Bizzabo Privacy and Cookie Policy

Last updated: April 9, 2025

1. Introduction.

This Privacy Policy applies to data that we, Bizzabo, Inc. and our affiliates (“Bizzabo,” “we,” “our”, or “us”) may collect about you in connection with: (A) your access to, and use of: (i) Bizzabo’s website located at www.bizzabo.com (the “Website”); (ii) (Bizzabo’s cloud-based event success, management and registration platform (the “Platform”), mobile app (the “App”) any other related products and services offered by Bizzabo (collectively, “Services”); (iii) our social media pages; (B) email or other communications with you (for example, customer support requests, marketing activities, and surveys) in which you may provide personal data to Bizzabo; (C) your application for employment with us; (D) Data we process in accordance with our obligations as your employer; (E) Data we process as part of our business relationship with you.

In this Privacy Policy, the Website, the Platform, the App, social media pages, emails, and other electronic locations, through which you may interact with Bizzabo to provide your data, are collectively referred to as the “Sites.”

Bizzabo respects the privacy of its customer representatives, customers’ users of its Services, partners, service providers, Site visitors, business prospects, employment candidates and employees, and is committed to protecting the personal information that is shared with us (these and any others with respect to whom we collect personal data, shall collectively be referred to as “you” or “data subjects”).

This Privacy Policy does not apply to third party applications or software that integrates with the Services through the Sites, or any other third party products, services, or websites (together “Third Party Services”) through our App Market, available integrations, or otherwise. Third Party Services are governed by the terms of such third parties even if you initially engaged with such third party through our Sites. 

If you do not agree with this Privacy Policy, please do not access or use the Sites or Services.

2. Who is the Data Controller of Your Personal Data?

Summary: Bizzabo serves as a data a data processor on behalf of its customers, event organizers, and as a  data controller for its own business purposes. 

For the purposes of EU General Data Protection Regulation (the “GDPR”) and other applicable privacy laws, Bizzabo is a data controller (“Controller”) in relation to the personal data of the representatives of our customers and prospective customers, employment candidates, employees, partners, vendors and Website visitors. Bizzabo is also the Controller of data collected for events hosted and organized by Bizzabo itself, on its own behalf.

For the purposes of the GDPR and other applicable privacy laws, Bizzabo is a data processor (“Processor”) of the personal data we process on behalf of our customers as part of the Services. In such cases, our respective customer, the event organizer (each, a “Customer”), is the Controller of your data. Our processing of your data as part of our Services is governed by a Master Services Agreement or other agreement containing separate terms and conditions that govern delivery, access and use of the Services and the processing of your personal data (either, a “Customer Agreement”). Bizzabo does not control its Customers’ Event registration or management process, or the Personal Data that a Customer requests from Event Registrants (as defined below). We are not responsible for any decisions or actions taken by a Customer with respect to your data (or by any third party with whom a Customer may share your data).

For example, you may be the employee or agent of a Customer, who is authorized to access the Platform as an administrator. Or, you may be an “Event Registrant” invited to register for, check into, or receive data regarding a Customer event (“Event”) through Bizzabo’s Sites or Services, and we may provide Personal Data you submit through the Sites or Service to the Customer running that Event. 

In such cases, please read the applicable privacy policies of the Customer who is organizing the Event before submitting Personal Data in connection with their Event. We encourage you to reach out to the Controller directly for further information regarding the processing of your data as part of our Services, or with any inquiry or concern.

3. What Information We Collect and How We Collect It. 

Summary: we collect various categories of personal and non-personal data in order to enable our Services, meet our contractual obligations and fulfill various legitimate interest, such as recruitment, business management, fraud prevention and marketing. Data may be provided by you or by a third party when authorized to do so.

“Personal Data” is any information that may be used to identify or personally contact you or another individual, or that relates to an identifiable natural person. “Non-Personal Data” includes any information that is anonymized, aggregated or otherwise presented in a way that does not allow identification of a specific individual, or is not directly associated with a unique person. 

We collect various Personal and Non-Personal Data. You are not required to provide Bizzabo with any Personal Data. However, certain Services and Sites’ functionalities may not be available to you unless some Personal Data is provided by you, or by a Customer or Customer administrator, on your behalf. If you are submitting Personal Data relating to any other person (including as a Customer administrator, or on behalf of other individuals at your company), you represent that you have a legal basis to collect this data and to provide this data to Bizzabo, and to permit us to use it in compliance with this Privacy Policy.

We collect the following types of Personal Data:

(a) Business-Relationship Data:

We collect Personal Data related to business representatives as part of establishing and maintaining our business relationships with Customers, vendors, partners, and business prospects. This data is provided by you or obtained from other sources.

Information Provided by You

You provide us with Personal Data through your online and offline interactions with us, such as when you express interest in our Services, participate in meetings or promotional events, engage in contract discussions, or contact us for information or support. This may include interactions via our Website, submitting a request for a demo, subscribing to our newsletter, registering for webinars, or communicating with us through email, social media, or other channels. 

The types of Personal Data we typically collect include your name (first and last), email address, phone number, job title, company name, the content of your inquiry, and any additional information you choose to share with Bizzabo. 

We may also occasionally invite you to participate in surveys, and your responses may include Personal Data. Additionally, we may request information about your interests and preferences to better tailor our communications, offers, and content to your personal interests.

We use this Personal Data for purposes that align with the context in which it was provided, such as:

• Responding to inquiries about our Services
• Providing support
• Registering you for a demo
• Initiating sales discussions
• Delivering targeted marketing and advertising
• Enabling account management
• Fraud prevention

Providing this information is not legally required. However, certain details are necessary to establish and maintain our business relationship with you, fulfill our contractual obligations, or process and respond to your inquiries. If you choose not to provide specific information, we may be unable to establish a business relationship, respond to your inquiry, or deliver some or all of our Services to you or your organization.

