Privacy Notice
on personal data processing relating to
Graphisoft IGNITE Conference

A. Contact details of the controller:

Name: Graphisoft SE (hereinafter: Graphisoft)
Registered office: 1031 Budapest, Záhony u 7. (Graphisoft Park)
E-mail address: [email protected]
Telephone number: 0036 1 437 3000

B. Data processors:

Graphisoft organizes its Global Conference (hereinafter: Event) as a physical event with the option to participate online. At the Event, we use the services of the following data processors:

• • Graphisoft Asia Ltd to process invoicing and payments of registrations, participations and refunds.
  • Stripe Inc to facilitate payment transactions
    For further information visit: https://stripe.com/en-at/privacy
  • Swapcard for providing platform for online events and measuring their viewership. Besides these services, Swapcard also processes personal data for its own purposes as a data controller.
    For further information visit: https://www.swapcard.com/privacy-policy
  • Cvent for providing registration platform.
    For further information visit: https://www.cvent.com/en/cvent-global-privacy-policy
  • Slido for providing online survey and for operating Q&A sessions.
    For further information visit: https://www.sli.do/terms#privacy-policy
  • IBM Watson Media / Clevercast for providing video player platform, and statistics on the viewership of the event’s recording.
    For further information visit https://www.ibm.com/privacy / https://www.clevercast.com/gdpr/
  • Google Ireland Limited for analytic and marketing purposes.
    For further information visit: https://policies.google.com/privacy?hl=hu
  • LimeCreative during the event to capture key moments; to share those photos on internal and external branding-type communication materials.

Other than the above, Graphisoft does not transfer personal data to any other recipient.

C. Description of the data processing:

To register you to the event (either online or in-person), Graphisoft asks your contact and other relevant personal data:

• • First name
  • Last name
  • Email address
  • Country, ZIP code, State
  • Company
  • Job title (optional)
  • Mobile number (if in-person participation)
  • Dietary accommodation (if in-person participation; optional field)
  • T-shirt size (if in-person participation; optional field)
  • Accessibility accommodation (in in-person participation; optional field)

Your name and email address will be used to grant access to event materials (e.g. recordings) after the event.

During the event, a video recording will be made so that those who were not present or registered after the event can follow the news and events. In this case the video will be available until the period described below (section D.). To provide internal benchmark, the recording will be stored for 2 years after the event took place but will only be available to a strictly limited number of employees. In these cases, only your name can be recorded (when you ask or answer a question with your name in the Q&A session), but other personal data won’t be processed.
To measure the level of interest in relation to the online events, Graphisoft collects and analyses statistics on the viewership of the events.

For those who participate in-person and have specific dietary requirements (e.g. due to allergens) Graphisoft collects such requirements.
T-shirt size is needed to provide you with the right size event gift.
Accessibility accommodation-related information is collected in order to best serve your needs (e.g. you need wheelchair support).

If you bring a colleague with you, then your colleague’s full name, email address, country, company, dietary requirements, t-shirt size and accessibility accommodation information will be collected for the above mentioned reasons. Addition of extra colleagues is subject to payment. Tickets are non-transferable.

Billing data (Company name, VAT ID, Address, Phone) and payment method are required for in-person participants by Graphisoft to issue the invoices for the participation fee.

When using Swapcard the following are applicable:
We use a virtual event platform where You can participate in the online event. This platform provides statistics on the viewership as well. When You give your consent, we process your personal data provided by Swapcard for marketing purposes. You can withdraw your consent at any time.

When using Cvent the following are applicable:
For the registration we use our registration platform.

When using Slido the following are applicable:
In order to collect feedback about the event, Graphisoft uses Slido as a survey tool. Fill in the survey is optional and anonym. In order to give you the opportunity to share your opinion on the online event’s topic, Graphisoft organizes Q&A sessions during the event. Participating in the Q&A session is optional. During the Q&A session, you can ask questions or answer questions with or without your name. If you choose to use your name when asking or answering questions, your name may be mentioned at the event along with your question/answer.

When using IBM Watson Media the following are applicable:
We use video player platform where You can watch the video of the event. This platform provides statistics on the viewership of the event’s recording.

When using Google Ireland Limited the following are applicable:
We use Google Analytics for analytic and marketing purposes.

