Privacy policy
Last updated: 11 October 2026
1. Data controller
- Company
- Ailon-Glandt Consulting, S.L.
- Tax ID (NIF)
- B22676894
- Registered office
- Calle de Arturo Soria 154, 28043 Madrid, Spain
- Companies Register
- Registro Mercantil de Madrid, Hoja M-857886
- [email protected]
- Website
- madrid.aishowandtell.org
2. What data we hold, and where it comes from
This website has no forms and collects nothing by itself. We handle personal data in three situations:
- If you book a seat. Booking happens on Cal.com. As organisers we receive your name, your email address and the booking itself, so we know who is coming and can tell you if anything changes.
- If you email us. We process whatever you put in your message — usually a name, an email address and the content.
- If you subscribe to the mailing list. See section 6.
3. Why, and on what legal basis
- Managing your attendance — confirmation, reminders, cancellation and notice of changes: performance of the arrangement you ask for when booking (art. 6.1.b GDPR).
- Answering your email: art. 6.1.b GDPR.
- Managing capacity and safety of the venue, since places are limited: legitimate interest (art. 6.1.f GDPR).
We don't send marketing to people who haven't asked for it, don't sell or share your data for advertising, don't build profiles and don't make automated decisions about you.
4. How long we keep it
Booking data is kept until three months after the meetup, to deal with anything arising afterwards, and then deleted. Email correspondence is kept for at most one year from the last message.
5. Who else is involved
We don't share data with third parties except where the law requires it. These providers act as processors on our instructions under art. 28 GDPR:
- Cal.com, Inc. — the booking platform. When you book you give your details directly to their service, which also applies its own privacy policy.
- Cloudflare, Inc. — DNS, site protection and inbound mail routing.
- Google Ireland Ltd. / Google LLC — our email mailbox.
- Hetzner Online GmbH (Germany) — hosting for this website.
- Brevo (Sendinblue SAS, France) — email delivery for the mailing list described below.
Hosting sits inside the European Economic Area, so it involves no international transfer. Cal.com, Cloudflare and Google are US-headquartered: to the extent they process data outside the EEA, those transfers rely on the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework adequacy decision, depending on the provider.
6. Mailing list
You can choose to join a list that tells you about upcoming sessions. It's separate from booking a seat: you can attend without subscribing, and subscribe without attending.
- What we hold: your email address and, if you give it, your name.
- What for: only to tell you about upcoming AI show and tell sessions. We don't send third-party advertising and we don't share the list.
- Legal basis: your consent (art. 6.1.a GDPR), given by confirming your subscription from the link we email you.
- How long: until you unsubscribe. While you remain subscribed we keep a record of when you consented, as art. 7.1 GDPR requires.
- How to leave: the link in every email, or write to [email protected]. It takes effect immediately and you don't have to give a reason.
Delivery is handled by Brevo on our behalf. People who had already booked a seat and told us they wanted these notices have been on the list since it was created; they can leave the same way at any time.
7. Photographs at the meetup
If photographs are going to be taken at a session we'll say so at the start, and you can tell us you'd rather not appear. We won't publish images in which you are identifiable without your consent.
8. Your rights
You can ask for access, rectification, erasure, restriction, objection and portability by writing to [email protected]. We'll respond within one month. To cancel a booking you don't need to write to us — the confirmation email has a cancellation link.
If you think we haven't handled your request properly, you can complain to the Spanish data protection authority, the AEPD (www.aepd.es).
9. Security
The site is served over HTTPS only. We apply reasonable technical and organisational measures, including restricted access to the mailboxes and the booking account.
10. Children
These meetups are for adults. We don't knowingly collect data about children.