Information From Other Sources

We also collect role-based Personal Data regarding potential customers, business partners, contractors, and service providers from other sources, such as business affiliates, marketing partners, social media platforms or publicly available sources (e.g., LinkedIn). This data may include your name, email address, job title, company name, phone number, business-related interests and other public business-related information. We use this data to facilitate business relationships with you and to better provide you with marketing offers and additional services that are of interest or relevant to you, in accordance with applicable laws.

(b) Employment Candidate and Employee Data:

If you apply for employment at Bizzabo, you provide us with Personal Data such as your name, contact information, education and employment history, any Personal Data contained in your resume (CV), your responses to any assessment, background check results (in accordance with applicable law), and any other Personal Data that you decide to provide us with. Please note that, in most cases, we receive the information directly from you, or record data in interview records, but we may also receive information from CV databases, recruiting agencies and social media, references or background check companies for recruitment and hiring purposes. If you do not provide us with this data, we will not be able to assess you as a candidate and advance your recruitment process. 

If we decide to employ you, we also process additional categories of Personal Data of our employees as required by applicable law, including but not limited to tax ID, insurance ID, bank account details, any requirements related to health and safety, as well as additional data that may be necessary for effective employment, such as performance reviews and evaluations, communications, and training.

(c) Sites Data:

Information Collected Automatically 

As is true of most websites, we gather certain information automatically when you visit our Sites, such as your computer type (MAC or Windows), mobile device type, language, internet browser, any web pages that referred you to our Sites, and your Internet Protocol (IP) Address (which may be identified and logged automatically in our server log files whenever you visit the Website or Platform). We may also store general usage and activity data, such as the date and duration of your visit, your navigation of the Sites and App downloading information. We use this information for reasons such as improving Sites performance, analytics, and functionality, and monitoring the regions from which users access our Sites, in order to help us enhance the user experience and Sites security.

From the App or Other Smart Devices

When you download or use the App or other smart devices in connection with a Customer Event, we collect app usage data and general device information (type, OS version, etc.), including which of our apps have been downloaded to your mobile device and when.

Information from Cookies and other Tracking Technologies

Bizzabo’s Sites use tracking technologies involving identification and local storage. These technologies are used in order to provide, maintain and improve the Sites, to optimize our offerings and marketing activities (including through targeted advertising) and to provide you with a better user experience. This includes tracking technologies of third-party social media, analytics and advertising partners. For more information, see the “Cookies and other Tracking Technologies” Section 10 below.

(d) Event Data:

We collect event-related data as part of our Services, such as information collected via the Platform, App or other smart devices, collected from or on behalf of our Customers who host or manage Events (“Event Data”). This information is either collected from Customer administrators who access the back-end of our Platform or other tools used by Customers, or from Event Registrants directly, including through their use of the Platform, App and related Services.

Event Data may also be collected by Bizzabo for events run by Bizzabo, in which case Bizzabo is the Controller of such data.

While the types of Event Data collected may vary based on the specific Event, Customer configurations, and how Event Registrants use the Services, the following Event Data is typically gathered as part of our Services:

• Account and Registration Information:

To access the Platform and App, you are required to create or use an account with Bizzabo. When creating an account or registering for an Event, you are required to provide information such as your full name, email address, and depending on the Controller’s choice, phone number, physical address, employer, job title, and professional interests and any other information the controller chooses to collect. This information will be available to your Event organizer upon registration. Depending on the Event organizer choices, your name and email address may be collected whether or not you complete the registration process. 

• Messages and Interactions:

Depending on your Event organizer’s configuration, the Services may include certain engagement and interaction capabilities such as an event networking community (“Community”), group chats, 1:1 messaging, 1:1 meeting scheduling, Polls, Q&A and/or forums. When using these features, we collect and process any data you share, such as group chat content, messages and meeting scheduling information (“Messages and Interactions”). In such cases, we will provide your Event organizer with aggregated information based on such data, intended to provide them with event-related insights.

• Event Community Data:

We may collect and maintain additional data if you join a Community, if your Event organizer adds you to a Community, or if you update your Community profile. This includes Community-specific information, such as Community profile information, which includes your basic registration information, profile picture and self-description, as well as calendar availability, meeting scheduling information and any other information you choose to share within the Community, including Messages and Interactions. Certain data, such as your name, profile information and calendar availability, will be visible to other members of the Community and to the Event organizer. You can choose to remove yourself from the Community and/or manage your data visibility within the Community account settings.

• Badge, Location and Attendance Data:

If you participate in physical Events, you may be provided with a smart-badge for use throughout the event. Such smart-badges collect event touchpoints, such as session check-in points with timestamps. Such smart-badges also collect your approximate location within the event venue, such as session rooms or general event zones (“Event Location Data”), to allow your event organizer to receive real-time and post-event aggregated analytics reports based on session attendance and location tracking. 

You may choose to use such badges in identifiable or non-identifiable form. If you use identifiable badges, the data collected via the badges will be linked to you. In some cases, your Event organizer may also receive historical (non-real-time) identifiable session attendance records based on Event Location Data, such as a list of attendees per session and their attendance duration. 

You can opt to use a non-identifiable smart-badge at check-in or later, in which case the data collected via your badge’s will not be linked to you. Such smart-badge will still enable you to check into the Event and session rooms, but may limit your access to certain Bizzabo features and functionalities.

• Technical and Usage Data:

The use of the Platform and App involves the collection of browser, device and usage data. For more information, see the “Sites Data” sub-section above.

