Legal
Jordan Data Protection Notice
1. Introduction
This page explains how Eventology handles personal data in accordance with Jordan's Personal Data Protection Law No. 24 of 2023 ("PDPL"), our home jurisdiction's data protection framework. It supplements our Privacy Policy.
2. Scope
The PDPL applies to the processing of personal data of natural persons in Jordan, regardless of where the data controller is located, and to data collected before or after the law took effect. As a Jordan-based company, we apply PDPL principles to the personal data we handle as both a website operator and an event technology service provider.
3. Consent
Where we rely on your consent to process personal data, we obtain it explicitly, document it, and ensure it is specific to the purpose and duration for which it is given, using clear and accessible language. If a processing purpose changes, we seek fresh consent where required.
4. Data Minimization and Retention
We collect only the personal data necessary for the stated purpose and do not retain it beyond the point where that purpose has been fulfilled, unless a specific Jordanian regulation requires otherwise.
5. Sensitive Data
The PDPL defines certain categories of data as sensitive, including data revealing health, physical or mental condition, and biometric data. Where our services involve processing sensitive data — for example, accessibility or dietary information collected for an event, or attendance data connected to medical professional credentials — we apply heightened protections consistent with the PDPL's requirements. See our CME/CPD Data & Attendance Policy for details specific to medical conference attendance data.
6. Cross-Border Data Transfers
Some of our service providers (including website analytics, content delivery and security tools such as Cloudflare, and advertising tools described in our Cookies Policy) process data outside Jordan. Consistent with the PDPL, we only transfer personal data outside Jordan where the destination provides an adequate level of protection, or where another basis recognized under the PDPL applies (such as your explicit informed consent).
7. Data Breach Notification
In the event of a personal data breach that could cause significant harm, we follow the PDPL's notification framework: notifying Jordan's Personal Data Protection Unit within 72 hours of discovery, and notifying affected individuals within 24 hours where the breach poses a risk to them.
8. Your Rights Under the PDPL
You have the right to access your personal data, request correction or erasure, withdraw consent, object to processing, request that decisions not be made about you based solely on automated processing, request that your data be transferred to another controller, and be notified of data breaches affecting you. To exercise these rights, contact us at [email protected]. If you are also located in, or connected to, the European Economic Area, see our GDPR Compliance page for the rights that additionally apply to you under GDPR.
9. Ongoing Compliance
Jordan's PDPL took effect on March 17, 2024, with a transition period for full compliance ending March 17, 2025. Eventology continues to develop and strengthen its data protection practices in line with the PDPL's requirements as our operations evolve.
10. Contact Us
Eventology
Amman, Jordan
Email: [email protected]
Phone: +962 77 725 3749