Privacy Policy

The data controller of your personal data is the company PEAKSTART SOLUTIONS SRL, currently located in Sen Jan 21, 38036, San Giovanni di Fassa - Sen Jan, REA TN-246452, VAT number 02740890229, e-mail address: hello@tothepeak.eu (hereinafter referred to as "Company" or "Controller").

The Company will process your personal data within the To The Peak event and related official side events, which will take place in Bolzano on the 9th, 10th and 11th of September 2026 (hereinafter the "To the Peak Event") in order to:

• allow users to browse the website. The processing of your personal data is based on the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR, ensuring the proper functioning and security of the website.
• allow the purchase of the ticket for the To The Peak event. The processing of your personal data is based on the performance of a contract pursuant to Article 6(1)(b) of the GDPR, allowing processing necessary for fulfilling a contract to which the data subject is a party. The purchase of tickets is carried out through the Clappit platform, provided by Bemils S.r.l., which acts as data processor pursuant to Article 28 of Regulation (EU) 2016/679, on behalf of the Controller. Personal data are processed by Bemils S.r.l. exclusively on documented instructions from the Controller and in accordance with the applicable data processing agreement. Within the platform, only the following personal data will be visible to other participants: (i) first name and last name; (ii) any additional information voluntarily provided by the user within their personal profile. The user remains fully responsible for the data shared in their profile and may modify or delete such information at any time.
• being part of To The Peak network by using the matching tool Knock produced by MetaEsse S.r.l. By accepting the terms and conditions you allow (i) the Controller to send communications related to the matching tool, including surveys, (ii) MetaEsse S.r.l., as Processor, to create an account in your name and thus use all the matching tool functionalities, such as contacting other network members, creating business and job opportunities (https://knock.zone). Within the scope of this data processing, the Controller may transfer personal data to the event sponsors, as specified in the section "Recipients of Data" of this Privacy Policy. The processing is based on your consent, pursuant to Article 6(1)(a) GDPR, and is subject to the user's explicit and specific consent; failure to give it will prevent you from being included in the To The Peak network. The personal data displayed within the matchmaking platform are accessible exclusively to other registered participants of the Event.
• For volunteers: being part of the To The Peak network of volunteers that supports in the planning and execution of the event. By being part of the volunteers network you accept to receive communication related to the onboarding and the overall volunteering role. The processing is based on the performance of a contract pursuant to Article 6(1)(b) GDPR.
• apply for a booth and be selected to obtain a place during the Event in the exhibition area. The processing is based on the performance of a contract pursuant to Article 6(1)(b) GDPR.
• apply for a spot to take part to the official side event "Mountain Hike" of To The Peak, taking place on 11.09.2026. The consent includes the processing of personal data for communication concerning the side event and related updates. The processing is based on your consent, pursuant to Article 6(1)(a) GDPR. Your consent is optional; failure to give it will prevent you from applying and joining the side event.
• receive commercial communications concerning the program and related updates for the edition of To The Peak 2026 before and after the event, including partner discounts and information about future editions. Within the scope of this data processing, the Controller may transfer personal data to the event sponsors. The processing is based on your consent, pursuant to Article 6(1)(a) GDPR. Your consent is optional; failure to give it will prevent you from receiving communications related to the To The Peak Event.
• if necessary, the Controller will process your personal data to establish, exercise, or defend a legal claim, whether in judicial, administrative, or extrajudicial proceedings, and/or to comply with legal obligations and requests from competent authorities. The processing is based on Article 6(1)(c) and (f) GDPR.

The Company will process the following personal data:

• IP number;
• depending on the section of the website https://www.tothepeak.eu/ on which the requested data is provided: name, surname, email address, phone number, information related to your job and education, and provided by you on the website.

The processing activities are directed towards the following categories of data subjects: event participants, volunteers.

The Controller will process your personal data through IT, with methods suitable to ensure their security and confidentiality in accordance with the provisions of the GDPR. Your personal data will be processed for the period strictly necessary to achieve the purposes of the To The Peak Event and in accordance with the Controller's data retention policies. Personal data will be retained for the following periods: data related to ticket purchase for the time necessary to comply with contractual and legal obligations; data processed for the matchmaking platform for a limited period related to the duration of the Event and subsequent networking activities; data processed for marketing or sponsor communication purposes until consent is withdrawn. At the end of the retention period, data will be deleted or anonymized.

The Controller may communicate your personal data to the following categories of subjects:

• authorized and duly trained personnel — including volunteers — of the Company, also regarding security measures and confidentiality obligations;
• third-party IT service providers (MetaEsse S.r.l.);
• network members operating on the matching tool Knock;
• ticketing services "Clappit platform" (Bemils S.r.l.);
• where applicable, third-party subjects participating in the To The Peak Event as sponsor;
• where applicable, subjects and authorities whose right to access personal data is expressly recognized by law or by measures issued by competent authorities.

The Controller will process your personal data within the European Union.

The data subject may exercise the rights set forth in Articles 7(3) and 15 to 22 of the GDPR by submitting the request directly to the Controller at: hello@tothepeak.eu. The Controller may request additional information necessary to verify the identity of the data subject before processing the request.

• Right of access (Art. 15 GDPR) — confirmation and access to personal data being processed.
• Right to rectification (Art. 16 GDPR) — correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR) — deletion of personal data, where the GDPR conditions are met.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR) — receive personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR).
• Right not to be subject to automated decision-making (Art. 22 GDPR).
• Right to lodge a complaint with the Data Protection Authority — in Italy, the Garante per la Protezione dei Dati Personali (garanteprivacy.it).
• Right to withdraw consent — where processing is based on consent, at any time and as easily as it was given.

The exercise of the rights as a data subject is free of charge, in accordance with Article 12 GDPR.