Event Data is generally used to provide you with secure access to the Services, facilitate the Services functionalities, and to improve and personalize the Services. However, for clarity, unless the Event is a Bizzabo-organized event, Event Data is controlled by the Customer, and Bizzabo collects and processes it at the Customer’s direction, and in accordance with instructions provided by the Customer, including the applicable terms in any Customer Agreement. Bizzabo works together with Customers, the Data Controllers, and offers tools so that Customers can provide appropriate notice regarding the purposes for which they are collecting Personal Data, as well obtain consent to the collection and use of such information, where appropriate, or secure alternate lawful bases for the processing. Such notices, consent and lawful bases are entirely the responsibility of the Customer. 

If you do not agree with how your Personal Data is processed in the context of Event Data, please refrain from using the Services, manage your data visibility within the Community, or contact your Event organizer for further assistance.

4. What is Bizzabo’s Legal Basis, as a Controller for Collecting and Processing Your Personal Data.

Summary: data is collected on the basis of our contractual obligations, your consent, for legal requirements, and also to meet various legitimate interests, such as improving products and services and fraud prevention.

Bizzabo’s legal basis for collecting and using the types of Personal Data described above will depend on the nature of the Personal Data collected, and the context in which we are collecting it. When we collect, use, process or disclose your Personal Data, we rely on one or more of the following legal grounds:

Processing which is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract:

• Carrying out our obligations arising from any contracts entered into between you and Bizzabo and/or any contracts entered into with Bizzabo and to provide you with the information, support and Services that you request from Bizzabo;
• Sending you contract-related communications;
• Verifying and carrying out financial transactions in relation to payments you make in connection with the Services;
• Sending you announcements in relation to security, privacy or administrative related communications (these communications are not marketing orientated, and we do not rely on consent, so you may not opt out);
• Carrying out activities in anticipation of a contract with you.

Processing which is necessary for the purposes of the legitimate interests pursued by Bizzabo or by a third party of providing efficient and wide-ranging Service to customers, running our business, improving our Services and recruiting staff, when such legitimate interests are not overridden by your fundamental rights and freedoms:

• Establishing a business relationship with you;
• Answering queries sent by you and contacting you upon your request;
• Contacting you to market our Services (subject to your consent for such communications when required under applicable laws). You may opt out of such communications at any point; 
• Soliciting feedback in connection with the Services;
• Tracking use of our Website to enable us to optimize it;
• Anonymizing Event Data for the purpose of Services improvement;
• Recruiting suitable staff;
• Protecting our legal rights and interests and those of our staff, Customers, or third parties, to collect debts, to enforce our terms, policies and legal agreements, and to take any action in any legal dispute and proceeding;
• Detecting and preventing fraud, security breaches, infringements, identity thefts and any other Services misuse.

Processing which is based on your explicit consent (when required under applicable laws):

• Processing which involves the use of cookies and other tracking technologies, for purposes which are not purely operational, such as for marketing and analytics purposes (for more information, see “Cookies and Other Tracking Technologies” Section 10 below);
• Certain types of direct marketing of our Services, such as via e-mail.

Processing which is necessary for compliance with a legal obligation to which Bizzabo is subject:

• Compliance and audit purposes, such as meeting our reporting obligations in our various jurisdictions, anti-money laundering, tax related obligations, and for crime prevention and prosecution in so far as it relates to our staff, Customers, service providers, facilities, etc.; 
• If necessary, we will use Personal Data to comply with court orders and warrants and assist law enforcement agencies as required by law, 

Please note that Personal Data processed on behalf of Customers as part of the Services is processed by Bizzabo as a Processor. As such, Bizzabo’s Customers, the Controllers, determine the legal basis of the processing of such data.

5. How Do We, as a Controller, Use Your Personal Data?

Summary: we process Personal Data to meet our obligations, protect our rights, manage our business, and provide our Services.

Bizzabo uses Your Personal Data:

• To provide our Services, respond to your inquiries and fulfill your requests, and to provide you with support when you ask for it.
• To market and sell our Services, develop leads and prospects, and respond to enquiries. 
• To send you updates, newsletters and other content that you have requested or subscribed to, as well as informational materials regarding our Services.
• To provide you with technical and administrative information relating to our Sites and Services, such as security notices, Service-related status reports, and changes to our policies or terms of use. These communications are considered part of our Services and you may not opt out of them.
• If you have consented or otherwise in compliance with applicable laws, we may send you marketing communications regarding products and services that we believe may be of interest to you. If you later decide that you no longer want to receive this type of marketing or promotional information, you may opt-out at any time by clicking the “Unsubscribe” button in our marketing communication, or contacting us at the email or mailing address provided in the “Contact Information” Section 17 of this Privacy Policy.
• To personalize your experience on the Sites by offering content tailored to your preferences or content and settings that you have chosen.
• For our internal business purposes that include administering your access and use of any Bizzabo Services, data analysis, securely identifying you when you log onto a Service, fraud monitoring and prevention, enhancing or modifying our Sites and Services, determining the effectiveness of our promotional campaigns, billing you for Services, and operating our business.
• To identify and authenticate users of our Services; and to maintain the security of our Sites and Services, and of our offices and the safety of our staff.
• To provide you with personalized advertisements that are relevant to your interests; to analyze the effectiveness of ad campaigns and build targeted audiences for future targeted advertising purposes (subject to your consent, as required under applicable laws).
• To recruit staff.
• To fulfill our contractual obligations, including under employment agreements.
• As necessary for us to comply with applicable law, court orders, law enforcement orders, etc.
• To protect and defend our rights, and those of our staff, customers, partners and third parties; for compliance and audit purposes, and for crime prevention and prosecution in so far as it relates to our staff, customers, facilities, etc.

Please note that if information is aggregated or anonymized so that it is no longer reasonably associated or trackable to an identifiable natural person, it is no longer considered “Personal Data” under this Privacy Policy and Bizzabo may use it for any legitimate and lawful business purpose.

