Privacy policy

Last updated: January 31, 2025

Data protection information on processing your data as part of our summit and side events under the umbrella of “INCENTIVIZE”

In this data protection notice we would like to inform you about the processing of your personal data in connection with the registration and visit to the “summit” organized by Talon.One GmbH (hereinafter: Talon.One).

I. Responsible person and data protection officer within the meaning of the GDPR

  • Responsible for data processing as part of the event is

    Talon.One GmbH
    Wiener Straße 10, 10999 Berlin 
    E-mail:  incentivize@talon.one

2. Our data protection officer can be reached via heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, E-Mail: privacy@talon.one.

We expressly point out that when you use this email address, the content will not only be acknowledged by our data protection officer. If you would like to exchange confidential information, you should first request to contact the data protection officer directly via this email address. Further information about your data subject rights can be found in Section IV.

II. Type, scope and purposes of data processing, legal basis and storage period

Below we would like to provide you with information about which data we process, for what purposes, on what legal basis and how long this data is stored.

Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and no legal obligations to retain data conflict with the deletion. If the data are not deleted because they are required for other and legally permissible purposes, their processing is restricted, i.e. the data are blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

1. Data processing when registering for the event through our website 
1.1 Informative use of our website
During the informative use of the website, i.e. when site visitors do not separately transmit information to us, we collect the personal data that the browser transmits to our server in order to ensure the stability and security of our website. This is our legitimate interest, so that the legal basis is Art. 6 para. 1 s. 1 lit. f GDPR.

These data are:

  • IP address

  • Date and time of the request

  • Time zone difference to Greenwich Mean Time (GMT)

  • Content of the request (specific page)

  • Access status/HTTP status code

  • Amount of data transferred in each case

  • Website from which the request comes

  • Browser

  • Operating system and its interface

  • Language and version of the browser software.

This data is also stored in log files. They are deleted when their storage is no longer necessary, at the latest after 14 days.

1.2. Web hosting and provision of the website
Our website is hosted by Cvent, Inc., 1765 Greensboro Station Place, Suite 700, Tysons Corner, Virginia 22102. In doing so, the provider processes the personal data transmitted via the website, e.g. content, usage, meta/communication data or contact data, in the USA. Further information can be found in the provider's privacy policy at https://www.cvent.com/en/cvent-global-privacy-policy. It is our legitimate interest to provide a website, so the legal basis of the described data processing is Art. 6 para. 1 s. 1 lit. f GDPR.

The legal basis of the transfer to a country outside the EEA are adequacy decision. The security of the data transferred to the third country (i.e. a country outside the EEA) is guaranteed because the EU Commission has decided as part of an adequacy decision in accordance with Art. 45 para. 3 GDPR that the third country ensures an adequate level of protection.

2.1 Registration

When registering for the event on our website we process the following data for the following purposes:

  • We process your contact details, your profession, and job title, your email address in order to register you to participate in the eventon the legal basis of Art. 6 Para. 1 lit. b GDPR (fulfillment of the contract concluded with you).

  • Only if you have given your consent pursuant to Art. 6 para. 1 lit. a GDPR, we shall share this data with our sponsors mentioned in the consent form.

  • We process your name to provide you with a name tag for the event. The processing of your data is based on the legal basis of Art. 6 Para. 1 lit. b GDPR (fulfillment of the contract concluded with you).

  • In addition, we request that you inform us of any dietary or accessibility needs you may have. This is asked so that we may make any necessary adjustments to the menu and venue, in order to cater to your needs. The processing of your data is based on the legal basis of Art. 6 Para. 1 lit. b GDPR (fulfillment of the contract concluded with you).

    2. Data processing through Splash Host app

    At the event, you will be checked in to the event using Splashthat software (specifically Splash host app).  Upon confirmation of registration, you will receive an email with a QR code which will be scanned on-site by check-in teams using the Splashthat app. A name tag will be created for you using this app and the data you provided upon registration. The provider is Cvent, Inc., 1765 Greensboro Station Place, Suite 700, Tysons Corner, Virginia 22102. In doing so, the provider processes the personal data you made available during registration in the USA. Further information can be found in the provider's privacy policy at https://www.cvent.com/en/cvent-global-privacy-policy.

    The legal basis of the transfer to a country outside the EEA are adequacy decision. The security of the data transferred to the third country (i.e. a country outside the EEA) is guaranteed because the EU Commission has decided as part of an adequacy decision in accordance with Art. 45 para. 3 GDPR that the third country ensures an adequate level of protection.

    It is our legitimate interest to facilitate the check-in at the event, so the legal basis of the described data processing is Art. 6 para. 1 s. 1 lit. f GDPR.

