Practi Privacy Policy

Last updated: 16 October 2026

1. Who We Are

Practi is a professional community focused on practical artificial intelligence, knowledge sharing, professional learning, and bringing AI into everyday work.

Practi organises community activities, educational programmes, networking opportunities, webinars, workshops, and in-person events, independently and in collaboration with partners and sponsors.

For the purposes of the European Union General Data Protection Regulation (EU) 2016/679 (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming - UAVG), the data controller is:

Practi VOF

Registered address: Zwanebloemlaan 272, 1087JT Amsterdam, Netherlands

Dutch Chamber of Commerce (KvK) number: 42167515

Dutch VAT/Tax number: NL870010104B01

Privacy contact email: admin@practicommunity.com

This Privacy Policy explains how Practi collects, uses, shares, retains, and protects personal data.

2. Scope

This Privacy Policy applies to individuals who:

Visit Practi websites and online pages.
Register for, join, or participate in the Practi community.
Register for or attend Practi events, webinars, workshops, programmes, or other activities.
Subscribe to Practi communications.
Communicate or collaborate with Practi.
Participate as speakers, contributors, partners, or sponsors.
Submit content, feedback, testimonials, or case studies.

It applies to activities conducted directly by Practi and, where Practi is responsible for processing, through third-party services.

3. Personal Data We Collect

Depending on how you interact with Practi, we may collect:

Identity and contact information: Name, email address, telephone number where requested, and other contact details you provide.
Professional information: Organisation, job title, professional interests, industry, and background.
Community information: Membership details, profile information, participation history, posts, comments, shared resources, and other contributions.
Event information: Registration details, attendance, ticket purchases, session participation, questions, feedback, and communications related to events.
Payment and transaction information: Billing details, invoice records, ticket transactions, and payment status. Payment information is processed securely through third-party payment providers; Practi does not receive or store full payment-card details.
Communications: Correspondence, enquiries, survey responses, and information you voluntarily share with us.
Photos, video, and audio: Images, recordings, presentations, or other audiovisual material collected during events or community activities.
Technical information: Information processed through our website and technology providers, potentially including IP addresses, device information, usage information, and cookies, depending on the technologies used and applicable settings.

We do not intentionally request special categories of personal data, such as information concerning health, religion, political opinions, or sexual orientation. If we require information about accessibility or dietary requirements for an event, we will limit collection and processing strictly to what is necessary and apply appropriate safeguards.

4. How and Why We Use Personal Data

We process personal data for the following purposes, relying on applicable GDPR legal bases:

Purpose	Legal Basis
Registering and administering community membership	Performance of a contract (Art. 6(1)(b) GDPR) or legitimate interests (Art. 6(1)(f) GDPR)
Registering participants and delivering events, workshops, and webinars	Performance of a contract (Art. 6(1)(b) GDPR)
Sending event confirmations, access details, and necessary administrative communications	Performance of a contract (Art. 6(1)(b) GDPR)
Managing payments, invoices, and statutory accounting records	Performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR)
Sending optional newsletters, promotional content, and invitations to future activities	Prior consent (Art. 6(1)(a) GDPR), or existing customer soft opt-in exemption under Art. 11.7 Dutch Telecommunications Act (Telecommunicatiewet)
Moderating community discussions and ensuring platform safety	Legitimate interests (Art. 6(1)(f) GDPR)
Responding to enquiries and managing professional relationships	Legitimate interests (Art. 6(1)(f) GDPR) or pre-contractual measures (Art. 6(1)(b) GDPR)
Collecting feedback and improving programmes and events	Legitimate interests (Art. 6(1)(f) GDPR)
Sharing attendee contact lists with commercial event partners or sponsors for direct marketing	Prior explicit opt-in consent (Art. 6(1)(a) GDPR)
Taking and publishing event photographs or recordings	Legitimate interests for general event imagery (Art. 6(1)(f) GDPR); Consent for close-ups, interviews, or promotional focus (Art. 6(1)(a) GDPR)
Maintaining security, preventing misuse, and protecting legal rights	Legitimate interests (Art. 6(1)(f) GDPR) and legal obligations (Art. 6(1)(c) GDPR)
Complying with Dutch statutory administration and tax retention obligations	Legal obligations under Dutch law (Art. 6(1)(c) GDPR)

Where Practi relies on legitimate interests, we balance our business interests against individuals' fundamental privacy rights and reasonable expectations. Where consent is required, individuals can freely withdraw consent at any time.

5. Community Participation

Practi operates professional community spaces in which members may share knowledge, resources, experiences, and opinions.

Certain information, including members' names, profiles, posts, comments, and contributions, may be visible to other community participants depending on the platform and privacy settings selected. Members should avoid posting sensitive or highly personal information they do not wish to be publicly or semi-publicly visible.

6. Events and Registrations

When you register for a Practi event, we process the information necessary to administer your registration and deliver the event, including confirming your registration, providing logistical details, communicating programme changes, managing attendance, and requesting event feedback.

Registering for an event does not automatically constitute consent to unrelated promotional communications from Practi or third-party sponsors.

7. Event Sponsors, Partners, and Co-organisers

Practi collaborates with commercial sponsors, professional partners, venues, speakers, and event co-organisers.

Depending on the event arrangement, Practi may share participant information with partners or co-organisers strictly where necessary to deliver the joint event.

Direct Marketing by Sponsors: Practi will not treat event registration or sponsorship alone as legal grounds for unrestricted sharing of attendee information. Practi will only share participant contact information (such as full name and email address) with commercial sponsors for their independent marketing purposes where the participant has provided specific, explicit prior opt-in consent (e.g., via an un-pre-ticked checkbox during event registration).