D. Purpose, legal basis and duration of the data processing

Purpose of data processing	Legal basis of data processing	Scope of the processed personal data	Duration of data processing
To register the participants of the event	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): Operating the event	Contact data: e-mail address, full name, country, state, ZIP/postal code, company name, job title (optional) Office, function, legal entity (only from employees) Name of University, Level of studies, date of graduation (only from students) Dietary and accessibility accommodation, t-shirt size (for in-person participants, optional fields) Publication name, website (only from Press)	Until the end of the event
To issue invoices and process payments	Performance of the contract; point b) of Art. 6(1) of GDPR	Billing data Payment details	In accordance with applicable tax rules
To process refunds in case of cancellation	Performance of the contract; point b) of Art. 6(1) of GDPR	Billing data Bank account details	In accordance with applicable tax rules
To grant access to event materials for those who registered after the event took place	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): Operating the event	Contact data (e-mail address, full name, country, state, ZIP code, Company name, Job title (optional) Office, function (only from employees)	Three months after the event
To let those who were not present watch the event	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): Providing opportunity to be informed about the happenings of the event.	Content of the recording	The video recording of the event can be re-watched for 90 days after the event took place.
Measuring the level of interest in relation to an online event (based on viewing statistics)	Legitimate interest of GRAPHISOFT according to point f) of Article 6 (1) of GDPR: Tailoring the topics of future events to the participant’s interest.	Viewing statistics of the event (number of the viewers)	Until preparing the viewing statistics.
To provide internal benchmark	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): To standardize the high quality of Graphisoft’s events	Content of the recording	The recording will be stored for 2 years after the event took place but will only be available to a strictly limited number of employees.
Sending relevant marketing messages (sending information about current and future events)	Your consent (point a) of Art. 6(1) of GDPR) You can withdraw your consent at any time.	Profile data: contact data identification data data provided by registration	Until you withdraw your consent, but maximum 2 years after the event took place
Transferring your personal data with the relevant Graphisoft Partners (the ones located in your country) and event exhibitors.	Your consent (point a) of Art. 6(1) of GDPR) You can withdraw your consent until the end of the event when the data transfer occurs.	Profile data: contact data identification data data provided by registration	Until the end of the event
To make statistics for analytic purposes	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): Improving the quality of future events	Statistic data in relation to the event: viewership statistic website visit statistics	2 years after the event took place
To publish on social media platforms and to promote Graphisoft events	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): To promote Graphisoft You can object any time to be included in the photos or videos.	Photo and video recording of the Participant’s face and body. (Intention is to create mass photos where individuals are difficult to recognize.)	2 years after the event took place
When using Slido the following are applicable
Creating participant’s profile and collecting feedback about the event from a large number of participants in a simple way	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): Improvement of the quality of the future events	Participant profile data: o name, o email address Other participant data: o answers	30 days after the event took place and the survey sent.
Operating Q&A sessions and evaluating the information	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): To collect a wide range of insights, opinion on Graphisoft’s event topics from a large number of participants in a simple way	questions, poll answers, ideas name of the questioner (optional)	30 days after the event took place.
Operating participant’s profile	Legitimate interest of Graphisoft (point f) of Art. 6(1) of GDPR): To provide an easy access to Q&A sessions, surveys of the following online events	Participant profile data: name, email address, company	30 days after the event took place.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.

The data processed do not contain any special categories of personal data.

E. Data transfer outside the EEA, EU: 

Your contact and payment data will be transferred between Graphisoft SE and Graphisoft Asia to ensure that only those let into the event who paid the registration fee. Graphisoft Asia transfers your personal data to Stripe Inc. located outside of the EU.

Apart from that, Graphisoft does not transfer personal data outside the EU.  

When Slido transfers personal data to third countries, the data transfer is based on standard contractual clauses (Article 46 (2) c) of GDPR). You can find more information about Slido’s activities here: https://www.sli.do/terms#privacy-policy

 

When Google Ireland Limited transfers personal data to third countries, the data transfer is based on appropriate safeguards (Article 45-46 of GDPR). You can find more information about Google Ireland’s activities here: https://policies.google.com/privacy?hl=hu

 

When IBM Watson Media transfers personal data to third countries, the data transfer is based on appropriate safeguards (Article 45-47 of GDPR). You can find more information about IBM Watson Media’s activities here: https://www.ibm.com/privacy

 

Swapcard is located in the EU, and use Amazon Web Services as cloud service provider, however its server is located in the EU. You can find more information about Swapcard activities here: https://www.swapcard.com/privacy-policy

 

When Cvent transfers personal data to third countries, the data transfer is based on appropriate safeguards (Article 45-47 of GDPR). You can find more information about Cvent’s activities here: https://www.cvent.com/en/cvent-global-privacy-policy” 

F. For data security measures and your data protection rights see the link below

Data Security Measures and Protection Rights