Privacy policy

Short and clear. We use your data only to organise the gathering. No marketing databases, no onward sale, no tricks.

1. Controller

The controller is responsible for processing your personal data under Regulation (EU) 2016/679 (GDPR).

2. What data we collect

When you apply via the Jotform application form, we collect only what we need to decide on the invitation and to organise the gathering:

• First name and surname
• Email address
• Age
• Link to your LinkedIn profile
• Instagram profile (username)
• Short answers to questions in the application (motivation, preferences)
• Payment data (processed exclusively by Stripe, see point 4)

We do not collect data on ethnic origin, religion, health status or any other special-category data under Article 9 GDPR.

3. Why and on what legal basis

• Handling the application and organising the gathering, Article 6(1)(b) GDPR (contractual relationship at the request of the data subject).
• Assessing the application and composing the guest list, Article 6(1)(f) GDPR (the organiser's legitimate interest in ensuring a safe and high-quality environment for all participants).
• Communication about the gathering (confirmation, location, possible changes), Article 6(1)(b) GDPR.

We do not use the data for profiling, automated decision-making, or marketing.

4. Who we share the data with (processors)

We do not pass your data to anyone else apart from the following technical processors, whose involvement is necessary for the application and the gathering to work:

• Jotform Inc. (USA), operator of the application form. Jotform privacy policy.
• Stripe Payments Europe, Ltd. (Ireland), payment processor. Stripe acts as a separate controller for payment data (card number, etc.); the organiser never sees the card number. Stripe privacy policy.
• GitHub, Inc. (USA), hosting of this website via GitHub Pages. GitHub privacy policy.
• Google Ireland Ltd. (Ireland), Gmail and Google Workspace for email communication. Google privacy policy.

For transfers to the USA we rely on the EU standard contractual clauses and the EU-US Data Privacy Framework, under which the processors are certified.

5. How long we keep the data

• Data from rejected or unfulfilled applications: deleted within 14 days of the decision.
• Data of confirmed guests: deleted within 30 days after the gathering.
• Payment data is held by Stripe under its own statutory obligations (in particular accounting and AML rules).
• Email communication is kept for no more than 6 months after the gathering (in case of a complaint).

6. Your rights

As a data subject, you have the right under GDPR to:

• Request access to your data (Article 15)
• Request correction of inaccurate data (Article 16)
• Request erasure ("right to be forgotten", Article 17)
• Request restriction of processing (Article 18)
• Have data transferred to another controller (Article 20)
• Object to processing (Article 21)
• Withdraw consent at any time, where consent was given (without affecting the lawfulness of earlier processing)

To exercise your rights, send an email to jakub@popluhar.at. We will respond within 30 days.

7. Right to lodge a complaint

If you feel that your rights have been infringed, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

8. Cookies and analytics

This website does not use tracking cookies or analytics tools such as Google Analytics. The only cookies that may appear are technical cookies set directly by the Jotform application form or by Stripe at the moment of payment, which are necessary for those tools to function.

9. Changes to this policy

If we update this policy, the latest version will always be available at this address. The date of the last update is given below.

Last updated: 17 May 2026