Privacy policy

Who we are

Decarb Summits organizes the Decarb events and runs this website and its ticket checkout. We decide how the personal data described here is used, as its controller.

For any privacy question or request, write to info@decarbsummits.com.

What we collect

When you buy tickets: your name, email address and company, the names and email addresses of the people you buy for, and your answers to the event’s questions. Payments are handled by Stripe: your card details go straight to Stripe and never reach us.

When someone buys a ticket for you: your name and email address, which they give us so we can send you the ticket, and the details you add when you claim it.

When you ask to attend an event or sign up to stay in the loop: the details you type in the form and, if you agree to hear from us, the exact wording you agreed to.

When you speak at one of our events: the details, photo, biography and materials you give us in the speaker portal, and the recording of your session.

When you visit: which campaign brought you here — its campaign tags (UTM), the partner link or the website you came from. We keep it in your browser without any identifier, and count visits on our side without your IP address. If you then buy tickets, ask to attend or sign up to stay in the loop, that campaign is saved with your order, request or sign-up.

When you open one of our short links, we count the click. Your IP address and browser details are used only in memory, to tell unique clicks apart, and are never stored.

Why we use it

To issue and deliver your tickets and tell you about changes to the event: this is needed to perform our contract with you.

To send you news and use your image or recordings: only with your consent, which you can withdraw at any time.

To measure which campaigns bring visitors and keep the site secure: our legitimate interest, without identifying you while you browse. To object, opt out of Campaign measurement in Cookie settings, turn on Global Privacy Control in your browser (see below) or clear this site’s data; to remove the campaign saved with your order, request or sign-up, write to info@decarbsummits.com.

Cookies and similar technologies

Everything we store in your browser is necessary: the site and the checkout need it, so it is always on.

• decarb.consentDecarb Summits · Necessary · 6 months; an opt-out of Campaign measurement stays until you opt back inRemembers your cookie choice.
• decarb.attributionDecarb Summits · Necessary · 30 days after the last campaign visitRemembers which campaign brought you, without identifying you.
• decarb.visit-keyDecarb Summits · Necessary · Until you close the tabLinks the steps of one visit to the checkout.
• decarb.visit-eventsDecarb Summits · Necessary · Until you close the tabAvoids counting the same visit twice.
• decarb.couponDecarb Summits · Necessary · Until you close the tabApplies the coupon code from your link at checkout.
• decarb.pending-purchaseDecarb Summits · Necessary · Until the payment returns or the tab closesHolds the order total until the payment returns, so a completed purchase is reported once, without personal data, to the advertising and analytics services you accept.
• decarb_themeDecarb Summits · Necessary · 1 yearRemembers the light or dark theme of the staff back office; never set on the public site.
• __stripe_mid, __stripe_sidStripe · Necessary · 1 year (__stripe_mid); 30 minutes (__stripe_sid)Helps Stripe prevent fraud during payment.

Embedded content. The venue map is shown by Google Maps and loads only when you scroll near it: Google receives your IP address, browser details and this site’s address, and may set its own cookies. Gallery videos come from YouTube and Vimeo. Their preview images load with the page, from YouTube (i.ytimg.com) and Vimeo (i.vimeocdn.com), which receive your IP address, browser details and this site’s address. A player loads only when you start a video — YouTube in privacy-enhanced mode (youtube-nocookie.com), Vimeo with Do Not Track on (player.vimeo.com) — and may store data in your browser while it plays.

Bot protection. The request-to-attend form and the stay-in-the-loop form on event pages use Cloudflare Turnstile (challenges.cloudflare.com) to tell people from bots. When a page with one of these forms loads, Cloudflare receives your IP address and browser details, and again while the page stays open; when you send the form, we confirm the check with Cloudflare, which receives your IP address again — never your name, email address or answers. We do this on our legitimate interest in keeping the forms free of spam and abuse. Cloudflare handles this data under its Turnstile privacy addendum.

How long we keep it

Orders, payments and tickets, with the campaign saved with them: for as long as tax and accounting law requires.

Requests to attend that did not lead to a ticket, and stay-in-the-loop sign-ups without a purchase: deleted or anonymized after the periods in our retention schedule.

Visit records: 180 days. The campaign record in your browser: 30 days after the last campaign visit.

Your cookie choice: valid for 6 months; an opt-out of Campaign measurement stays until you opt back in.

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, to object to how we use it, and to withdraw any consent you gave. Write to info@decarbsummits.com, and we will answer within the time the law sets.

You can also complain to your data protection authority.

Global Privacy Control

If your browser sends the Global Privacy Control signal, we honor it without asking: we stop recording which campaign or website brought you. We still count visits and the steps toward a ticket, without the campaign.

Changing your choice

You can opt out of Campaign measurement, or opt back in, at any time in Cookie settings.