Imprint & Privacy

Last updated: 27 August 2026

This Privacy Policy explains how personal data is collected, processed and used when you visit this website, subscribe to our newsletter, apply for or attend the AI Summit Kitzbühel events, or interact with us in any other way.

1. Controller

The controller responsible for data processing is:

Stellenberg AI Summit GmbH
Pass-Thurn-Straße 22
6372 Oberndorf in Tirol
Austria

Managing Director: Lena Weyerhäuser
Commercial register number: FN 677431 y, Landesgericht Innsbruck
VAT identification number: ATU83189924

Email: privacy@ai-summit.at
Website: https://ai-summit.at

We have not appointed a data protection officer, as we are not legally required to do so.

2. Scope of this Policy

This Policy applies to this website, to our newsletter, to our event application and ticketing processes, to our event web application, and to both events of the AI Summit Kitzbühel series: the Executive Winter AI Summit and the Summer AI Summit. It also applies to our presence on LinkedIn to the extent described in section 20.

3. Legal Bases

Depending on the processing activity, we rely on the following legal bases under the General Data Protection Regulation (GDPR):

Art. 6 (1) (a) GDPR, consent, for example for the newsletter, for non-essential cookies and where you consent to sharing your data with event partners.

Art. 6 (1) (b) GDPR, performance of a contract or pre-contractual measures, for example for ticket purchases, event participation, applications and enquiries.

Art. 6 (1) (c) GDPR, compliance with a legal obligation, for example for the retention of invoices under tax law.

Art. 6 (1) (f) GDPR, legitimate interests, for example for the secure operation of this website, event documentation and the communication and promotion of current and future events.

Where we rely on legitimate interests, you have the right to object under Art. 21 GDPR. See section 24.

4. Hosting and Server Log Files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, acting as our processor under a data processing agreement pursuant to Art. 28 GDPR. Data is stored on servers within the European Union.

When you access this website, the following data may automatically be transmitted by your browser and stored in server log files:

• IP address
• Date and time of access
• Name and URL of the file accessed
• Referring website
• Browser type and version
• Operating system
• Transferred data volume

This processing is necessary for the delivery, stability and security of the website. Legal basis is Art. 6 (1) (f) GDPR.

Server log files containing non-anonymised IP addresses are retained for a maximum of 7 days. After this period, IP addresses are anonymised. Anonymised web server data may remain available for statistical purposes for up to 6 weeks.

5. Cookies and Consent Management

We use cookies and comparable technologies on this website.

Technologies that are strictly necessary for the operation of the website may be used without consent where permitted by applicable law. All other cookies and technologies, in particular those used for statistics, marketing and remarketing, are only activated after you have given your consent.

Legal basis for consent-based processing is Art. 6 (1) (a) GDPR in conjunction with § 165 (3) Austrian Telecommunications Act (TKG 2021).

To obtain and document your consent, we use the consent management platform CookieYes, provided by CookieYes Limited, 3 Warple Mews, London W3 0RF, United Kingdom. CookieYes stores your consent decision together with a consent ID, the date and time, the scope of your consent and technical information about your device.

You can withdraw or change your consent at any time with effect for the future via the cookie settings on this website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Google Tag Manager

We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage the tools listed below and activates consent-based services only in accordance with the consent settings applicable to those services.

7. Google Analytics 4

Subject to your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited.

Google Analytics uses cookies and similar technologies to analyse how visitors use this website. The information generated may be transmitted to Google and used to compile reports on website activity.

Purpose: analysis and improvement of our website and event marketing.

Legal basis: Art. 6 (1) (a) GDPR.

We use Google Consent Mode to communicate users’ consent choices to Google services.

8. Google Ads Conversion Tracking and Remarketing

Subject to your consent, we use Google Ads to measure the success of our advertising campaigns and to display advertisements to users who have previously visited this website.

For this purpose, Google may use cookies and comparable technologies that allow us to measure whether an advertisement led to a ticket purchase, application or another relevant action.

Purpose: measurement and optimisation of advertising and remarketing.

Legal basis: Art. 6 (1) (a) GDPR.

9. Meta Pixel

Subject to your consent, we use the Meta Pixel, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

The Meta Pixel allows us to measure the effectiveness of advertising on Facebook and Instagram and to address previous website visitors with advertising. Events transmitted may include page views and, where applicable, the initiation and completion of a ticket purchase or application.

For the collection and transmission of certain data through the Meta Pixel, we and Meta Platforms Ireland Limited may act as joint controllers within the meaning of Art. 26 GDPR. Meta is responsible for subsequent processing within its services in accordance with its own privacy information.

Purpose: advertising measurement and targeted advertising.

Legal basis: Art. 6 (1) (a) GDPR.

10. Contacting Us by Email

Our website does not offer a general contact form. If you contact us by email, for example via info@ai-summit.at, media@ai-summit.at, partner@ai-summit.at or privacy@ai-summit.at, we process your email address, your name and the content of your message in order to handle your enquiry.

Legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR, based on our legitimate interest in responding to enquiries.

Our email provider processes data on our behalf where applicable.

