Privacy Policy

WeAreDevelopers GmbH, Schottenfeldgasse 23, 1070 Vienna, Austria, operates the Websites, the Platform and our central systems (such as CRM, marketing and event systems) and is the controller for the associated processing, unless stated otherwise below. The company identified as the organiser of an Event (in the relevant registration, ticket or contract) is the controller for the processing connected with that Event:

We collect personal data that you provide to us, data generated when you use our services, and limited data from third parties. Depending on how you use our services, this may include:

We process personal data for the following purposes and on the following legal bases:

We use cookies and similar technologies (pixels, local storage, SDKs) on our Websites, grouped into the categories shown in our consent manager (currently: necessary services, for example for login, forms, support chat and consent storage; statistics services that help us understand how our Websites are used; marketing services for conversion measurement and retargeting on the internet and social media platforms; and social sharing and embedded media).

Only strictly necessary services run by default. Everything else is loaded only with your consent, which we collect and manage through our consent management platform, TRUENDO (Truendo Technologies GmbH, Vienna, Austria). The consent manager (“Manage Cookies” in the footer of our Websites) contains the current list of all cookies and similar tracking technologies used on our Websites, including their purposes, providers and storage durations, and is where you can adjust or withdraw your consent at any time. Cookies and the identifiers they contain (such as cookie IDs and IP addresses) can constitute personal data.

Where we use session replay or heatmap technology as part of our statistics services, it runs only with your consent, records interactions such as mouse movement, clicks and scrolling (with text you type into input fields masked), and is listed with its provider in the consent manager.

We operate server-side tagging on our own subdomain. This allows us to control and filter what data reaches third-party tools before it leaves our infrastructure.

Accounts and profiles: when you create an account, we process your registration and profile data to operate your account, personalise your experience and provide the features you use. If you sign in via a third-party login provider, we receive the profile data you authorise that provider to share (typically name, email address, profile picture).

Content you publish: you may be able to publish content on the Platform, such as talks, session recordings, articles or comments. Content you publish, together with your name and profile information, is visible to other users or the public, depending on the feature and your settings. The publication of recordings of sessions you present is governed by the terms you accept when you present or upload them.

Features that connect you with companies: some of our features are designed to connect you with companies, for example applying to a job, requesting information about a product or service, registering for a partner offer or workshop, or entering a promotion run together with a partner. Where you use such a feature, we share the data necessary for that purpose with the respective company, which processes it as an independent controller under its own privacy policy. We tell you at the point of use which company will receive your data. If you are a company representative, your name and business contact details may be visible to the users you interact with.

Surveys, promotions and competitions: if you participate, we process your entry to run the activity, notify winners and comply with legal obligations. Specific conditions are provided with the respective activity.

When you register for an Event, we process your registration data to issue your ticket, manage attendance and provide the Event. If your ticket was purchased by your employer or a colleague, we receive your data from them. Ticketing and payments are handled by service providers acting on our behalf (Section 8); we do not store full payment card numbers.

We provide an official event app as part of our Platform, operated by us on our own domains. If you activate networking features, your profile (name, job title, company and any details you add) is visible to other participants, and you can exchange messages and meeting requests. You control your visibility in the app settings.

Sponsors and exhibitors at our Events may use lead-capture tools to scan attendee badges. When you allow a sponsor or exhibitor to scan your badge (at a booth, at a session where scanning is enabled, or by presenting your badge), you consent to us transferring your registration profile data (such as name, email address, job title, company, country) to that sponsor or exhibitor.

Ordinary event entry or attendance alone is never treated as consent to sponsor marketing. Presenting your badge for scanning is always voluntary, and the scanning interface or on-site information identifies the sponsor receiving your data.

The sponsor or exhibitor receives this data as an independent controller and processes it under its own privacy policy, typically to follow up with you about its products and services. You can withdraw consent for future transfers at any time; withdrawal does not affect data already transferred, but you can exercise your rights (including objection to marketing) directly with the respective sponsor or with us. You can also request a list of the sponsors that scanned your badge.

If you submit a session proposal, we process your submission through our call-for-papers and speaker management tools. If you speak at an Event, we process your speaker profile, publish it on our Websites, the Platform and our marketing channels, and record your session (video and audio). Recordings and speaker materials may be published and promoted on the Platform, our Websites and our channels on third-party platforms.

Our Events are public, documented events. We (and photographers and film crews engaged by us) take photographs and video recordings at our Events for documentation and for the marketing of WeAreDevelopers, our services and future events, across our own and third-party channels. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in documenting and promoting our Events. In addition, the image-rights law of the country in which an Event takes place may apply.

