to the registration email and see only events where their registration is confirmed.
5. Retention
Participant data is retained for the period defined by the organizer for the specific event and is deleted or anonymised after it ends. The audit log is kept separately to evidence lawful processing.
6. Sub-processors
To run the platform we use providers of hosting, email delivery and bot/DDoS protection (Cloudflare). All of them operate under data processing agreements.
The aditum.id website itself runs Google Analytics 4. It sets its own cookies and sends Google technical data about the visitor — the page opened, the referring source, an approximate city, the device type and the browser — so that we can see which sections people read. This data is not combined with event participant data; the organizer console and the mobile apps carry no analytics.
You can opt out with your browser: a script blocker, a do-not-track setup or the official Google Analytics Opt-out add-on. The site works the same with analytics and without it.
7. Your rights
You have the right to access, correct, delete and restrict the processing of your data. Participants should contact the organizer as the controller; we also accept requests at [email protected] and forward them to the organizer with confirmation.