Events. We use your personal data to confirm your attendance, manage the invite list, send you event logistics and materials, and facilitate on-the-day registration. We may also use it to send you post-event materials such as session summaries or resources discussed at the event. The lawful basis for this processing is our legitimate interest in organising and running the event.

Event photography and recordings. We may take photographs, and occasionally audio or video recordings, at our events for use in event materials and in our marketing – including post-event recaps, summaries, our website, and our social media channels (such as LinkedIn). These images may include identifiable attendees. We do this on the basis of our legitimate interests in documenting and promoting our events. If you would prefer not to be photographed, or you would like us to remove an image of you from our materials, please let us know at the event or contact us at [email protected] and we will take reasonable steps to accommodate your request.

Newsletter. Where you have subscribed to our newsletter, we use your name and email address to send you news, updates, and information about upcoming NextGen M&A events and related content. The lawful basis for this processing is your consent, which you give by subscribing. You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at [email protected].

Partner enquiries. Where you enquire about a partnership or about bringing an event to your city, we use your personal data to respond to your enquiry, evaluate and discuss the proposed partnership, and where relevant progress it towards an agreement. The lawful basis for this processing is our legitimate interests in responding to and developing business relationships, and, where we enter into discussions or an agreement with you, taking steps at your request prior to entering into a contract.

General correspondence and website operation. We use the personal data in your correspondence to respond to you, and we use website usage data to operate, secure, and improve our website and registration pages. The lawful basis is our legitimate interests in running our website and communicating with people who contact us, and, in respect of non-essential cookies, your consent (see section 10).

Sharing with partners and providers. We may share your name, job title, email address, and company name with our event partners and sponsors for event administration purposes, for post-event follow-up communications reasonably connected to the event on

the basis of legitimate interests, and, where you have given your consent, we share your name, job title, company name and email address with our event partners so that they may contact you directly to market their own services, events and related content as independent controllers. Our event partners are the organisations (such as law firms, advisers and insurers) with whom we deliver the NextGen M&A events identified on the relevant event registration page. Each partner is responsible for its own communications and for honouring any request you make to it to stop. We may also share your personal data with our technology and service providers — such as our website host, email and newsletter platforms, and CRM systems — who process data on our behalf under data processing agreements, and with local co-organisers in the jurisdiction where an event takes place, who are bound by equivalent data protection obligations. We do not sell your personal data to any third party.

Marketing. We and our event partners may send you post-event materials — such as event recaps, session summaries, and content packs — on the basis of our legitimate interests in following up on the event. This is distinct from marketing and does not require separate consent, though you may object to it at any time. Where you have subscribed to our newsletter or otherwise consented, we may also send you future marketing communications about events, services, news and related content from SiSo. Separately, where you have given your consent, our event partners may contact you directly to market their own services, events and related content. We collect these consents via separate, optional opt-in tick boxes, so that you may consent to hearing from SiSo, from our partners, both, or neither. Withdrawing your consent to SiSo marketing does not automatically stop communications from a partner you have separately consented to; to stop those, please contact the relevant partner or us. You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at [email protected].

You have an absolute right to object to the use of your personal data for direct marketing purposes at any time, and where you do so we will stop using your data for those purposes. Where we rely on legitimate interests as a lawful basis (including for event administration and post-event follow-up), we have carried out a legitimate interests assessment balancing our interests against your rights and freedoms, and we have concluded that our use of your data is proportionate and does not override those rights. You may request further information about that assessment, or object to processing based on legitimate interests, by contacting us at [email protected].

Legal and regulatory. We may also use your personal data to comply with our legal and regulatory obligations, for audit purposes, and to enforce any agreements between us. Under certain circumstances we may be required to disclose your personal data under applicable laws or regulations, for example to protect the rights, property, or safety of a third party.