6. Sharing Personal Data.

Summary: we share Personal Data with our service providers, partners, group companies and authorities where required. 

Personal Data. Except as provided in this Privacy Policy, Bizzabo will not disclose, transfer, sell, trade, rent, or otherwise provide your Personal Data to any third party, without your consent.

Aggregated Data. Bizzabo may share aggregated, Non-Personal Data, log data and usage statistics with third parties for purposes including demographic, industry, and marketing analysis.

Group companies. In connection with the Services, Bizzabo discloses Personal Data to its group companies for purposes described in this Privacy Policy. This includes companies and/or assets that may be acquired after the data was collected. 

Service Providers. We use third party contractors to provide certain services and perform functions on our behalf. Examples include cloud-hosting capabilities; chat-bot functionality; marketing assistance and services; statistical analysis relating to usage of our Sites and Services; marketing and sales development; lead generation; prospecting and lead vetting; websites analytics; computing providers; Customer ticketing and support; on-site and cloud based database services; Service Provider and customer interface; payroll and pension management systems and providers; recruiting agencies and software; onboarding software; human resources management software; candidate and employee evaluation software and services; staff training software; time and attendance software; customer relationship management software; enterprise resource planning software; project management software; web video-call and meeting room platforms; call center systems; recruiting and applicant management software and partners; backup and business continuity assurance providers; CCTV, physical and cyber security system providers; IT service and support providers; our lawyers, accountants; and other standard business services. Bizzabo can disclose all categories of Personal Data listed in Section 3 “What Information We Collect and How We Collect It” above, but will disclose your Personal Data only to the extent necessary for such service providers to perform the duties for which it has been retained by Bizzabo. These third parties will be bound to confidentiality and purpose-limitation obligations with respect to your Personal Data, which are no less protective than those set out in this Privacy Policy.

Customers. If you are accessing any Site or Service as an administrator or authorized user of a Customer, or as an Event Registrant, Bizzabo is permitted to provide the Customer with your information, including but not limited to your Personal Data, access information and usage data.

Legal and Contractual Compliance. Bizzabo will disclose your information to government or law enforcement officials, regulatory agencies or other third parties (such as attorneys or regulatory service providers), as necessary to (i) comply with applicable laws or regulations, (ii) cooperate with governmental or law enforcement investigations, (iii) respond to legal claims or processes, (iv) protect the safety and legal rights of Bizzabo, its staff and Customers and Event Registrants, the public or any individual or third party, (v) detect, prevent or remedy any suspected fraud, market manipulation or illegal, tortious or wrongful activity; or (vi) enforce applicable Customer Agreements or other Bizzabo contracts. However, this does not include selling, renting or sharing or otherwise disclosing Personal Data for commercial purposes in a way that is contrary to the commitments made in this Privacy Policy.

Business Transfers. In the event of an investment, public offering, or If Bizzabo is acquired by, acquires, experiencing a change of control event, acquires the control of, another company, or its assets, or is merged with another company, Bizzabo may transfer Personal and Non-Personal Data about you to investors, partners, advisors, and/or to such company, its representatives and its advisors, all subject to appropriate confidentiality requirements. However, in the event of such a transfer, your information will remain subject to the protections of this Privacy Policy or substantively equivalent protections. Bizzabo will take reasonable steps to notify you if your information is subject to a business transfer and becomes subject to the other company’s privacy policy.

Third Party Websites and External Links. Our Sites may contain links to websites (including social media sites) owned and operated by third parties, including Third Party Services. When you click on such links, you may leave our Sites and be directed to the third parties’ websites. These websites may themselves collect Personal Data about you or have Personal Data shared with them by us under Customer instructions. If you submit information to any of those sites, your information is governed by their privacy policies, which may differ from those of Bizzabo. Bizzabo is not, and will not be, responsible for the privacy practices or security of any such websites. For employment candidates and staff, our Sites may also contain links to the websites of our service providers that process your personal data on our behalf (e.g., recruiting management platforms). Their websites may themselves collect and process your personal data (e.g., cookies, IP address, device ID) for their own purposes.

Social Media Pages. You may choose to disclose Personal Data during your participation on our social media pages. This Personal Data may appear in public ways, including through search engines or other publicly available platforms, and can be “crawled” or may be searchable by third parties. Do not share or post any information on our social media pages that you do not want to be disclosed to the public.

Online Trackers. Please be aware that, data collected on our Website via cookies and other tracking technologies such as browsing behavior, device information, IP addresses and advertising IDs may be shared with third parties, such as analysts and marketing partners. Such third parties may include external social media platforms and advertising networks, who may use your data for their own personalized advertising purposes, subject to their own privacy policies and practices, which are not controlled by us. For more information and right to manage your consent regarding such data sharing, see under the “Cookies and Other Tracking Technologies” Section 10 below. 

With Your Consent. Other than as set out above, you will receive notice when information about you might go to third parties, and you will have an opportunity to consent to Bizzabo sharing this information.

We remain liable under the DPF Principles (see Section 16 below) in cases of onward transfer to third parties if such third parties use personal information in a manner inconsistent with the DPF Principles, unless we can demonstrate that we are not responsible for the event giving rise to the damage. 

7. What Do We Do to Secure Your Personal Data?

Summary: we take data security very seriously, invest in security systems, and train our staff. In the event of a breach, we will provide notifications as required by law.

Bizzabo makes it a priority to safeguard the security and privacy of your Personal Data. Bizzabo has implemented appropriate organizational, technical, and administrative measures to protect your Personal Data from unauthorized access, disclosure, misuse, alteration or loss. 

