Privacy Notice for MWC Series App
(Last Updated 4 November 2025)
1. Who we are and what is the purpose of this privacy notice?
We are GSMA Ltd LLC, (“GSMA”, “we”, “us” or “our”), the organiser of MWC Event series and M360 series (“Event” or “Events“), with registered offices at 3445 Peachtree Road, Atlanta, Georgia 30326, United States of America.
This privacy notice (“Privacy Notice“) explains how we collect and process personal data of our MWC Series App (“App“) users.
GSMA Ltd LLC is the controller of your personal data under the EU General Data Protection Regulation (“GDPR”).
2. What categories of personal data do we collect and process about you?
We may process the following personal data about you:
- Profile Data: full name, company name, job title, job level, biography, area of responsibility, company’s industry type, contact details (including, country/region, city, website URL, Twitter/X profile URL);
- Photograph: an image you may upload to the App;
- Interests: your professional interests;
- Event Data: 鶹ӳ on past or upcoming MWC events you have signed up to as well as your favourite exhibitors, sessions and speakers, Pass type, QR code, and your notes;
- Networking Data: 鶹ӳ on your contacts, followers, messages, meetings, and attended events;
- Mobile Device Data: device IDs, IP address, device type and model, location, operating system name and version, screen resolution, country and language, carrier name, app and SDK versions;
- Mobile Analytics Data: 鶹ӳ on how often you use the App, the events that occur within the App, aggregated usage, performance data, where the App was downloaded from, time you spent within a particular screen or content, items and content you viewed or liked (e.g. sessions, exhibitors, companies).
3. For what purposes do we process your personal data?
We may process your personal data for the purposes described below. We also set out the categories of personal data that we process for each purpose and our lawful basis under GDPR for undertaking the processing purpose we have described
3.1. Provision of the App for Unregistered Users
- Description: You may use our App without a GSMA Global Events Account (i.e. as an unregistered user). In such case we will collect limited 鶹ӳ about you to provide the App.
- Data categories: Operating system of your mobile device.
- Lawful basis: Performance of a contract.
3.2. Provision of the App for Registered Users
- Description: Users who registered for one of our Events can create a GSMA Global Events Account in the App and get access to all functionalities of the App, e.g. networking, registration to Event sessions, or chat with other users of the App.
- Data categories: Profile Data; Photograph; Interests and Networking Data.
- Lawful basis: Performance of a contract.
3.3. Digital Access Pass
- Description: We may process your personal data to provide you with a Digital Access Pass that will allow you to enter the Event and different areas of the MWC or M360 Events you have signed up to.
- Data categories: Profile Data; Photograph and Event Data.
- Lawful basis: Performance of a contract.
3.4. Networking
- Description: Opting into networking allows you to connect and engage with attendees from a wide range of MWC and M360 Events. You may use networking features either in the MWC App or a web-based version.
- Data categories: Profile Data; Photograph; Interests and Networking Data.
- Lawful basis: Consent.
You can easily opt-out of networking in the MWC App settings.
3.5. Personalised Recommendations
- Description: We may provide you with personalised recommendations on speakers, sessions, exhibitors, networking profiles of attendees, and interests tags that may be relevant to you. If you allow us to collect and use your Mobile Device Data and Mobile Analytics Data, personalised recommendations will be more accurate and better tailored to your profile.
- Data categories: Profile Data; Interests; Event Data; Networking Data; Mobile Device Data and Mobile Analytics Data.
- Lawful basis: (i)Legitimate interests to provide you with personalised recommendations in the App; and (ii) consent for the collection and use of Mobile Device Data and Mobile Analytics Data.
3.6. LinkedIn
- Description: You may link your GSMA Global Events Account with your LinkedIn account. This will allow you to share content related to the Event on your LinkedIn profile. GSMA may also be sharing content on your LinkedIn profile. You will also be able to sign in to your GSMA Global Events Account with a LinkedIn account. We will not share any content through your LinkedIn account without your consent. For more 鶹ӳ on how LinkedIn may use your personal data (see .)
- Data categories: Email, LinkedIn ID and LinkedIn Token.
- Lawful basis: Consent.
3.7. Analytics
- Description: We may use your personal data to help us better understand the demographics, backgroundand interests of the App users. We will use this 鶹ӳ to create aggregated and statistical 鶹ӳ (which does not directly identify you) to support us with reporting on the performance of the App and to improve the App for better user experience. If you allow us to collect your Mobile Device Data and Mobile Analytics Data, we will use this 鶹ӳ to conduct more advanced and valuable analytics.
- Data categories: Profile Data; Interests; Networking Data; Event Data; Mobile Device Data and Mobile Analytics Data.
- Lawful basis: (i)Legitimate interests for analytical purposes; and (ii) consent for the collection and use of Mobile Device Data and Mobile Analytics Data.
3.8. Data Subjects’ Requests and Enquiries
- Description: If you submit a data subject request (such as a request for data access or erasure), an enquiry, a complaint, or report content in the App as illegal or in violation of our Mobile Application Terms and Conditions/End User License Agreement, we will process your personal data in order to respond to your request or complaint in accordance with applicable policies.
- Data categories: Profile Data and other data relevant to your request.
- Lawful basis: (i)compliance with legal obligations; (ii) for the establishment, exercise or defence of legal claims; and (iii) legitimate interests for processing your request and/or responding to your enquiry.