We instruct our teams to focus on the overall event experience, crowds, stages and public areas rather than portraying individuals prominently without context. If you do not want to appear in specific material, contact our on-site team or privacy@wearedevelopers.com and we will take reasonable steps to avoid or remove footage in which you are prominently and identifiably depicted. Sponsors and other attendees may also take photos; we are not the controller for their recordings.

We process badge and entry data for access control and capacity management, and we may process incident-related data to enforce our Code of Conduct and protect the safety of participants and staff (Art. 6(1)(f) GDPR). Venue operators may operate their own security systems, including CCTV, as independent controllers under their own privacy policies; we do not operate such systems ourselves without notice.

Our Events include changing formats and activities, such as workshops, hackathons, competitions, community and side events, meetups and partner activations. The principles in this Section 7 apply to all of them. Where a specific format or activity involves additional data processing beyond what is described here (for example a competition with its own conditions, or an activity run together with a partner who receives your data), we inform you at the point of registration or participation.

Marketing by us: we send newsletters, messages, and marketing emails based on your consent, or, where permitted by law, to existing customers for our own similar products and services with an opt-out. Every marketing email contains an unsubscribe link; we measure opens and clicks to improve our campaigns, and you can object to this measurement by unsubscribing. For business representatives (for example potential sponsors, partners or employers), we process business contact data in our CRM and may contact you about our B2B offerings based on our legitimate interest in direct marketing and, for electronic communications, in accordance with applicable electronic-marketing rules; you can object at any time.

We share personal data only with the following categories of recipients, in each case limited to what is necessary:

Some of our service providers and affiliated companies are located outside the European Economic Area, in particular in the United States. Where we transfer personal data to the US, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR), supplemented where necessary by additional safeguards. For other third countries, we rely on adequacy decisions or Standard Contractual Clauses. You can request information about the safeguards applicable to a specific transfer via privacy@wearedevelopers.com.

We keep personal data only as long as necessary for the purpose it was collected for, and thereafter as required by statutory retention obligations or for the establishment, exercise or defence of legal claims. The following standard periods and criteria apply, unless a specific legal obligation, an ongoing legal dispute or another legitimate need requires otherwise:

Under the GDPR you have the right to:

We use automated systems, which may include machine-learning and AI models, for two main purposes. First, to make our services relevant: search, recommendations and personalisation may combine your profile data, preferences you choose and interaction signals (such as views, clicks, saves and searches) to rank and suggest content, events, jobs, companies or other opportunities. Second, for advertising: we build audience segments for our own marketing campaigns based on consent or legitimate interest as described in Section 4. We also use automated systems to detect spam, fraud and abuse.

These systems affect the relevance and ordering of what you see. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Where external AI providers process personal data on our behalf, they act as processors under contract, and we do not permit them to use your personal data to train their general-purpose models unless we have specifically disclosed this and have a lawful basis. You can object to profiling based on legitimate interests and withdraw any consent at any time (Section 11).

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and role-based permissions, logging, vendor due diligence and data processing agreements, and staff confidentiality obligations. No system is perfectly secure; we maintain incident response processes and will notify you and the competent authority of personal data breaches where legally required.

Our services are directed at professionals and are not intended for persons under 18. Where a specific service or Event permits participation by younger persons (for example accompanied minors or student offers), we state the applicable conditions and provide the relevant information at the point of registration. Otherwise, we do not knowingly collect personal data from persons under 18; if we become aware of such data, we will delete it.

If you are a resident of a US state whose privacy law applies to you and grants you rights such as access, correction, deletion or opting out of targeted advertising, you can exercise these rights via privacy@wearedevelopers.com and manage advertising cookies via the “Manage Cookies” link on our Websites.

For users in India, we process digital personal data in line with the Indian Digital Personal Data Protection Act, 2023 and its rules as they enter into force. Where we rely on consent, you may withdraw it at any time. For grievances relating to your personal data, contact privacy@wearedevelopers.com ; we will designate further contact points and mechanisms as required under this framework.

We review this Privacy Policy regularly and update it when our processing, our services or the law change. The current version, including its “Last updated” date, is always available on our Websites. For material changes affecting you (for example new purposes), we will inform you appropriately, for example by email or a notice on the Websites.

WeAreDevelopers GmbH

Schottenfeldgasse 23, 1070 Vienna, Austria

privacy@wearedevelopers.com

*Last updated: July 31, 2026*