Loading...

Privacy Notice

30 July 2026

Index

  1. Controller and Data Protection Officer
  2. Processing of Personal Data
    2.1. Visiting this Registration Page
    2.2. Registration and Use of the Networking and Matching Service
    2.3. Creation and Disclosure of the Personalised Networking Card
    2.4. QR Code Access, Attendee Overview and Event Survey
  3. Integration of Third-Party Providers
    3.1. Processors (Technical Service Providers)
    3.2. Event Organiser (Independent Controller)
    3.3. Event App Provider (Independent Controller)
    3.4. LinkedIn (Independent Controller)
    3.5. Further Third-Party Providers Based on Separate Consent
  4. Your Rights
  5. Automated Decision-Making and Profiling
  6. Changes to this Privacy Notice

1. Controller and Data Protection Officer

The responsible data controller for the processing of personal data on this registration page and the functionalities made available through it is:

Diphy Limited
66, Paul Street, London, EC2A 4NA, UK

Email: privacy@diphy.ai
(hereinafter: "Diphy", "we" or "us")

The company is not obliged to appoint a data protection officer.

2. Processing of Personal Data

Below you will find an overview of the processing activities in connection with the use of our registration page and the services offered through it.

In order to provide and continuously improve our services, we also make use of services provided by third-party providers, which may involve the processing of personal data. We have carefully selected these third-party providers in accordance with the provisions of the General Data Protection Regulation ("GDPR"). Unless otherwise indicated, only those employees of ours or of the third-party providers who are entrusted with performing the relevant functionality have access to your personal data. Your personal data is generally stored for the duration determined by us with regard to the fulfilment of the relevant tasks, having regard to commercial and tax law requirements, and is deleted thereafter. Insofar as personal data is transferred in this context to recipients outside the European Economic Area, to countries for which the European Commission has not issued an adequacy decision (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en), the transfer is safeguarded by means of the EU Standard Contractual Clauses, which ensure that the processing of personal data is subject to a level of security equivalent to that required under the GDPR. Where the Standard Contractual Clauses are not sufficient to establish an adequate level of security, your consent will be obtained in advance in accordance with Art. 49(1)(a) GDPR as part of the consent management system.

We process the personal data of our users only within the scope of applicable statutory provisions, in particular the GDPR.

To provide and improve our services, we may in part use artificial intelligence (AI) technologies, in particular in connection with the algorithmic calculation of matching suggestions. The use of such technologies is always carried out in accordance with applicable data protection law, in particular the GDPR, and exclusively on the basis of the legal bases set out in this privacy notice. We ensure that appropriate technical and organisational measures are implemented to safeguard the protection of your personal data also when using AI technologies.

2.1. Visiting this Registration Page

When merely using this registration page, i.e. if you do not register or otherwise transmit data or information to us, we only collect such data as your browser transmits to our server (so-called "server log files"). Accordingly, when you access our registration page, we collect the following data, which is technically necessary for us to display the registration page to you:

  • The page you visited
  • Date and time of access
  • Amount of data transmitted in bytes
  • Source/referrer from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used

This processing is carried out on the basis of your use of our registration page and our interest in improving the stability and functionality of our page pursuant to Art. 6(1)(f) GDPR as well as Art. 6(1)(b) GDPR. We process your data in order to provide you with a functioning registration page, store the data for the duration we have determined for this purpose, and delete your data thereafter.

2.2. Registration and Use of the Networking and Matching Service

As a visitor or attendee of events, Diphy offers you a service to support structured networking and matching. Attendees receive a registration link from the respective event organiser, through which they can register on Diphy's registration page. Based on the data provided during registration on our registration page and the publicly accessible information in the LinkedIn profile made available by the attendee, Diphy algorithmically curates networking suggestions ("Matches”) for each attendee in relation to other attendees.

In connection with registration on our registration page and the matching process, we process the following personal data:

  • First name and last name
  • Email address
  • LinkedIn profile URL
  • Publicly accessible LinkedIn profile data (e.g. professional background, current position, company, skills, interests and, where applicable, other publicly visible profile information)
  • Stated networking goal (selection from predefined options: e.g. identifying business opportunities / expanding professional network / gaining knowledge)
  • Networking style and preference (selection from predefined options: e.g. structured conversations / spontaneous conversations)
  • Reason for attending (optional free text, up to 500 characters)
  • Additional data provided in free text

We process this data for the following purposes:

  • Creating an individual attendee profile for the respective event.
  • Algorithmic calculation of personalised networking matching suggestions based on the data provided and the LinkedIn profile data.
  • Creating a personalised networking card (as a PDF document) containing your matches and an individualised QR code.
  • Disclosing the networking card to the event organiser for printing and distribution to attendees.
  • Making your profile and your LinkedIn profile visible to other registered attendees of this event as part of the attendee overview (after QR code access and completion of the survey).

The processing is primarily based on your explicit consent pursuant to Art. 6(1)(a) GDPR, which you provide during registration on our registration page by actively ticking the corresponding checkbox. Consent is given voluntarily; however, without it, Diphy's networking and matching service cannot be used.