3.9. Technical Support
- Description: We may use your personal data to diagnose, troubleshoot, and fix issues with our App or services and keep the App secure.
- Data categories: Mobile Device data and data required for technical support & security purposes.
- Lawful basis: legitimate interests to carry out diagnose tasks and fixing technical issues with the App and connected services, ensuring security of our services and detecting malicious activities.
If you do not have a registered GSMA Global Events Account in our App and do not give us certain personal data, you can still have access to the basic functionalities in the App as unregistered user.
Consent
Where we process your personal data based on consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted on other lawful processing grounds.
Legitimate Interests
If we collect and use your personal data based on our legitimate interests (or of a third party), you may object to such processing. In that case we will no longer process your personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where we process your personal data for direct marketing purposes, you may object to such processing at any time.
4. Automated processing
We will not use your personal data to make a decision about you based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless it is necessary for a contract between us and you, is permitted by law or you have provided us with your consent for such processing.
5. How do we collect your personal data?
We collect your personal data when you download and use the App or when you log in to your GSMA Global Events Account. We may also collect your data when you communicate with us for example via emails.
- Directly from you, for example when you create or log in to your GSMA Global Events Account, add or amend data in your GSMA Global Events Account, use the App, subscribe for our marketing communications, sign up for our Events, communicate with us via email or other means.
- From third parties, for example social media (e.g. LinkedIn).
6. Who has access to your personal data?
We may share your personal data with the following recipients:
- Our agents, vendors, or service providers who perform functions on our behalf or provide services to us; for example, providers of registration, access control, security and venue services, IT service providers, accounting service providers or hosting service providers,
- Our partners and exhibitors when you, for example sign up for summits/conferences organised by our Event partners and sponsors, you provide your consent, or we otherwise have a lawful basis for sharing your personal data with them,
- Authorities where we are required to do so by law, or have other lawful basis to do so, for example for security reasons or in connection with criminal or regulatory investigations,
- Outside advisers, including legal counsels for the purpose of defence of legal claims, or regulatory proceedings,
- Our Affiliates for examplefor administrative purposes, group reporting, or provision of other services,
- Social media, if you decide to link your LinkedIn account with your GSMA Global Events Account or when you publish our content on your social media profiles,
- Other App users when you send messages or interact with other App users as part of networking,
- Other third parties as may be disclosed to you at the time of registration or detailed in the terms and conditions of the Event or App.
Please note that this list is non-exhaustive, and we may need to share your data with other parties to effectively deliver our services.
7. International data transfers
As we operate via a global network of corporate offices, booking and service centres, and data centres, it may be necessary to transfer your personal data internationally, i.e. outside of the country where it was originally collected or outside of your country of residence.
Where we transfer personal data that originates in the European Union (“EU”), the United Kingdom (“UK”) or Switzerland to a country outside the EU, the UK or Switzerland, we will ensure such transfer is made in accordance with applicable laws. We use a variety of legal mechanisms, including Standard Contractual Clauses adopted by the European Commission, to ensure your rights and protections travel with your data.
8. How long do we keep your personal data?
Your personal data will be deleted as follows:
- Data relating to your GSMA Global Events Account (except for data relating to networking) will be deleted if You (the GSMA Global Events Account holder) do not have at least one complete registration in the 12 months prior to the launch of the registration system for the next edition of MWC Barcelona happening November each year.
- Data relating to networking connected to a particular Event will be deleted after 9 months, following the last day of the Event you attended.
We may retain your other personal data for the duration of our legal relationship with you or to comply with applicable regulations (e.g. tax or accounting). You may contact us anytime if you want to know more about how long we will keep your data.
GSMA Global Events Account deletion
If you delete GSMA Global Events Account, we will permanently delete all records related to your account. Its removal also means that you will lose access to your pass to the Event, as well as access to the certain functionalities of the App. We will inform you when the deletion is completed.
9. Your rights as a data subject
Below you will find descriptions of rights that you may be able to exercise in relation to the personal data we process about you.
- Confirmation of processing – you can ask us to confirm if we are processing your personal data.
- Access – you can ask us to provide a copy of the personal data that we hold about you.
- Rectification – you can ask us to rectify the record of your personal data that we maintain.
- Restrict – you can ask us to restrict the processing of your personal data in certain situations.
- Object to processing – you can object to the processing of your personal data, where we process your data based on our legitimate interests or for direct marketing purposes.
- Deletion – you can ask us to delete some or all of the personal data that we hold about you.
- Portability – in certain circumstances, you can ask GSMA to provide you a copy of your personal data in a structured, electronic format, or to transmit it directly to another data controller, where technically feasible.
You have the right to contact the relevant data protection authority if you have concerns about how GSMA processes your personal data. Our lead data protection authority in the EU is the Agencia Española de Protección de Datos.
However, we encourage you to contact us directly in the first instance so that we can attempt to address your concerns directly.
For additional questions or 鶹ӳ concerning processing of your personal data or if you would like to exercise one of your rights, you can email us at dataprivacy@gsma.com.
10. Contact us
You can contact us with any enquiry relating to your personal data by filling out , sending an email to dataprivacy@gsma.com or writing to:
Data Privacy – Legal
GSMA Ltd LLC
1 Angel Lane
London, EC4R 3AB
United Kingdom.