The Thirty-Fifth General Conference of the General Arab Insurance Federation (GAIF35)
Effective Date: [DD/MM/YYYY]

The Jordan Insurance Federation (JIF), in its capacity as the organizer of the Thirty-Fifth General Conference of the General Arab Insurance Federation (GAIF35), is committed to protecting the privacy and security of the personal data of participants, guests, speakers, exhibitors, sponsors, and visitors to the Conference website.

This Privacy Policy explains how the Federation collects, processes, uses, retains, shares, and protects personal data when registering for the Conference, using the Conference website, participating in Conference activities, or communicating with the organizing team.

The Jordan Insurance Federation is the Data Controller of the personal data collected and processed for the purposes of organizing and managing the Conference, and is committed to processing such data in accordance with the provisions of the Jordan Personal Data Protection Law No. (24) of 2023 and the regulations and instructions issued pursuant thereto.

Before commencing the processing of any personal data, the Federation shall inform the data subject of the essential information relating to the processing of their personal data, including:

• The nature and categories of the personal data to be collected and processed.
• The purpose of processing the personal data.
• The legal basis for processing the personal data.
• The retention period of the personal data or the criteria used to determine such period.
• The entities or categories of entities with whom the personal data may be shared.
• The rights of the data subject relating to their personal data.
• The available means of communication for exercising rights or submitting complaints.

This information shall be provided in a clear and understandable manner before or at the time personal data is collected, in accordance with the provisions of the Jordan Personal Data Protection Law No. (24) of 2023.

Depending on the nature of the requested services and participation in the Conference, the Federation may collect the following categories of personal data:

Identification and Contact Information:

• Full name.
• Job title.
• Company or organization name.
• Country and city.
• Email address.
• Mobile phone number.

Registration and Participation Information:

• Conference registration information.
• Participation category.
• Attendance information.
• Participant badge and access information.

Travel and Logistical Information:

Where necessary:

• Passport number.
• Visa information.
• Accommodation information.
• Transportation and travel information.

Payment Information:

• Payment information necessary to complete registration or Conference-related services may be collected.
• Payments are processed through authorized and secure payment service providers, and the Federation may receive transaction status information and payment references for registration management purposes, without accessing or storing payment card information.

Optional Additional Information:

The Federation may collect information voluntarily provided by the participant, such as:

• Special dietary requirements (such as dietary restrictions or food allergies).
• Accessibility requirements or mobility assistance.
• Communication preferences selected by the participant.
• Information provided through registration forms or contact requests. 

Certain personal data may require additional protection depending on its nature and the purpose of its processing.

Examples of data that may require additional protection include:

• Passport and visa information.
• Travel and accommodation information.
• Health information or participants' accessibility requirements.
• Financial information related to payment transactions.

When processing any sensitive personal data in accordance with the law, the Federation shall:

• Restrict access to such data to authorized persons only.
• Use the data solely for the purposes for which it was collected.
• Implement appropriate technical, organizational, and security measures.
• Prevent unauthorized disclosure or use of the data.

Certain data is required to complete the registration process, provide Conference services, and manage participation.

During the data collection process, participants will be informed of:

• The type of data requested.
• The purpose for which it is collected.
• Whether providing the data is mandatory or optional.
• The consequences of failing to provide the required data

The Federation processes personal data solely for purposes related to the organization and management of the Conference, including:

Conference Management and Registration:

• Processing registration requests.
• Issuing participant badges and access credentials.
• Managing attendance and participation.

Financial and Administrative Operations:

• Processing registration fees.
• Issuing invoices and receipts.
• Maintaining financial records in accordance with legal requirements.

Logistical Services:

• Arranging accommodation.
• Organizing transportation.
• Processing visa procedures where necessary.

Communication and Support:

• Sending Conference updates.
• Responding to inquiries.
• Providing technical and organizational support.

Reporting and Analysis:

Preparing statistical and analytical reports necessary for evaluating and organizing Conference activities, using aggregated or anonymized data whenever possible, in a manner that ensures that the identity of data subjects cannot be determined when preparing such reports.

Marketing and Future Communications:

Contact information may be used to send:

• Newsletters.
• Invitations to upcoming events.
• Training programs.
• Federation news.

Only after obtaining the participant's explicit and separate consent for this purpose. Refusal to subscribe to marketing communications shall not affect registration for or participation in the Conference.

The Federation processes personal data based on one of the following legal bases:

• Obtaining the explicit, prior, specific, and documented consent of the data subject.
• Performing the services and procedures required for registration and participation in the Conference.
• Compliance with legal and regulatory requirements.
• Any other cases permitted under the Jordan Personal Data Protection Law No. (24) of 2023.

Where the processing is based on the consent of the data subject, the data subject has the right to withdraw such consent at any time. The withdrawal of consent shall not affect the lawfulness of any processing carried out prior to the date of withdrawal or any processing based on another legal basis permitted by law.

The Jordan Insurance Federation is committed to ensuring that any consent obtained from the data subject complies with the applicable legal requirements and is:

• Explicit, clear, and understandable.
• Specific and directed to one or more identified processing purposes.
• Given freely and without coercion or misleading practices.
• Documented and capable of being demonstrated in accordance with the approved procedures.

The Federation also undertakes to distinguish between the consents necessary for completing Conference registration and any other optional consents, including consent to receive newsletters or marketing communications, to ensure that each consent is independent and specific to the purpose for which it has been granted.

The Jordan Insurance Federation is committed not to sell, lease, trade, or disclose personal data to any third party except to the extent required for the purposes of organizing and managing the Conference, fulfilling legal and regulatory obligations, or in cases permitted by law.