11. Newsletter

You can subscribe to our newsletter to receive information about the AI Summit Kitzbühel events, programme updates, speakers, partners and ticket sales.

We use the double opt-in procedure. After you enter your email address, we send you a confirmation email. Your subscription only becomes active once you click the confirmation link. We store information about registration and confirmation in order to document your consent.

The newsletter is sent using HubSpot, a service of HubSpot Ireland Limited, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland, acting as our processor.

HubSpot may measure whether newsletters are opened and which links are clicked. We use this information to analyse and improve our communications.

Legal basis: Art. 6 (1) (a) GDPR.

You can unsubscribe at any time using the link at the end of every newsletter or by writing to privacy@ai-summit.at.

After you unsubscribe, we may retain your email address on a suppression list to ensure that you do not receive further newsletters and retain records of your consent where necessary for evidence purposes.

12. Ticket Purchase

When you purchase a ticket for one of our events, we process data including:

• First and last name
• Job title
• Company
• Email address
• Billing address
• Payment-related information
• Any additional information you provide during the ordering process

Purpose: conclusion and performance of the ticket contract, invoicing, event administration and communication about the event.

Legal basis: Art. 6 (1) (b) GDPR and, where applicable, Art. 6 (1) (c) GDPR for legally required records.

Providing the required data is necessary for the conclusion of the contract. Without it, we cannot issue a ticket.

13. Payment Processing

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

When you pay, payment-related data is transmitted to Stripe. We do not receive or store your full card details.

Stripe may process personal data as an independent controller for certain aspects of the payment transaction and may transfer data to affiliated companies or service providers outside the EEA.

Legal basis for processing necessary to complete your payment is Art. 6 (1) (b) GDPR.

14. Application Process for the Executive Winter AI Summit

The Executive Winter AI Summit has a limited number of places. Participation is by invitation or successful application rather than unrestricted ticket purchase.

When you apply, we process the following data:

• First name
• Last name
• Email address
• Company
• Job title
• LinkedIn profile, where provided

Providing your LinkedIn profile is voluntary. It helps our team assess your professional background in connection with the participant profile of the event. If you do not provide it, this alone will not lead to rejection or other disadvantage.

The LinkedIn profile is used in connection with the application process and is not passed on to partners or sponsors.

Applications are reviewed by our team against defined criteria. Decisions are made by people. We do not use automated decision-making within the meaning of Art. 22 GDPR.

Legal basis for processing necessary to assess and administer your application is Art. 6 (1) (b) GDPR.

If your application is not successful, we delete your application data after twelve months unless another legal basis requires or permits longer storage, or you have separately consented to other processing such as receiving our newsletter.

15. Event Participation

In connection with your participation in one of our events, we process your name, company, job title, email address and other information required to organise admission, produce badges, manage session and side-event capacities and communicate with you about the event.

Your name, company and job title may appear on your badge and are therefore visible to other participants on site.

Legal basis: Art. 6 (1) (b) GDPR.

16. Badge Scanning and Lead Retrieval

At our events, partners and sponsors may offer badge scanning for professional networking and follow-up.

A badge is only scanned when the attendee actively presents it for scanning. Before data is shared, attendees are informed that scanning results in the relevant contact information being provided to the respective partner.

Depending on the event setup, this may include:

• First and last name
• Company
• Job title
• Email address

The purpose is professional networking and subsequent communication by the respective partner concerning relevant products, services, technologies or business opportunities.

Where consent is the applicable legal basis, processing is based on Art. 6 (1) (a) GDPR.

Partners and sponsors receiving the data act as independent controllers for their subsequent processing. Their own privacy information applies. We do not sell participant data.

For badge scanning and lead retrieval, we currently use Flock, operated by Flock Platform (Pty) Ltd, South Africa, as a service provider. We may use another specialised provider for future events. The provider applicable to a particular event will be identified in the event-specific information where required.

We may also record session attendance where necessary to manage room capacities and understand programme usage. Where this information is used for programme analysis, we aim to evaluate it in aggregated form.

17. Event Web Application

We provide an event web application in which participants can view the programme, session details, speaker information and partner profiles. Depending on the event, additional functions such as networking, messaging or personal schedules may be available.

Use of optional networking and profile functions is voluntary.

Depending on the functions used, we process information entered by participants as well as technical usage data. If networking or messaging functions are activated, we process the profile information participants choose to make visible and the content required to provide those functions.

Legal basis is Art. 6 (1) (b) GDPR where processing is necessary to provide event services to registered participants. Optional functions may additionally be based on consent under Art. 6 (1) (a) GDPR where required.

We currently use Flock, operated by Flock Platform (Pty) Ltd, South Africa, as the provider of our event application. The provider may change for future events. Where another provider is used, this Privacy Policy or the relevant event information will be updated accordingly.

18. Photography, Video and Live Streaming

Photographs and video recordings are taken at our events for documentation, editorial, press and marketing purposes. Individual sessions may also be recorded or live streamed.

Recordings may be published on our website, social media channels, newsletters, promotional materials and in connection with press coverage. We also use selected photographs and recordings from previous editions to communicate and promote future AI Summit Kitzbühel events.