These measures include security controls to prevent unauthorized access to our facilities and systems, strong authentication procedures and strict password protection protocols, utilizing encryption software for all financial and other sensitive Personal Data transmitted on or through our Sites, and conducting penetration tests. We follow generally accepted standards to protect Personal Data submitted to us, both during transmission and once we receive it. 

In the event of any security breaches, we will make legally required disclosures, which may include providing notification via email or on our Sites, as applicable.

While we take reasonable steps to protect your Personal Data, please be aware that no method of Internet transmission or electronic storage guarantees complete protection and there is always some risk when you share your Personal Data online. Bizzabo therefore cannot guarantee the absolute security of your Personal Data.

If you have any questions about the security of our Sites and Services, you can contact us at [email protected].

8. How Can You Access, Correct, Update or Delete Your Personal Data?

Summary: you can contact Bizzabo directly through logging into a user account or by email. If you are an Event Registrant and wish to exercise your data subject rights please contact your Controller, the Event Organizer. 

Depending on your user type and location, we provide you with various ways to access, download, correct and request deletion of your Personal Data.

If you are a registered user of the Sites or Services (for example, a Customer’s employee who has been assigned an administrator account on the Platform), you can access, update, modify, correct or delete both Personal and Non-Personal Data by logging onto your user account and visiting your account settings.

Others may submit requests to access, update, correct or delete their Personal Data, to no longer receive communications, or to “opt-out” of certain Services, by contacting us directly at the Bizzabo email and/or mailing address provided in the “Contact Information” Section 17 of this Policy.

Please note that Event Registrants may be subject to our End User Terms, however, their Personal Data is processed by us on behalf of a Customer (the Controller, your Event organizer). If you are an Event Registrant and use our Platform or any Service and would like to access, move, correct or delete your Personal Data, or would no longer like to be contacted by the Customer controlling the information, please direct your request to the Customer, who is the Controller of your data.

Please be aware that we may need to retain certain Personal and Non-Personal Data for recordkeeping and archival purposes, or to complete any transactions that you initiated prior to requesting such change or deletion.

9. Personal Data Retention. 

Summary: we retain personal data according to our data retention policy, as required to meet our obligations, protect our rights, and manage our business. 

We will only retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected and processed, which is a different period for different data sets, or until you request deletion as described in this Privacy Policy.

We will retain Personal Data we collect from our Customers or Event Registrants, and process it on behalf of a Customer, for as long as necessary to provide our Services to the Customer, and will maintain any such information controlled by a Customer in accordance with the Customer’s instructions, including any applicable Customer Agreement terms, and as required by applicable law. 

We will also retain and use Personal Data for a period of time required to comply with our legal, tax, audit or regulatory obligations, to manage potential liability, to resolve disputes, and to enforce our agreements. 

We will retain Personal Data of job applicants in our third party recruiting management platform(s) for a period as managed by that platform. We will retain Personal Data of our employees and staff for the duration of their employment or engagement and as required thereafter. 

Bizzabo may retain Non-Personal Data for as long as necessary for the purposes and uses described in this Privacy Policy, including as necessary for Bizzabo to pursue legitimate and lawful business interests.

10. Cookies and other Tracking Technologies.

Summary: we use cookies and other tracking technologies for various purposes, including technical, analytics, functionality and targeted advertising purposes. You control our use of such technologies through our cookie management tool, or through your device and browser.

Bizzabo’s Sites use cookies, pixels (also known as web beacons), tags, scripts or other tracking technologies involving identification and local storage. For simplicity, all such tracking technologies are defined herein as “Trackers”. 

What Are Trackers?

Trackers are technologies that collect information about your browsing activities. These may include:

• Cookies: Small text files placed on your device by websites you visit.
• Pixels: Tiny graphics with a unique identifier embedded in emails, web pages, or advertisements. They track online activity and provide insights into user behavior. Pixels help us understand how users interact with our Website and our advertising efforts.
• Other Similar Technologies: Any technology that tracks user interactions and browsing activities.

In many cases, these Trackers lead to the use of your device’s processing or storage capabilities. Some of these Trackers are set by us, others by our integration partners or analytics and marketing service providers; some only last as long as your browser session, while others can stay active on your device for a longer period of time.

Types of Trackers We Use

The Trackers on the Sites are used for the following purposes:

• Strictly Necessary: Trackers which are essential for the operation of the Sites and required to enable basic Sites features and functionalities, such as allowing you to securely access and navigate the Sites, providing secure log-in, filling in forms or adjusting your consent preferences. 
• Statistics: Trackers that are used to understand and analyze the key performance indexes of the Sites which helps in delivering a better user experience for the visitors. This may include analytics such as number of visitors, bounce rate, traffic source, how visitors move around the Sites, which pages are the most and least popular, etc.
• Preferences: Trackers used to enable a website to remember information that changes the way the website behaves or looks (e.g., username, region).  
• Marketing: Trackers, including cookies and pixels, set by our advertising partners to collect information about your browsing activities and website interactions to provide you with personalized advertisements that are relevant to your interests; to analyze the effectiveness of ad campaigns and build targeted audiences for future targeted advertising purposes. Please note that targeting Trackers are only used on our Website, and not on our Platform, and you are entitled to manage your consent regarding such Trackers as described below. Please also note that such third parties may use information about your Website visit to target you with personalized advertising, as described below.

Third-Party Use of Your Data

Please be aware that third parties, including external social media platforms and advertising networks, may use the data collected through Targeting Trackers on our Website for their own advertising purposes. This means that:

• Third parties, including social media platforms, can combine the data collected from our Website with data collected from other sites to build a profile of your interests. 
• They may use this profile to deliver targeted advertisements to you on other websites and social media platforms.
• These third parties have their own privacy policies and practices, which are not controlled by us. The interaction and information obtained through this Website are always subject to your privacy settings for each social network. You may also log out from the respective services in order to make sure that the processed data on this Website isn’t being connected back to your profile. We encourage you to review the privacy policies of these third parties to understand how they handle your data. 