Where sponsors receive information for their own independently determined purposes, they act as independent data controllers and are separately responsible for their own GDPR compliance and privacy notices.

8. Photos, Videos, and Event Imagery

Practi may take photographs, video, or audio recordings at events for event documentation, educational materials, community communications, and marketing future activities.

Crowd and General Event Imagery: For general atmosphere shots or wide-angle event photos, Practi relies on its legitimate business interests (Art. 6(1)(f) GDPR). Participants will be informed prior to or upon arrival at the venue. Attendees who do not wish to be photographed may inform event staff, wear a non-consent badge/sticker provided at check-in, or seat themselves in designated non-photography areas.

Targeted Media and Close-Ups: For close-up photographs, featured promotional footage, interviews, or testimonials, Practi will request explicit prior consent (Art. 6(1)(a) GDPR).

Participants can contact Practi at any time to request the removal or blurring of identifiable event images in online materials controlled by Practi.

9. Newsletters and Marketing Communications

Practi complies with Article 11.7 of the Dutch Telecommunications Act (Telecommunicatiewet) regarding electronic direct marketing:

Consent: We send email newsletters and marketing updates to non-members or prospect subscribers based on prior explicit consent.
Existing Customer Soft Opt-in: Where you have purchased a ticket or joined as a community member, Practi may send you direct marketing about similar Practi services or upcoming events without prior consent, provided you were given a clear opportunity to opt out at the time of collection and in every subsequent communication.

Recipients may opt out of marketing communications at any time using the "unsubscribe" link included in every marketing email or by contacting admin@practicommunity.com. Unsubscribing does not affect operational or contractual event messages (e.g., registration receipts).

10. Third-Party Platforms and Service Providers

Practi uses reputable external service providers (data processors) to support business operations:

Circle: Community hosting, membership management, and discussion forums.
Luma: Event registration, ticketholder communications, and check-in administration.
Stripe: Payment processing and invoice transactions.
Google Workspace: Email communications, administrative documentation, cloud storage, and web forms.

Practi maintains Data Processing Agreements (DPAs) compliant with Article 28 GDPR with all service providers, ensuring strict data security and confidentiality standards.

11. International Data Transfers

Some of our service providers (e.g., Circle, Luma, Stripe, Google) process personal data outside the European Economic Area (EEA), particularly in the United States.

Where personal data is transferred internationally, Practi ensures an adequate level of protection is maintained by relying on:

EU-U.S. Data Privacy Framework (DPF): For transfers to certified US entities under the European Commission adequacy decision.
Standard Contractual Clauses (SCCs): The European Commission's approved Standard Contractual Clauses (pursuant to Commission Decision 2021/914/EU) accompanied by Transfer Impact Assessments where appropriate.

12. Data Retention

Practi retains personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and satisfy statutory tax requirements under Dutch law.

Data Category	Retention Period
Community membership records	Duration of active membership plus 12 months after cancellation, unless earlier deletion is requested
Event registration and attendance records	Up to 24 months post-event for event administration and follow-up
Newsletter and marketing subscription records	Until opt-out/unsubscribe, plus a limited suppression list to honor future preferences
General enquiries and correspondence	Up to 3 years after the last relevant interaction
Financial, transaction, and tax records	7 years following the end of the tax year, in accordance with Dutch statutory business accounting rules (Rijksbelastingdienst)
Consent records	Retained for as long as necessary to demonstrate GDPR compliance

13. Cookies and Tracking Technologies

Practi websites and embedded third-party tools use cookies and similar technologies for necessary platform operation, analytics, and service enhancement.

Strictly necessary cookies do not require consent under Dutch law. Non-essential analytical or marketing cookies are only placed after active, informed consent via our website consent banner.

14. Data Security

Practi implements appropriate technical and organisational security measures to protect personal data against accidental loss, unauthorised access, misuse, or disclosure. Measures include restricted access controls, secure multi-factor authentication, encrypted web traffic (HTTPS/TLS), and reliance on ISO/SOC 2 certified platform vendors.

Under the GDPR and UAVG, individuals have the following rights regarding their personal data:

Right of Access (Art. 15 GDPR): Request confirmation and copies of personal data held.
Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Request deletion of data where legal grounds exist.
Right to Restriction of Processing (Art. 18 GDPR): Request limitation of processing under specific circumstances.
Right to Data Portability (Art. 20 GDPR): Receive data in a structured, commonly used format.
Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact our privacy contact at admin@practicommunity.com. We will respond within one calendar month.

16. Children

Practi’s activities are directed exclusively at professional adult audiences. Practi does not knowingly collect or process personal data from children under 16 years of age.

17. Automated Decision-Making

Practi does not carry out automated decision-making or profiling that produces legal or similarly significant effects under Article 22 GDPR.

18. Dutch Law and Supervisory Authority

This policy is governed by Dutch law and the GDPR. Individuals have the right to lodge a privacy complaint at any time with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens

PO Box 93374, 2509 AJ Den Haag

Telephone: (+31) - (0)70 - 888 85 00

Website: https://autoriteitpersoonsgegevens.nl

19. Updates to This Policy

Practi may update this Privacy Policy from time to time to reflect operational, technology, or legal changes. The latest version will always be published on our online platforms with the updated effective date.

20. Contact Us

For questions or privacy requests regarding this Privacy Policy or Practi's data practices, please contact: