Sourcing Social / Your information

Privacy & cookies

A notice for applicants, guests and attendees, including optional LinkedIn sign-in.

Effective 2026-10-09 · Version 2026-10-09

Who is responsible

Fruition Resources Limited is the organiser and controller of personal data used to run Sourcing Social. Postal contact: Bray Business Park, Southern Cross Rd, Bray, Co. Wicklow, A98 Y6W0, Ireland. For privacy questions, corrections, withdrawal or rights requests, contact dataprotection@fruitiongroup.ie.

RapidReg supplies the event website, registration, approval and ticketing platform for the organiser. This notice concerns this event service. Applying here is not a job application and does not, by itself, authorise use of your details for recruitment marketing.

Information we collect and where it comes from

  • From applicants: first and last name, work email, company, job title and professional role area. Optional information includes a LinkedIn profile URL, a question for the speakers and a preference for future-event emails.
  • From the person inviting a guest: the guest’s name, email, company, position and optional LinkedIn URL, plus the inviter’s email and confirmation that the guest agreed to the submission. We tell the guest why we have their information in the acknowledgement email.
  • From optional LinkedIn sign-in: the identity identifier, name, email and basic profile information LinkedIn releases under the sign-in permission, which may include a profile image. We use name and email to help fill the form. We do not obtain your LinkedIn password, connections, messages or permission to post.
  • From running the service: application and review timestamps, the decision and reviewer, policy acknowledgements, email delivery records, and—after approval—ticket identifiers and any event check-in record. Security processing uses request/device information and a pseudonymous request fingerprint to limit abuse.

Required fields are marked with an asterisk. We cannot process an application without its required information. LinkedIn sign-in, a profile URL, a speaker question, marketing and bringing a guest are optional. Do not include CVs, special-category information or confidential information about other people in the question field.

Why we use it and the legal bases

  • Your application and attendance: taking the steps you request before an event attendance arrangement and administering that arrangement (Article 6(1)(b) GDPR). This covers acknowledgement, review, ticket delivery and necessary changes to the event.
  • Guest invitations and event security: our legitimate interests in managing requested professional invitations, preventing duplicate or abusive submissions, controlling admission and resolving queries (Article 6(1)(f)). We limit use to these purposes and consider the individual’s rights. Guests can object or decline.
  • Future-event emails: your separate, optional consent (Article 6(1)(a), together with the Irish ePrivacy rules). Refusing or withdrawing this choice does not affect admission. We do not treat a guest submission as the guest’s marketing consent.
  • Legal duties and disputes: compliance with a specific legal obligation where one applies (Article 6(1)(c)), or our legitimate interests in establishing, exercising or defending legal claims (Article 6(1)(f)).

The required checkbox records agreement to attendance terms and acknowledgement of this notice. It is not a blanket consent to all processing. The event team reviews eligibility; this application flow does not make solely automated decisions with legal or similarly significant effects.

Who can access the information

Authorised event organisers and RapidReg support administrators may access records where needed for event operations and support. The platform uses Supabase for its database, authentication and storage; Cloudflare for website hosting, routing and security; and Mailgun for sending event emails and delivery reporting. The email service is configured for Mailgun’s EU region.

LinkedIn receives a sign-in request only if you choose its sign-in button, and handles its own service under its privacy policy. External professional or community links open a separate service; they do not automatically add you to a group.

The registration workflow does not publish applicant details as a public attendee directory or automatically send a delegate list to speakers or sponsors. Information may be disclosed if a lawful requirement applies. Any separate networking or lead-sharing feature requires its own clear explanation before use.

Processing locations and safeguards

Service providers and their support teams or subprocessors may operate outside the European Economic Area. Selecting an EU email region does not mean that every provider operation takes place only in the EEA. Where a restricted transfer occurs, it must use an applicable adequacy decision or an appropriate safeguard, such as the European Commission’s Standard Contractual Clauses, with any additional measures required for that transfer.

Provider processing terms are available from Supabase, Cloudflare and Mailgun. Contact dataprotection@fruitiongroup.ie for information about the safeguards applicable to your event data and how to obtain a copy.

Retention

Event records are kept while an application, attendance arrangement, follow-up query or related complaint needs to be handled. Afterwards, the organiser reviews whether there is a documented legal obligation or outstanding claim requiring continued retention and deletes or anonymises identifiable records that are no longer needed. A future-event mailing preference is separate from an event application and can be withdrawn at any time.

Contact dataprotection@fruitiongroup.ie for the applicable retention period for your record. Minimal suppression details may be retained to honour an opt-out. This notice does not describe an automatic deletion feature.

Your rights and choices

Subject to the conditions in the GDPR, you can request access, correction, erasure or restriction of your data, and portability where applicable. You may object to processing based on legitimate interests. You may object to direct marketing at any time and withdraw consent as easily as you gave it, without affecting the lawfulness of processing before withdrawal.

Send requests or withdraw event-update permission by emailing dataprotection@fruitiongroup.ie. Marketing messages must also provide an opt-out route. Requesting a privacy notice or declining marketing does not cost anything or affect eligibility. We may need proportionate information to verify a request, and will respond within one month, unless a lawful extension applies and is explained.

You can complain directly to Ireland’s Data Protection Commission or another competent supervisory authority. You do not have to contact us first.

Cookies, browser storage and external content

This landing page does not install advertising or analytics tags. Fonts are hosted with the website. Essential request/security processing still takes place when pages load.

If you choose LinkedIn sign-in, Supabase stores sign-in session information and a temporary PKCE verifier in this site’s browser storage. This supports the sign-in you request and is not an advertising cookie. The local session is cleared after successful application submission; you can also choose “Use the form without LinkedIn” or clear this site’s stored browser data. LinkedIn may use its own cookies on its sign-in pages.

No optional tracking is made necessary by the terms checkbox. If analytics, advertising pixels, embedded third-party media or other optional tracking are introduced, the organiser must explain them and obtain any required prior consent, with an equally accessible way to refuse or withdraw it.

Security, updates and accessibility

The service uses encrypted connections and role-based access to event records. Keep ticket and portal links private, and tell hello@mail.fruitiongroup.ie if a message appears suspicious or a ticket link is exposed. No service can guarantee absolute security.

These pages and the registration form are designed for keyboard access and responsive reading. Contact the organiser if you need the information or application process in another format. Material changes to how data is used require an updated notice and any further steps the law requires.