Managing your Tracker Preferences and Withdrawal of Consent

Strictly necessary Trackers do not require your consent. Other types of Trackers may require your consent, depending on applicable law. Such consent is collected via our privacy choices banner. Whenever consent is collected, it can be freely withdrawn at any time using the Cookie Setting in our Cookie Preferences Center.

Likewise, you may manage your Tracker preferences at any time using any of the following options:

1. By using the Cookie Setting in our Cookie Preferences Center. 
2. Browser Settings: Most web browsers allow you to block or delete Trackers. Refer to your browser’s help section for instructions. 
3. Mobile Device Setting: To opt out on your mobile device please follow the instructions in your device settings. Instructions: https://www.wikihow.com/View-Cookies. You may also use the Google Analytics Opt-out Browser Add-on or add the extension to your browser, e.g., Chrome Global Privacy Control Inspector.
4. Targeted Advertising Opt-Out Tools: Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. 
5. Third Party Account Settings: Additionally, third parties such as advertising networks and social media platforms provide an opt-out option from targeting advertising through your account settings.

You are free to decide whether or not to allow the use of Trackers. However, please note that some of the Trackers allow us to provide better user experience and advanced functionalities. Therefore, some features of the Sites or Services may not be accessible or operate properly if you disable your Trackers. For more details about the Trackers we use, please review our Cookie Preferences Center.

11. Applicable Legislation and Data Subject Rights.

General:

Depending on the law that applies to your Personal Data, you may have various data subject rights, such as rights to access, erase, and correct Personal Data, to withdraw your consent, and information rights. We will respect any lawful request to exercise those rights in accordance with applicable data protection laws.

To exercise your data subject rights under GDPR or any other applicable data protection laws, please contact our Data Protection Officer at: [email protected].

GDPR:

Summary: Bizzabo is GDPR compliant, has a representative in the EU, respects the rights of GDPR data subjects, and lawfully transfers data outside the EU. 

Bizzabo complies with applicable requirements of the GDPR as it applies to Personal Data of individuals in the EU.

If the GDPR applies to the processing of your Personal Data under this policy, then the following additional details apply.

Individuals from the EU may contact our EU representative (in accordance with GDPR Article 27) as follows: MyEDPO Ltd., a company incorporated in the Republic of Ireland, which can be contacted by e-mail: [email protected].  

As an individual in the EU, when Bizzabo is a Controller of your Personal Data, you may have the right – subject to certain conditions and limitations in applicable law – to:

• request access and copies of all your Personal Data that we possess, in an electronically portable format (e.g., electronic copies of information attached to an email).
• request that we modify or update any of your Personal Data.
• request that we delete any of your Personal Data or restrict access to your Personal Data.
• fully or partially withdraw your consent to the collection, processing, and/or transfer of your Personal Data.
• ask to transfer your Personal Data in accordance with your right to data portability.
• object to the processing of your Personal Data for direct marketing purposes.
• lodge a complaint with a data protection supervisory authority of your habitual residence, place of work or of an alleged infringement of the EU data protection laws.

These data subject rights cannot be exercised in a manner inconsistent with the rights of Bizzabo, Bizzabo employees and staff, with our proprietary rights, and third-party rights. As such, for example, employee records and Personal Data, job references, reviews, internal notes and assessments, documents and notes including proprietary information or other forms of intellectual property or business confidential information, cannot be accessed, erased or rectified. In addition, these rights may not be exercisable where they relate to data that is not in a structured form, for example emails, or where other exemptions apply. Where a request for erasure is made, some Personal Data will remain in our backups and various systems until they are cycled out or until it is feasible to remove that data. Where processing occurs based on consent, withdrawal of consent will not affect the lawfulness of processing that occurred prior to the removal of the consent.

Once we have received notification that you withdraw your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there are compelling legitimate grounds for further processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Prior to enabling exercise of these rights we may undertake a process to verify your identity.

For details regarding transfers of personal data from the EU, see the “Data Transfers” Section 15 below.

UK GDPR:

Summary: Bizzabo is UK GDPR compliant, respects the rights of UK data subjects, and lawfully transfers data outside the UK. 

The details provided in the previous paragraph detailing Bizzabo’s compliance with GDPR apply, given the necessary changes, to UK data protection law too, for data subjects in the UK. 

Our UK GDPR data protection representative may be contacted at [email protected].

US State Law Privacy Rights:

Summary: we do not sell the Personal Data which we process as data processor (service provider) on behalf of our Customers. We do however use analytics and targeted advertising tools on our Website which may perform actions that may qualify as sale or sharing of information under certain State Laws. You can opt out of any possible sale or sharing of your Personal Data at any time. USA consumers have certain rights in relation to their Personal Data. They can exercise those rights by contacting us.  

This Section provides additional details about the Personal Data we collect about consumers in various states in the USA, where such Personal Data is subject to specific state privacy laws, including but not limited to the California Consumer Privacy Act as amended (“CCPA”) and other US state laws effective as of the date (collectively the “State Laws”).

We do not use or disclose sensitive Personal Data except for use or disclosure of Personal Data of our employees as provided in Section 14, “Sensitive Information” or in our capacity as a Service Provider, under orders from our Customer(s).

For more details about the Personal Data we have collected over the last 12 months, please see Section ‎3, “What Information We Collect and How We Collect It”. For the purposes of CCPA, the Personal Data we collect includes the following categories:

• Identifiers: name, address, unique personal identifiers, online identifiers, IP address, email address;
• Commercial information, including services purchased;
• Internet activity information, including, but not limited to, browsing history, information regarding a consumer’s interaction with an internet website application;
• Professional and employment-related information;
• Education information;
• Geolocation data;
• Where our badges are used, additional data – wearable interactions, event touchpoints, check-in points with timestamps and Event Location Data – will be collected;
• When acting as service provider, any information a Customer asks us to collect on their behalf for the purpose of running their Event(s).

