This policy describes how the “French Event Forum” community platform processes users’ personal data. It applies to all services accessible from the website and the community area.
1. Controllers, definitions and points of contact
Under the GDPR and French data protection law:
- The controller determines the purposes and means of the processing.
- The processor processes personal data on behalf of a controller.
- Joint controllers jointly determine the purposes and essential means of the processing.
The French Event Forum refers to the collaboration between inwink and the 14 co-organisers listed on the About page.
inwink and the co-organisers act as joint controllers for processing operations related to the organisation and monitoring of events, community engagement, and communications sent to participants. They jointly determine the purposes and essential means of these processing activities.
inwink also acts as an independent controller for processing necessary for the operation, maintenance, security and technical improvement of the platform.
inwink is the single point of contact for users regarding data protection and their rights. Requests may be sent to:
- Data Protection Officer (DPO): dpo@inwink.com
- Postal address: inwink, 33 rue du Faubourg Saint-Antoine, 75011 Paris, France
2. Data processed
The French Event Forum processes the following categories of personal data as part of the platform’s operation:
- Identification data: name, surname, company, role, profile picture.
- Contact data: email address, phone number, professional network identifiers such as LinkedIn.
- Usage data: logins, messages and content posted, interactions, participation statistics.
- Technical data: IP address, cookie identifiers, browser and device information.
3. Data recipients
Within their respective responsibilities and for the purposes described above:
- French Event Forum (inwink and the co-organisers): receives and processes identification, contact and usage data needed to manage registrations, communication, community engagement, and event organisation and follow-up.
- inwink as platform operator: also processes technical data necessary for operation, security and service improvement.
- Hosting provider: Microsoft Ireland Operations (Microsoft Azure).
- Technical service providers: emailing, analytics or monitoring tools, strictly for contracted services and under confidentiality and security agreements.
In accordance with Articles 13 and 14 of Regulation (EU) 2016/679, the categories of recipients, purposes and legal bases are detailed in the table below.
| Recipient category | Purpose | Legal basis |
|---|---|---|
| French Event Forum | User registration and account management | Contract performance |
| French Event Forum | Event organisation and follow-up | Contract performance |
| French Event Forum | Community engagement and participant networking | Legitimate interest |
| French Event Forum | Communication and information related to community management, including updates, notifications and messages from organisers | Legitimate interest for service-related communications; consent when required for non-essential communications |
| inwink | Statistical analysis and platform improvement | Legitimate interest |
| inwink | Site security and abuse prevention | Legitimate interest and, where applicable, legal obligation |
| Administrative, judicial or regulatory authorities | Legal and regulatory obligations | Legal obligation |
5. Retention periods
- Account and profile data: retained for the duration of platform use; deleted or anonymised after 24 months of inactivity.
- Community content and interactions: retained for the life of the account, then anonymised or deleted within 24 months.
- Event-related data and service communications: retained for the organisation and follow-up of the event; then subject to limited operational archiving and deleted no later than 36 months after the last relevant contact.
- Technical data and logs: retained 6 to 12 months for security and audit purposes.
- Non-essential cookies and analytics: retained according to applicable recommendations; audience measurement cookies do not exceed 13 months; consent stored for up to 6 months.
- Accounting documents, if invoicing applies: retained for up to 10 years as required by law.
6. Cookies and trackers
An information banner appears on first visit to allow acceptance or refusal of non-essential cookies. Preferences can be modified at any time. The categories of cookies used are described on the Cookie management policy page, updated consistently with this policy.
7. Security
The joint controllers implement appropriate technical and organisational measures to ensure a level of security suited to the risks, including access-rights management, encryption in transit, authentication mechanisms, backup and logging procedures, and contractual oversight of processors.
8. Your rights
In accordance with applicable law, you have rights of access, rectification, erasure, restriction, objection on legitimate grounds, portability when applicable, and the right to withdraw your consent at any time when processing relies on it.
You may exercise your rights by writing to dpo@inwink.com. A response will be provided within one month, extendable if necessary due to complexity or number of requests. Proof of identity may be required in case of reasonable doubt.
You also have the right to lodge a complaint with the CNIL.
9. Target audience
The platform is intended for event-industry professionals and is not designed for use by minors.
10. Policy updates
This policy may be updated to reflect legal, technical or organisational changes. The current version is the one published on this page.