First: Processors

The Federation may engage third parties to process personal data on its behalf in order to provide certain operational services necessary for organizing the Conference, including:

• Electronic registration platforms and systems.
• Website hosting service providers.
• Cloud service providers.
• Electronic payment service providers.
• Hotels, transportation providers, and logistics service providers.

These entities act as Processors under binding contractual data processing agreements that comply with the provisions of the Jordan Personal Data Protection Law No. (24) of 2023, including, but not limited to:

• Defining the scope, nature, and purposes of the processing of personal data.
• Specifying the period for processing and retaining personal data.
• Identifying the categories of personal data being processed.
• Maintaining the confidentiality of personal data and preventing its disclosure to unauthorized persons.
• Implementing appropriate technical and organizational measures to protect personal data.
• Restricting the use of personal data to the purposes specified in the data processing agreement and prohibiting its use or disclosure for any other purpose without a legal basis or, where required, the consent of the data subject.

Second: Governmental and Official Authorities

Personal data may be shared with competent governmental or official authorities whenever necessary to comply with applicable laws, regulations, and instructions, or to complete official procedures related to the Conference, including visa issuance procedures, security requirements, or any other regulatory requirements imposed by the competent authorities.

Due to the international nature of the Conference and the use of certain technical or operational services, personal data may be transferred, stored, or processed outside the Hashemite Kingdom of Jordan.

Before carrying out any cross-border transfer of personal data, the Federation shall take appropriate measures, including:

• Assessing the level of protection provided by the receiving party.
• Implementing appropriate contractual safeguards.
• Applying the necessary technical, organizational, and security measures.

This shall be carried out in accordance with the provisions of the Jordan Personal Data Protection Law No. (24) of 2023.

The Conference may include photography, audio recording, or video recording for the purposes of:

• Documentation.
• Media coverage.
• Archiving.
• Promoting future events.
• Participants will be informed that photography and recording may take place during the Conference.

Participants who do not wish their photographs or recordings to be used may notify the organizing team, and reasonable efforts will be made to accommodate such requests.

The Federation implements appropriate technical and organizational measures to protect personal data against:

• Unauthorized access.
• Loss or damage.
• Unlawful modification.
• Unauthorized disclosure.

The security measures include:

• Access rights management.
• Confidentiality obligations.
• Technical protection of systems.
• Secure backups.
• Monitoring of security incidents.
• Regular review of security procedures.

In the event of a security breach affecting the confidentiality, integrity, or availability of personal data, the Federation shall:

• Assess and investigate the incident.
• Take the necessary corrective actions.
• Notify the competent authorities when required.
• Notify the affected individuals when the applicable legal requirements apply.

The Conference website uses cookies to improve the user experience. Users can control cookie settings through their browser.

These may include:

Necessary Cookies:

Used to operate the website and provide essential functions.

Analytical Cookies:

Used to analyze website usage and improve performance.

Marketing Cookies:

Used only after obtaining the necessary consent.

The Conference is a professional event intended for individuals aged 18 years and above. The Federation does not intentionally collect personal data from individuals below this age.

The Jordan Insurance Federation retains personal data only for the period necessary to achieve the purposes for which it was collected, or to comply with applicable legal and regulatory obligations.

• Registration data shall be retained until the completion of the Conference activities and fulfillment of all relevant regulatory and administrative requirements.
• Financial data and invoices shall be retained in accordance with the periods required by applicable financial and accounting laws and regulations.
• Marketing data shall be retained until the data subject withdraws their consent or requests the cessation of using their data for marketing purposes, unless there is another legal basis permitting its retention.
• Communication requests and inquiries shall be retained for the period necessary to process the requests, resolve any related matters, and improve service quality where applicable.
• Passport and visa data shall be retained only for the period necessary to achieve the purpose for which it was collected, such as completing travel procedures or issuing visas, and shall then be deleted or securely destroyed unless the law requires a longer retention period.

After the retention period expires, the data shall be securely deleted or anonymized.

Participants have the right to:

• Request access to their personal data.
• Request correction of inaccurate data.
• Request deletion of data in accordance with legal provisions.
• Request restriction of processing.
• Object to certain processing activities.
• Withdraw consent.
• Request data portability where applicable.
• Be informed of any security breach affecting their data.
• Object to Profiling activities where applicable.
• Submit a complaint to the competent authority. 

Data subjects may submit requests to exercise their rights or complaints related to the processing of their data through the contact details provided in this policy. The Federation may request information to verify the identity of the requester. Requests shall be handled in accordance with internal procedures and legal requirements.

The Federation does not use personal data related to the Conference to make automated decisions or conduct profiling activities that significantly affect participants.

If any such processing is introduced in the future, data subjects will be informed and the necessary legal requirements will be applied.

The Conference website may contain links to external websites such as:

• Hotels.
• Service providers.
• Payment platforms.

The Federation is not responsible for the privacy policies of these websites.

This Privacy Policy shall be governed by the laws of the Hashemite Kingdom of Jordan, particularly the Personal Data Protection Law No. (24) of 2023.

The Federation reserves the right to update this policy whenever required due to operational, regulatory, or legal needs. The updated version shall be published on the Conference website along with the updated effective date.

For any inquiries or requests related to privacy or the exercise of personal data rights:

Personal Data Protection Officer / Privacy Officer
Jordan Insurance Federation (JIF)
Email:GAIF2026Registration@JIF.jo

Please include the following information when submitting any request related to personal data: