Privacy Policy for Storyblok Events

Storyblok (Storyblok GmbH and its affiliates, hereinafter “we”, “our”, “us”) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data you provide to us or we collect when registering for or participating in our events. 

1. Who We Are 

We are providing a SaaS CMS solution and organizing events relevant to our services. Find more about Storyblok and our services here. Our registered address is:

Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria

If you have questions regarding your data or this policy write us here: legal@storyblok.com

We act as the data controller (as defined by General Data Protection Regulation (EU) 2016/679 (“GDPR”)) or "business" (as defined in California law) of your personal data.

2. Data We Collect 

Registration Data

When you register as a participant for an event via our event website, we collect the following data:

  • First name and last name
  • Email address
  • Company name
  • Country
  • Business role
  • How you heard about our event (e.g., referral, social media, advertisement)

For speakers who register to speak at our events, we collect:

  • First name and last name
  • Email address
  • Job title
  • Company name
  • LinkedIn profile link
  • Session title and session description
  • Optional: Name(s) of co-speaker(s)

Providing personal data for event registration is voluntary. However, failure to provide the required information may result in your inability to register or participate in the event.

Enrichment Services

We may also use data enrichment services to obtain publicly available or licensed third-party data about you or your company, such as:

  • Company size, industry, location
  • Your professional title or public profiles (e.g., LinkedIn)
  • Business contact details

These data sources may include public websites, professional social networks, and commercial data providers.

Automatically Collected Data & Cookies

We also automatically collect technical data when you visit our website (see section Cookie Notice at the bottom of our website).

Photography and Recordings at our Events

We'll take pictures and video recordings at our events. Please see Section 3 below for more details.

3. Photography and Recordings at Events 

Please be aware that we may take photographs and/or video recordings during our events. We base this processing of data on our legitimate interest for documentation and promotional purposes (e.g., website, social media, presentations). Close-up or detailed individually identifiable images or recordings will be processed based on your consent.

If you do not wish to be photographed or recorded, please inform event staff and/or photographers. 

Where asked for your consent (e.g. close-up or detailed individually identifiable images) You may withdraw consent at any time, which will apply to future use. Previously lawful uses will remain valid in such case.

4. How We Use Your Data 

We process your personal data for the following purposes:

Your Registration data as participant or speaker:

  • To manage your event registration and participation and coordinate sessions
  • To send event-related communications (confirmation, updates, follow-ups)
  • To enrich your profile to tailor event content and networking opportunities
  • For business development and marketing of our products if you agreed to that in the sign-up process
  • To improve our events and services

Photo and video recordings:

  • Event documentation
  • Marketing and promotional use (e.g., website, social media, presentations)

We do not use your personal data for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

5. Legal Basis for Processing 

Under GDPR, our lawful bases for processing of Your data are:

  • Consent: Processing of your data is based on your consent where we ask for it (e.g. consent to receive marketing communication; consent to use photo and video recordings detailing You in particular)
  • Contractual necessity: We process the sign-up information to allow us fulfill the agreement between You and us enabling your participation in the event, our hosting of the event, and managing your event registration and participation
  • Legitimate interests: We base processing of general photos and video recordings, enrichment on our legitimate interest to improve event relevance and business outreach
  • Legal obligations: Where necessary to comply with applicable laws

6. Data Sharing and Transfers 

First of all, we do not sell your personal data.

We may share your data with:

  • Event partners (only where you provided consent) who may contact you about their products and services. A list of event sponsors can be found on our website. These sponsors act as independent data controllers and are responsible for their own compliance with data protection laws. You may consent when signing up on our website or our event partners may ask you to scan QR codes on your participant badges using the event app; in such case your registration information will be shared with that partner.
  • Service providers (e.g., email platforms, database providers, data enrichment services, event management software and apps, event management contractors etc) we need to manage our business, our business relationship and to host the event.
  • Affiliates of the Storyblok group supporting events and marketing avtivites
  • Legal authorities when required by law

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

7. Data Retention 

We retain your data only as long as necessary for the purposes described in this policy, or to comply with legal obligations. Typically, this means:

  • Event registration data: up to 24 months after the event. This allows us to provide post-event communications, manage participation records, analyze attendance trends, and improve future events.
  • Event photos and video recordings may be retained for as long as they are relevant for the purposes for which they were collected, such as documentation and promotional use. If you withdraw your consent to the use of a specific identifiable image or video, we will cease using it in new materials but may retain it in previously published content that was lawfully created before consent was withdrawn.
  • Storyblok marketing communication data: until you withdraw consent or object to processing. You can unsubscribe at any time using the link provided in our emails or by contacting us directly. 
  • Event Sponsor marketing communication: Where you have given separate consent, we may also share your contact details with named event sponsors so they can send you marketing communications. You can withdraw this consent at any time, and we will inform the sponsors of your withdrawal. However, you may also need to contact them directly to exercise your rights, as they are independent controllers. We will not discriminate against you for exercising these rights.

8. Your Rights

You have the following rights:

  • Access: Request a copy of your personal data from us
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we use your data
  • Data portability: Receive your data in a portable format
  • Objection: Object to processing based on our legitimate interests
  • Withdraw consent: At any time, without affecting prior processing
  • Lodge a complaint: With a competent supervisory authority

To exercise your rights, contact us at: legal@storyblok.com. We may ask you to provide additional information necessary to confirm your identity before we can process your request. This is to ensure that we do not disclose personal data to anyone who does not have the right to receive it. We process such identification data only for the purpose of verifying your identity. 

9. Security Measures 

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Find more information on the security measures implemented by Storyblok in our Trust Center.

10. Automatically Collected Data

When you visit our website, we collect certain technical data using cookies and similar technologies, such as. We collect such data to ensure website functionality and security, analytics and performance optimization and/or Marketing and advertising (where permitted).

You can manage or withdraw cookie consent for optional cookies at any time via our cookie banner at the bottom of our website or browser settings.

11. Contact Us 

If you have any questions or concerns about this policy or your data, please contact us:

Email: legal@storyblok.com

Address: Storyblok GmbH, Peter-Behrens-Platz 12, 4020 Linz, Austria

Data Protection Officer: dpo@storyblok.com

Under California's Shine the Light law, Cal. Civ. Code § 1798.83, California residents have the right to request and obtain, once per year, information regarding Storyblok’s disclosure of personal information to third parties for their own direct marketing purposes. To request a list of the categories of information Storyblok has shared, and the names and addresses of such third parties, please send your request to: legal@storyblok.com