We collect this information from the sources described in Section 3, “What Information We Collect and How We Collect It”.

We collect this information for the business and commercial purposes described in Section ‎5, “How Do We, as a Controller, Use Your Personal Data”. We share this information with the categories of third parties and for the purposes described in Section ‎6, “Sharing Personal Data”. 

We do not sell your personal information in the conventional sense, such as for monetary gain. However, like many companies, we use advertising and analytics services that are intended to analyze your interactions with our Website, based on information obtained from cookies or other Trackers as further described in detail below, under the “Cookies and Other Tracking Technologies” Section 10, and as further detailed in our Cookie Preferences Center. Please note that these activities constitute “sharing” and “selling” website visitor information with third parties for the purpose of cross-context behavioral advertising (as defined in the CCPA), targeted advertising (as defined in other applicable US state laws) and website analytics purposes. Such third parties consist of analytics, marketing and search engine providers that assist us in the improvement and optimization of our websites and for marketing purposes. 

In particular we use Google Analytics to analyze how you use our Website so we can make our Website more useful for you and improve its design and functionality. For this purpose we process such categories of Personal Data as identifiers (unique personal identifier, online identifier, Internet Protocol address), internet activity information, including, but not limited to, browsing history, information regarding a consumer’s interaction with an internet website application, geolocation data. Such personal data is shared with the owner of analytics tool – Google Analytics by Alphabet.

You can opt out of such sale or share of your Personal Data by toggling the button labeled “Targeting Cookies” on the “Cookie Setting” button on our Cookie Preferences Center. In such a case you will opt out of sale or sharing your information collected via our website. Alternatively, you can use any of the other methods described above, under the “Cookies and Other Tracking Technologies” Section 10 below. 

In any case we do not sell or share Personal Data of Event Registrants  and/or other Personal Data which we process on behalf of our Customers as a Processor (service provider). This is not applicable to events hosted by Bizzabo where we are the data Controller.

Subject to certain limitations, the State Laws provide consumers the following rights: 

• Right to know what Personal Data is collected and the right to access Personal Data. you can request Personal Data we process about you, including the categories of Personal Data, categories of sources from which Personal Data is collected, purposes for collecting, selling or sharing Personal Data, the categories of third parties to whom we disclose Personal Data. you can request the specific pieces of personal information the business has collected about you. This may also include under certain laws the right to obtain the personal information in a portable and, to the extent technically feasible, readily usable format;
• Right to delete Personal Data;
• Right to correct inaccurate Personal Data;
• Right to opt out of sale or share of your Personal Data – the right to opt-out of the sale or sharing of your personal information, including from the use of your personal information for cross-contextual behavioral advertising, targeted advertising (as defined by applicable laws) or certain types of profiling that may lead to legal or substantially similar significant effects. Please note we do not engage in such types of profiling of individuals;  
• Limit Use of Sensitive Information – if we use or disclose sensitive personal information for reasons other than standard business purposes (such as purposes set forth in Section 7027, subsection (m) of the California Consumer Privacy Act Regulations), the right to limit the use or disclosure of your sensitive personal information. Please note we do not use sensitive personal information for such purposes.

Consumers may make requests to obtain a copy of or a representative summary of their personal data in a portable and to the extent technically practicable, readily usable format that allows the consumer to transmit the data or summary to another controller without hindrance.

To exercise your rights provided by State Laws and make requests, you can send an email to [email protected]. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf. Note that your rights cannot be exercised in a manner inconsistent with our rights, those of our staff, our proprietary rights, and/or third-party rights. Before we respond to your request, we may verify it your e-mail.

You will not be discriminated or receive discriminatory treatment for the exercise of your privacy rights.

If we decline to take action regarding your request we will inform you without undue delay, but in any case, not later than forty-five (45) days after receipt of your request. You will have the right to appeal our decision within forty-five (45) days after receipt of our decision. To appeal our decision please send an e-mail to Bizzabo’s Data Protection Officer at [email protected] explaining why you disagree with our decision. 

We will inform you of any action taken or not taken in response to your appeal and explain the reasons with forty-five (45) days after receipt of your appeal.

If we deny your appeal, you may be entitled to submit a complaint to Attorney General of your state. For more details how to submit an appeal and/or complaint Attorney General please contact our data privacy team at [email protected].

If you have any questions on our privacy policies, please contact us at [email protected].

Our California Do Not Track Notice

We do not currently respond or take any action with respect to web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personally identifiable information about an individual consumer’s online activities over time and across third-party web sites or online services. We will allow third parties, such as companies that provide us with analytics tools, to collect personally identifiable information about an individual consumer’s online activities over time and across different websites when a consumer uses the Services. We provide you a Cookie Settings button on our Cookie Preferences Center so you can make your choice about the information collected for advertising purposes by the third parties.

12. Children.

Summary: our Services are not intended to be used by children.

The Sites and Services are not intended for children sixteen (16) years of age or younger. Bizzabo does not market any products or services to children sixteen (16) years of age or younger, or knowingly collect, sell or share, as a Controller any Personal Data from children sixteen (16) years of age or younger. 

13. Choices and Opting Out (Marketing).

Summary: you can opt-out of marketing communications from us. 

When you choose not to provide information, this may affect your access to certain Services or prevent you from taking advantage of certain Site features offered by Bizzabo.

You may have consented to receive certain communications marketing or advertising of the Services and other products, in accordance with your marketing preferences. You can opt-out of receiving these marketing messages at any time by clicking on the “Unsubscribe” link at the bottom of any such message, or by contacting us at the email and/or mailing address provided in the “Contact Information” Section 17 of this Policy.

