This privacy information explains how conui GmbH processes personal data in connection with InnoDays, including participant applications and registrations, mentor involvement, challenge collaboration, event communication, media documentation, and use of the InnoDays website.
1. Controller
conui GmbH
Austraße 96
6800 Feldkirch
Austria
UID: ATU72781849
Email: hello@conui.org
conui GmbH is the controller responsible for the processing of personal data described in this privacy notice.
We have not appointed a data protection officer.
2. Who this privacy notice applies to
This privacy notice applies to:
- participants, applicants, attendees, finalists, and winners
- mentors, coaches, experts, jury members, and speakers
- challenge partner contacts
- website visitors
3. Data We Collect
Depending on your role, we may process the following categories of personal data:
Participant data
- name
- email address
- phone number
- university, company, or organization
- challenge preferences
- application and registration information
- team allocation and participation status
- profile information you provide, including links such as LinkedIn or CV
- communications with us
- introductory or inspiration videos
- event submissions and work results such as pitches, decks, prototypes, boards, and other materials
Mentor data
- name
- employer or organization
- biography or profile information
- email address
- photo
- LinkedIn profile link
- communications with us
- information relating to mentoring assignments and participation
Event media
- photos
- video recordings
- audio recordings where applicable
- recordings of online sessions
- publicly presented finalist pitches and related documentation
Website and technical data
- IP address
- browser and device information
- access logs
- website usage and analytics data
- cookie-related information where applicable
Source of personal data
We usually receive personal data directly from you when you apply, register, or communicate with us. In some cases, data may be provided by universities, organizations, or challenge partners who nominate or register participants or mentors, or may be taken from publicly available professional sources such as LinkedIn where relevant for mentor or speaker coordination.
4. Purpose of Processing
We process your data for the following specific purposes:
- Managing participation and event logistics (including catering and apparel)
- Team formation and facilitating collaboration
- Judging and awarding prizes
- Challenge follow-up and showcasing work results
- Talent/recruiting contact by participating partners
- Promoting the event through public materials and archiving outcomes
- Analyzing website usage and improving our services
The legal basis is:
Article 6(1)(b) GDPR (contract performance)
Article 6(1)(a) GDPR (your consent)
Article 6(1)(f) GDPR (legitimate interest for communication, promotion, and security)
5. Data Sharing & Independent Controllers
To facilitate the InnoDays, we share data with specific partners e.g. Event Partners, Challenge Partners, and Challenge Sponsors These partners process the data they receive under their own responsibility and in accordance with their own privacy information.
We share data with the following recipients:
- Event Partners: We share work results, names, and contact data to ensure the successful execution and follow-up of the event.
- Challenge Partners: We share work results, names, and contact data to facilitate collaboration on specific challenges.
- Challenge Sponsors: We share work results, names, and contact data. Challenge Sponsors are defined as entities contributing significantly to the overall or a specific challenge (this excludes general logistics or food sponsors).
- Mentors & Jury Members: We share work results as well as information regarding your professional background and skills to allow for qualified mentoring and judging.
- Service Providers: We share technical data with providers that help us manage the event (e.g., Airtable for data management, email platforms, and cloud hosting). These providers are contractually bound to process data only according to our instructions.
Certain materials are intentionally visible within the event environment. For example, Miro boards may be visible to all participants and mentors within a challenge category.
6. Media Use
We may create and use photos and videos of the event for documentation and communication about InnoDays, including on our website, social media, presentations, and similar channels. We rely on our legitimate interest under Art. 6(1)(f) GDPR to document and communicate about the event. This contents the use of:
- Photos and videos taken during the EVENT
- Your name and team results in publicity material
If you do not wish for your likeness to appear in media, you may opt out during registration or by emailing us at hello@conui.org. We will take reasonable measures to respect your preference.
Inspiration videos are only shared within the scope of the EVENT and not used for external promotion without separate explicit consent.
7. International data transfers
Some of the tools we use may involve processing of personal data outside the European Economic Area, especially where providers are based in or connected to the United States. This may affect services such as Google, Airtable, Miro, WhatsApp, Zoom, and Microsoft services, depending on the exact product configuration and hosting setup.
Where personal data is transferred outside the EEA, we aim to ensure an appropriate transfer mechanism under the GDPR, for example:
- an adequacy decision, such as the EU-U.S. Data Privacy Framework where applicable, or
- the European Commission’s Standard Contractual Clauses
The European Commission explains that personal data may flow to U.S. organizations participating in the EU-U.S. Data Privacy Framework, while other international transfers may rely on safeguards such as SCCs.
8. Are you required to provide personal data?
Some personal data is necessary in order to apply for, participate in, mentor, or coordinate InnoDays. If you do not provide required information, we may not be able to process your registration, assign you to a challenge, coordinate your mentoring role, or enable participation in certain parts of the event.
Where information is optional, providing it is voluntary.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this notice, and where needed for documentation, legal defense, or follow-up related to the event:
- registration and participant records: 24 months after the relevant event cycle
- mentor records: 24 months after the relevant event cycle
- introductory or inspiration videos: 24 months after the relevant event cycle
- general communication records: 24 months after the relevant event cycle
- pitch decks, prototypes, Miro boards, and similar work results: up to 24 months after the event cycle, unless longer retention is justified by ongoing collaboration, documentation, or legal reasons
- jury or evaluation records: up to 24 months after the event cycle
- mailing and contact lists: until objection, deletion request, or until no longer needed for the relevant relationship
- photos and event videos used for communication or archive purposes: for as long as they remain relevant for documentation, communication, and institutional archive purposes, unless a valid objection requires earlier deletion
- technical logs and analytics data: according to operational necessity and the tool settings in use
10. Your Rights
You have the right, subject to the applicable legal conditions, to:
- access your personal data
- request rectification of inaccurate data
- request erasure of your data
- request restriction of processing
- object to processing based on legitimate interests
- receive data portability where applicable
- withdraw consent at any time with effect for the future, where processing is based on consent
You also have the right to lodge a complaint with a supervisory authority. In Austria, the competent authority is the Österreichische Datenschutzbehörde.
To exercise your rights, contact: hello@conui.org
11. Right to object
Where we process personal data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right to object on grounds relating to your particular situation.
If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.
12. Analytics & Cookies
We use cookies and tools such as Google Analytics to understand how our website is used and to improve it.
Where legally required, non-essential cookies and analytics tools are only activated after you provide consent via our cookie banner.
You can change or withdraw your cookie preferences at any time through the cookie settings on our website.
13. Security
We use appropriate technical and organizational measures to ensure your personal data is secure and protected from unauthorized access, loss, or misuse.
14. Changes to this privacy notice
We may update this privacy notice from time to time to reflect legal, technical, or organizational changes. The latest version will always be published on the InnoDays website.
15. Contact
Controller: conui GmbH
Austraße 96, 6800 Feldkirch, Austria
Email: hello@conui.org
Last updated: April 2026