Privacy Policy

Privacy Policy

This privacy policy explains how mukaabevents.com (“the Website”), operated by The Vanderbilt Portfolio AG (“the Publisher,” “we,” “us,” or “our”), collects, uses, stores, and protects information from visitors (“you” or “users”). This policy applies to all visitors to the Website regardless of geographic location, and addresses obligations under applicable data protection regulations including the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR) where applicable, and other relevant privacy laws.

Data Controller

The data controller for information collected through mukaabevents.com is:

The Vanderbilt Portfolio AG Mukaab Events Editorial Office Riyadh, Kingdom of Saudi Arabia

For privacy-related inquiries: privacy@mukaabevents.com

Information We Collect

Analytics data. We collect anonymous usage data through Google Analytics to understand traffic patterns, popular content, geographic distribution of visitors, device types, browser information, referral sources, and user behavior patterns (pages per session, time on page, bounce rate). Google Analytics uses cookies and similar technologies to collect this data. Analytics data does not include personally identifiable information unless you voluntarily provide it.

Google Analytics data collection includes pages visited and navigation patterns, time spent on individual articles and sections, traffic sources (search engines, direct navigation, referral links, social media), device type (desktop, mobile, tablet) and browser information, geographic region (country and city level, derived from IP address), and session-level behavior metrics.

Advertising data. Google AdSense operates on the Website to serve relevant advertisements. Google AdSense may use cookies and similar tracking technologies to collect browsing behavior data across websites you visit, enabling the delivery of personalized advertisements based on your browsing history and interests. The data Google AdSense collects is governed by Google’s privacy policies and your Google account settings.

Contact form data. If you voluntarily provide personal information through contact forms (editorial inquiries, data corrections, partnership requests, press inquiries), we collect the information you provide, which may include your name, email address, professional affiliation, and the content of your message. Contact form submissions are used solely for the purpose of responding to your inquiry and any resulting correspondence.

No registration requirement. Mukaab Events does not require user registration to access published content. We do not collect user accounts, passwords, or profile information. All published content is freely accessible without login barriers.

Legal Basis for Data Processing

Under the GDPR (where applicable), our legal bases for processing personal data are:

Legitimate interest for analytics data collection — we have a legitimate interest in understanding how visitors use the Website to improve content quality, user experience, and editorial decision-making. This processing is proportionate and does not override your rights and freedoms.

Consent for advertising cookies — personalized advertising through Google AdSense requires your consent, obtained through our cookie consent mechanism. You may withdraw consent at any time through your browser settings or our cookie preferences.

Performance of a contract or pre-contractual measures for contact form data — when you submit an inquiry, we process your information to respond to your request.

How We Use Information

Analytics data is used to understand content performance across the Website’s sections (industry analysis, venue profiles, conference intelligence, technology, planning guides, dashboards, comparisons, encyclopedia, and intelligence briefs), identify the most valuable content for event industry professionals, optimize website performance and user experience, make editorial decisions about content development priorities, and generate aggregate statistics for internal reporting.

Contact form data is used exclusively to respond to your specific inquiry and manage any resulting correspondence. We do not use contact form data for marketing purposes, sell contact information to third parties, or add contact form submissions to marketing databases.

Data Sharing

We do not sell, rent, or trade personal data to third parties. Data is shared only in the following circumstances:

Google Analytics. Analytics data is shared with Google as part of the Google Analytics service. Google’s use of this data is governed by Google’s privacy policy and data processing terms.

Google AdSense. Advertising-related data is shared with Google as part of the AdSense service. Google’s use of this data is governed by Google’s advertising privacy policies.

Legal requirements. We may disclose information if required by law, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of the Publisher, users, or others.

Cookies

This Website uses cookies as described in our cookie policy. Categories include essential cookies for website functionality, Google Analytics cookies for usage data collection, and Google AdSense cookies for advertising delivery. You can manage cookie preferences through your browser settings or our cookie consent mechanism.

Data Retention

Analytics data is retained according to Google Analytics’ standard retention settings (currently 26 months by default). We do not maintain separate copies of analytics data beyond Google’s retention period.

Contact form submissions are retained for the duration of any resulting correspondence plus one year after the last communication. After the retention period, contact form data is deleted from our systems.

Server logs containing IP addresses and access information are retained for 30 days for security monitoring and then automatically deleted.

Your Rights

Under applicable data protection laws (including GDPR where applicable and Swiss FADP), you have the following rights regarding your personal data:

Right of access. You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data.

Right of rectification. You have the right to request correction of inaccurate personal data we hold about you.

Right of erasure. You have the right to request deletion of your personal data, subject to legal retention requirements and our legitimate interests.

