Data processing agreement

The service provider's legal details are missing. The superadmin fills them in under Administration → Settings → Legal details.

Version 2026-10

1. Parties

Controller: the client that holds an account on the platform, which decides why and how the data of the people who join its webinars and meetings is processed.

Processor: Conecta Meet, provider of the Conecta Meet platform.

The client accepts this agreement when creating an account or from its panel, and it is part of the terms of use of the service. It applies for as long as the client uses the platform.

2. Subject matter and nature of the processing

The processor provides the client with a platform to hold webinars and video meetings: registration and access of participants, live audio, video and chat, attendance records, emails related to the events and, when the client enables them, recordings.

• Data subjects: the people who register for or join the client's events (attendees, guests and co-hosts) and the client's own staff who use the panel.
• Categories of data: identification and contact data (name, email), connection data (join and leave times, time connected, technical data needed for the connection), image and voice transmitted live, chat messages and, if the client records, the recordings.
• Special categories: the platform does not ask for them, but what is said in an event may reveal them (for example, health data). The client is responsible for having a legal basis for this and for informing the data subjects.

3. Obligations of the processor

• Process the data only to provide the service and following the client's documented instructions, which are this agreement and the settings the client chooses in its panel. If an instruction seems contrary to data protection law, it will inform the client.
• Ensure that the people authorised to process the data have committed to confidentiality.
• Apply appropriate technical and organisational security measures (Art. 32 GDPR), described on the security page.
• Use only the sub-processors listed below. The client gives a general authorisation for them; any addition or replacement will be notified in advance so that the client can object and, if it does, terminate the service.
• Help the client, as far as possible, to respond to requests from data subjects (access, rectification, erasure, objection, restriction and portability). The panel lets the client export and delete attendance data.
• Help the client to meet its obligations on security, notification of data breaches, impact assessments and prior consultation (Arts. 32 to 36 GDPR).
• Notify the client of any personal data breach without undue delay and, in any case, within 48 hours of becoming aware of it, with the information available.
• When the service ends, delete the client's personal data, after allowing the client to download it, unless the law requires it to be kept.
• Make available to the client the information needed to demonstrate compliance and allow reasonable audits or inspections, with prior notice.

4. Obligations of the client

• Have a legal basis for the processing and inform the people who join its events, including when it records.
• Configure the service in accordance with its obligations (recordings, retention, who it invites).
• Keep its access credentials safe; enabling two-step verification is recommended.

5. Sub-processors

6. Retention

Attendance data is deleted automatically after the retention period configured on the platform. Recordings are kept for the time included in the client's plan, or until the client deletes them.