Legal basis is Art. 6 (1) (f) GDPR, based on our legitimate interest in documenting our events and communicating and promoting current and future editions, taking into account applicable personality and image rights, including § 78 Austrian Copyright Act (UrhG).

Our legitimate interest includes maintaining a visual record of the AI Summit Kitzbühel and using suitable event photography and recordings to provide an authentic impression of previous editions, their atmosphere, speakers and participants when communicating future events. As the AI Summit Kitzbühel is a recurring event series, photographs and recordings from previous editions may remain relevant for this purpose for several years.

We inform participants in advance that photography and filming take place at our events. Areas in which live streaming or dedicated recordings take place may additionally be marked on site.

If you do not wish to appear in photographs or recordings, you can inform our team on site or contact us before or after the event at privacy@ai-summit.at. We will take reasonable steps to respect your request and, where reasonably possible, avoid or remove identifiable recordings of you from future use on channels under our control.

Photographers and video teams may work for us as processors or, depending on the circumstances, as independent controllers.

Selected photographs and video recordings may be retained for several years where they continue to be relevant for documenting the history of the AI Summit Kitzbühel or for communicating and promoting future editions. We periodically review whether continued storage and use remain necessary and appropriate. Material that is no longer relevant for these purposes will be deleted or no longer actively used where appropriate.

19. Partners, Sponsors and Speakers

If you represent a partner, sponsor or speaker, we process your contact and professional data, including name, job title, company, email address, telephone number and, where provided, your photograph and biography, in order to prepare and perform our cooperation and present you in connection with the event.

Legal basis is Art. 6 (1) (b) GDPR for processing necessary to perform an agreement and Art. 6 (1) (f) GDPR where processing serves our legitimate interest in presenting and organising the event.

Sponsorship relationships for our events are partly managed by AI Summit Management LLC, 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, United States.

Where AI Summit Management LLC processes sponsor contact information for its own purposes, it acts as an independent controller. Participant data is not routinely transmitted to AI Summit Management LLC for this purpose.

20. Social Media

We maintain a company page on LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

When you visit or interact with our page, LinkedIn processes personal data according to its own privacy information. For certain page statistics, we and LinkedIn may act as joint controllers within the meaning of Art. 26 GDPR.

We receive aggregated statistics about use of our company page.

Legal basis for our processing is Art. 6 (1) (f) GDPR.

21. Customer Relationship Management

We use HubSpot as our central system for managing contacts, enquiries, applications, ticket buyers, partners and newsletter recipients.

HubSpot Ireland Limited acts as our processor where it processes personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

22. Transfers to Third Countries

Some service providers named in this Policy are established outside the European Economic Area or use affiliates, infrastructure or sub-processors located outside the EEA.

Where the European Commission has adopted an adequacy decision for the relevant recipient or country, data may be transferred on that basis.

Where no applicable adequacy decision exists, transfers are made using appropriate safeguards under Art. 46 GDPR, in particular the European Commission’s Standard Contractual Clauses, supplemented by additional safeguards where required.

This applies in particular where personal data is processed by service providers located in countries outside the EEA for which no adequacy decision applies.

23. Retention Periods

We store personal data only for as long as necessary for the purposes described in this Policy or as required by law.

Our general retention criteria and periods include:

• Server log files: non-anonymised IP addresses for a maximum of 7 days; anonymised web server data may remain available for statistical purposes for up to 6 weeks
• Cookie consent records: according to the retention settings of our consent management system and as necessary to demonstrate consent
• Newsletter data: until you unsubscribe; records necessary to demonstrate consent may be retained for an additional period
• Email enquiries: generally up to three years after the enquiry has been dealt with, unless longer retention is necessary
• Invoices and accounting records: according to applicable statutory retention requirements, generally seven years
• Unsuccessful event applications: twelve months after the decision
• Participant data without a newsletter subscription: generally up to 24 months after the relevant event, unless longer retention is necessary for another stated purpose
• Lead data from badge scanning retained by us: generally up to twelve months after the event
• Photographs and video recordings: for as long as they remain relevant for event documentation, historical records or the communication and promotion of current and future AI Summit Kitzbühel events, subject to periodic review

After the relevant retention period or purpose ends, personal data is deleted or anonymised unless continued storage is legally required or otherwise permitted.

24. Your Rights

Under the GDPR, you may have the following rights, subject to the applicable legal requirements:

• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure, Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Right to data portability, Art. 20 GDPR
• Right to object to processing based on legitimate interests, Art. 21 GDPR
• Right to withdraw consent at any time with effect for the future, Art. 7 (3) GDPR

To exercise these rights, please write to privacy@ai-summit.at.

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for us is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

25. Obligation to Provide Data

You are not generally legally obliged to provide us with personal data.

However, certain information is necessary in order to conclude or perform a contract with us, process an event application or provide event services.

Fields marked as optional can be left blank unless otherwise stated.

26. Automated Decision-Making

We do not use automated decision-making within the meaning of Art. 22 GDPR for admission to our events.

27. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

These measures include encrypted transmission of this website using TLS and access controls for our systems.

28. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, service providers, technologies or legal requirements.

The current version is always available on this website. The date of the last update is shown at the top.