Right to restrict processing. You have the right to request restriction of processing of your personal data in certain circumstances.

Right to data portability. You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to object. You have the right to object to processing of your personal data based on legitimate interests, including processing for analytics purposes.

Right to withdraw consent. Where processing is based on consent (advertising cookies), you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, contact privacy@mukaabevents.com. We will respond to valid requests within 30 days. We may request identity verification before processing rights requests to protect against unauthorized access.

International Data Transfers

Analytics and advertising data may be transferred to Google’s servers, which may be located outside Switzerland and the European Economic Area. Google’s data processing agreements include appropriate safeguards for international transfers, including Standard Contractual Clauses and adherence to applicable transfer mechanisms.

Children’s Privacy

Mukaab Events is designed for event industry professionals and does not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption for all Website traffic, access controls for editorial and administrative systems, and regular review of data processing practices.

Changes to This Policy

We may update this privacy policy to reflect changes in our data practices, legal requirements, or operational procedures. Material changes will be indicated by updating the “Last updated” date. Continued use of the Website after policy changes constitutes acceptance of the revised policy.

Contact for Privacy Inquiries

For privacy-related inquiries, data subject access requests, or complaints: privacy@mukaabevents.com

For general inquiries: info@mukaabevents.com — see our contact page

For our data collection methodology: see our methodology page

Compliance Framework

This privacy policy is designed to comply with the following data protection frameworks where applicable:

Swiss Federal Act on Data Protection (FADP). As a Swiss-registered entity, The Vanderbilt Portfolio AG complies with Switzerland’s federal data protection law, including requirements for transparent data processing, purpose limitation, data minimization, and individual rights.

EU General Data Protection Regulation (GDPR). Where our content is accessed by users in the European Economic Area, we comply with GDPR requirements including lawful basis for processing, data subject rights, data protection impact assessments where required, and appropriate safeguards for international data transfers.

Saudi Arabia Personal Data Protection Law (PDPL). As a publication covering Saudi Arabia’s events industry with an editorial office in Riyadh, we are mindful of Saudi Arabia’s evolving data protection regulations and their application to digital content platforms.

Cookie Consent Implementation

Our cookie consent mechanism complies with the ePrivacy Directive requirements applicable in the European Economic Area. The mechanism presents clear information about cookie categories (essential, analytics, advertising) and allows users to accept or decline non-essential cookies before they are set. Consent records are stored in a first-party cookie and respected on subsequent visits. Users can modify their consent at any time by clearing browser cookies and revisiting the website.

For detailed information about specific cookies, their purposes, and durations, see our Cookie Policy.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in compliance with GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay, providing information about the nature of the breach, the categories and approximate number of data records concerned, the likely consequences, and the measures taken to address the breach.

Our incident response procedures include immediate containment and assessment, root cause analysis, supervisory authority notification where required, affected individual notification where required, remediation of vulnerabilities, and post-incident review to prevent recurrence.

Third-Party Data Processors

Google LLC serves as our primary third-party data processor through Google Analytics and Google AdSense services. Google processes data in accordance with its Data Processing Amendment, which includes Standard Contractual Clauses for international data transfers and technical and organizational security measures appropriate to the nature and purpose of the processing.

We do not engage additional third-party data processors beyond Google’s analytics and advertising services. Our website hosting infrastructure processes access logs containing IP addresses and request metadata, retained for 30 days for security monitoring purposes.

Automated Decision-Making

Mukaab Events does not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on users. Google AdSense’s personalized advertising involves automated processing of browsing behavior to select relevant advertisements, but this processing does not produce legal or similarly significant effects — it determines advertisement selection only. You can opt out of personalized advertising through Google’s ad settings without any impact on your access to editorial content.

Data Protection Officer

For formal data protection inquiries, data subject access requests, or to exercise your rights under applicable data protection laws, contact: privacy@mukaabevents.com. We will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 days.

Privacy by Design

Mukaab Events applies privacy by design principles to our platform. We minimize data collection to what is necessary for our stated purposes (analytics for content improvement, advertising for platform sustainability, contact forms for inquiry response). We do not collect personal data beyond what is described in this policy. We do not require user registration, login credentials, or profile creation. We do not sell data to third parties. We do not build user profiles for non-advertising purposes. Our editorial content is freely accessible without personal data exchange.

These design choices reflect our commitment to providing professional-grade intelligence while respecting user privacy. Event industry professionals can access our market data, venue profiles, planning guides, technology references, and comparative analyses without surrendering personal information or accepting tracking beyond the analytics and advertising cookies described above.

Last updated March 25, 2026.