    3. Data processing through photo, audio and video recordings at the event

As part of the event, photo, audio and video recordings are sometimes made in order to document the events for the purpose of external representation. Some recordings will also be processed for later publication.

a. Production of photos, audios and videos
Talon.One has photo, audio and video recordings (hereinafter “recordings”) taken at events in order to then publish them for external display and for Talon.One’s public relations work. The recordings made are personal data within the meaning of Article 4 No. 1 GDPR, as it is possible to identify a natural person or at least make them identifiable based on the recordings.

For this purpose, we process the following data for the following purposes:

  • We process your name, job title, company name and image, in photo and video recordings and  audio recordings names, in order to inform the recipients of the respective publications (e.g. website visitors) about the work and events of Talon.One.

The processing of your data to document our event is based on the legal basis Art. 6 Paragraph 1 Letter f GDPR. We store your data until the purposes of processing have been achieved and there are no legal retention periods to the contrary. Unless there are statutory retention periods to the contrary, we will delete your processed data after 18 months from the date of the event. If the rights of those affected are asserted, we will store your data for three years for verification purposes based on our legitimate interest (provability of fulfillment of the rights of those affected).

b. Publication of photos, audios and videos

We publish the photos you take for external display in the gallery on our website and on our social Media profiles (LinkedIn, Instagram, Facebook). We may use the audio recordings for podcasts hosted on our website and additional streaming services e.g. Spotify and Apple Music. We may publish videos on YouTube and Vimeo approximately 10 days after the event. In addition to showing you personally, the recordings can also include your name, job title, company, provided you have actively participated in the event as a participant.

To do this, we process the following data for the following purposes:

  • We process your image for the purpose of publishing your photo in the gallery on our website and on LinkedIn, Instagram, and Facebook for the purpose of external representation.

  • We process your name, job title, company, to play the audio recording in our podcast on streaming platforms.

  • We process your image (facial features, time and place of recording) and your name for the purpose of external representation on YouTube and Vimeo.

The respective websites are freely available on the Internet and can therefore be accessed worldwide. We would like to point out that the subpages, including any photos, audio and video recordings, can be found via search engines. The providers of the social media platforms may process and use data posted on the platforms for their own purposes. This data processing is beyond our direct control. Further information on data processing can also be found in the data protection information of the respective provider Social media platforms  (LinkedIn, Instagram, Facebook, Vimeo, Youtube) included. As soon as the content is posted on the platforms, third parties (e.g. third-party users of the platforms) can view, share or, if necessary, download the content.

The processing of your data is based on the legal basis of Article 6 Paragraph 1 Letter f GDPR. In the event of publication, we will store your data until the purposes of processing have been achieved, but for a maximum of 18 months and there are no statutory retention periods to the contrary. Should we wish to host this content for longer than 18 months, we will reach out to you for confirmation and a further extension.

4. Data processing for contact requests

As part of the event support we provide, we process your personal data, such as contact details of the inquirer for the purpose of answering your request and providing technical functionality.

Data processing is carried out on the legal basis of Article 6 Paragraph 1 Letter f GDPR. The data processing serves our legitimate interest in answering your request.

The data will be deleted after your request has been processed, provided there are no legal retention periods to the contrary.

III. Categories of recipients

We only pass on your data to recipients if you have given your consent or there is a legal basis. We only pass on your data to the following recipients:

  • The full list of sponsors shall be updated on a regular basis and made available to you on  https://incentivize.talon.one.

  • YouTube LLC, Vimeo, Inc.

  • Social media networks (LinkedIn, Instagram, Facebook).

IV. Your data subject rights

You have the following rights in particular with regard to data processing – provided the relevant requirements are met:

  • Right to information about what data we process about you (Art. 15 GDPR);

  • Right to correct your data (Article 16 GDPR);

  • Right to deletion (Article 17 GDPR);

  • Right to restrict the processing of your data (Article 18 GDPR);

  • Right to data portability (Article 20 GDPR);

    In the case of data processing based on Art. 6 Para. 1 lit. f GDPR (legitimate interest), you have the right to object at any time with effect for the future under the conditions of Art. 21 GDPR. In the case of data processing based on consent, you have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent up to the withdrawal.

To exercise your rights described here, you can contact the contact details above at any time. You also have the right to complain to any data protection supervisory authority in the European Union. The following data protection supervisory authority is responsible for Talon.One: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61 10555 Berlin.

Talon.One Logo

The World's Most Powerful Promotion Engine

BERLIN

Wiener Strasse 10
10999 Berlin
Germany

BIRMINGHAM

41 Church Street
B3 2RT Birmingham
United Kingdom

BOSTON

One Boston Place, Suite 2600
02108 Boston, MA
United States

SINGAPORE

1 Scotts Road, #21-10 Shaw Centre
228208 Singapore
Singapore

G2 LogoMach Alliance LogoISO 27001 Logo
CCPA Logo
GDPR Logo
SOC2 Logo

© 2025 Talon.One GmbH. All rights reserved.