Customers may use our Services to send you emails and other electronic communications, if you are on their email subscription lists or have registered for one of their Events. Although these messages are sent using our Services, we don’t determine the content or recipients of these messages. You should contact the Customer directly, or click the “Unsubscribe” link provided in messages, if you no longer want to receive communications from that Customer.

Even if you have opted to “Unsubscribe” from certain types of messages, please be aware that emails and other communications that respond to your specific requests for information, or are provided as part of the Services you are still receiving, will be sent to you. Likewise, there are operational messages, such as technical and administrative communications, security notices, Service related reports, or policy change notices, which are a part of our Services and may not be opted out of.

14. Sensitive Information.

Summary: we do not generally process any Sensitive Information unless you are our Employee.

Where we are collecting, storing, and processing information on our own behalf, as a data Controller, we will not request any sensitive Personal Data such as your health history, race, religion, or sexual orientation. However, we do process health data of our employees in order to comply with our obligations as an employer, for example in relation to sick-leave and health and safety requirements. We request that you do not send us such sensitive Personal Data on or through the Sites, by email, or through any other means.

15. Data Transfers.

Summary: we transfer Personal Data to other countries using mechanisms to ensure that we can fulfil our obligations under GDPR and this Privacy Policy. 

Currently, we process information in the US, in Israel, in the UK and in the EU, including in sites operated and maintained by cloud-based service providers.

Whenever we transfer Personal Data out of the European Economic Area (EEA) to countries not deemed by the European Commission to provide an adequate level of personal information protection, the transfer will be made in compliance with GDPR Chapter V. We receive personal data in the USA in reliance on the Data Privacy Framework as detailed below. We may conduct onward transfers based on DPF or another mechanism, generally the Standard Contractual Clauses (“SCCs”) in the form issued as part of the EU Commission Decision (EU) 2021/914. In general, Bizzabo has no reason to believe that the laws and practices in the third country of destination applicable to the processing of the personal data by the data importer, including any requirements to disclose personal data or measures authorizing access by public authorities, prevent the data importer from fulfilling its obligations under the SCCs. Where required by EU law, an examination of that assessment is made on a case by case basis. 

The previous paragraph applies, with necessary changes, for transfers of Personal Data out of the UK. Such transfers are made in compliance with UK data protection laws, including where applicable subject to standard contractual clauses in force in the UK at the time of transfer. 

16. Data Protection Framework (DPF) Notice.

Bizzabo, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Bizzabo, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.  Bizzabo, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the DPF, Bizzabo, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal data.  EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the DPF may contact us directly using the contact information in Section 17 below, “Contact Information”. We will endeavor to respond to your inquiries and resolve your complaints expeditiously and at the latest within 45 days at no cost to you in accordance with the DPF Principles. 

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Bizzabo, Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the International Centre for Dispute Resolution American Arbitration Association (ICDR/AAA), an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit ICDR/AAA at the location listed below for more information or to file a complaint.  The services of the ICDR/AAA are provided at no cost to you.

ICDR/AAA Contact: 

Address: International Centre for Dispute Resolution American Arbitration Association, 1101 Laurel Oak Road, Suite 100 Voorhees, NJ, 08043, United States 

Website: https://go.adr.org/dpf_irm.html  

Email: [email protected]  

Phone: +1.856.435.6401  

Fax: +1.212.484.4178

Under certain conditions, a binding arbitration option may be available to you in order to address complaints not resolved by any other means. you may do so by delivering notice to us and following the procedures and conditions set forth in Annex I of the DPF Principles. For further information, please visit the DPF site at: https://www.dataprivacyframework.gov/. 

The Federal Trade Commission has jurisdiction over Bizzabo, Inc.’s compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

17. Contact Information.

Summary: you may contact us regarding any concern or question about privacy. If you are an Event Registrant, you should direct your questions to the Customer organizing the Event. 

Your privacy is important to us. If you have any questions or concerns about privacy at Bizzabo, please contact us, and we will try to answer your question or resolve any issues for you.

You may contact us using the following information:

Bizzabo Inc.

E-mail: [email protected] 

Phone: 

(Americas) 1-646-934-8814-BIZZ

(Outside Americas) +44 203-519-1489

Our Data Protection Officer may be emailed at [email protected], and contacted at the above address and phone.

If you have any questions or comments regarding our Privacy Policy, please contact Bizzabo Customer Support, using the information above. We take seriously any complaint, and it will be assessed by qualified staff with the goal of resolving it in a timely manner.

If you are an Event Registrant, please direct any questions you may have regarding your Personal Data to the Customer organizing the event, not to Bizzabo. As noted previously in this Privacy Policy, if you are an Event Registrant for an event organized by an Bizzabo Customer, Bizzabo processes your Personal Data on behalf of that Customer. The Customer is the Controller or your Personal Data as collected and processed by us, and determines what Personal Data to request from you, how it is used, with whom it may be shared, and for how long it is retained.

18. Amendments to Privacy Policy.

Summary: our website contains our most up to date Privacy Policy. 

Our business is constantly evolving and, therefore, our Privacy Policy may be updated from time to time to adapt to the changes in our Services, to the way Bizzabo operates, and to regulatory requirements. Please visit this section of the Website periodically to check for changes and updates to the Privacy Policy. If we make significant changes to this Privacy Policy, we may notify you either through the email address you have provided to us (unless you have instructed us not to), or by placing a prominent notice on our Website, or by other means. Unless reflecting a higher level of data protection, if we materially revise our Privacy Policy, we will provide notice prior to such revisions becoming effective. By continuing to access and use the Sites and/or any Service after such notice, you agree to our processing of Personal Data as described in our revised Privacy Policy.