Insofar as the processing is necessary for the provision of the networking and matching service you have requested as part of the registration on our registration page, we may also rely on Art. 6(1)(b) GDPR, as the processing to this extent is necessary for the performance of pre-contractual measures taken at your request and for the performance of the contract.

The data collected from you during registration on our registration page will be stored after the event for a period necessary to fulfil the aforementioned purposes and will thereafter be deleted or irrevocably anonymised, unless statutory retention obligations preclude this. If you withdraw your consent, your data will be deleted without undue delay, unless another legal basis exists for further processing.

2.3. Creation and Disclosure of the Personalised Networking Card

To create your personalised networking card, we process your master data (first name, last name), your matching results and an individualised QR code generated for you. The finished networking card is created as a PDF document.

The networking cards created as PDF documents are transmitted to the event organiser, who prints the cards for the event and distributes them to attendees. Insofar as personal data (your name, your matching results and your QR code) is disclosed to the event organiser in this context, this is based on your consent pursuant to Art. 6(1)(a) GDPR and, in the alternative, on Art. 6(1)(b) GDPR, as the disclosure is necessary for the performance of the contractual matching service.

The event organiser receives only the data necessary for holding the event and providing the networking service. The respective event organiser is responsible, as an independent controller within the meaning of the GDPR, for the processing of your personal data in connection with the event.

2.4. QR Code Access, Attendee Overview and Event Survey

The QR code printed on your networking card leads to a designated access page. Through this QR code, you gain access to:

  • the event app used by the respective event organiser, and
  • a short survey, upon completion of which you will be given access to an overview of the other registered attendees of this event, including their linked LinkedIn profiles.

As part of the QR code access, we process technical access data (IP address, time of access, device information and browser type) in order to technically enable and secure access.

Before you can view the attendee overview, you will be asked a number of questions as part of a short survey. Your answers to this survey are processed by Diphy and, after the event, are disclosed to the respective event organiser as survey results. Aggregated, fully anonymised survey results (i.e. results that can no longer be de-anonymised) may be retained on a permanent basis for statistical purposes and to improve the service.

In order to enable networking between attendees, your profile (first name, last name, job title, company, networking goals and preferences, and your LinkedIn profile) is visible to other registered attendees of this event in the attendee overview. Access to this overview requires the QR code access described above and completion of the survey.

The legal basis is Art. 6(1)(a) GDPR (consent), as well as Art. 6(1)(b) GDPR.

The data collected from you in this context will be stored after the event for a period necessary to fulfil the aforementioned purposes and will thereafter be deleted or irrevocably anonymised, unless statutory retention obligations preclude this. If you withdraw your consent, your data will be deleted without undue delay, unless another legal basis exists for further processing.

3. Integration of Third-Party Providers

In order to provide and continuously improve our services, we also make use of services provided by third-party providers, which may involve the processing of personal data. We distinguish between processors, to whom we provide data for the performance of technical services subject to our instructions, and independent controllers, to whom we disclose data.

3.1. Processors (Technical Service Providers)

To provide our services, we engage carefully selected technical service providers as processors pursuant to Art. 28 GDPR. These process your data exclusively on our behalf and in accordance with our instructions. We have entered into data processing agreements with all processors. These may in particular include:

  • Hosting and cloud infrastructure providers
  • Email delivery service providers (for registration links and confirmations)
  • Providers of PDF generation and document management services

Disclosure to processors is based on Art. 6(1)(a) GDPR as well as Art. 6(1)(b) GDPR in conjunction with Art. 28 GDPR.

3.2. Event Organiser (Independent Controller)

As described in the sections above, we transmit the created networking cards (PDF) as well as the survey results to the respective event organiser. The event organiser is responsible for its own processing of your data after receipt, as an independent controller within the meaning of the GDPR. Please refer to the privacy notice of the respective event organiser.

3.3. Event App Provider (Independent Controller)

As part of the QR code access, you will be redirected to the event app used by the respective event organiser. The respective provider is responsible, as an independent controller, for the data processing carried out by this app. Please read the privacy notice of the respective app provider.

3.4. LinkedIn (Independent Controller)

Insofar as you provide us with a LinkedIn profile URL and we retrieve and process publicly accessible information from your LinkedIn profile, this is based on your consent (Art. 6(1)(a) GDPR). LinkedIn Ireland Unlimited Company is responsible, as an independent controller, for the processing of your data on the LinkedIn platform itself. Please refer to LinkedIn's privacy notice.

3.5. Further Third-Party Providers Based on Separate Consent

In addition to the recipients named in the preceding sections, Diphy may disclose your personal data to further third-party providers on the basis of separate, explicitly given consent. This may include, for example, event sponsors, partner platforms or providers of career and networking services. Such disclosure will only take place if you have given prior separate and specific consent, which will be obtained from you clearly and transparently, separately from the main consent. This separate consent is entirely voluntary; refusing it has no effect whatsoever on your participation in the Diphy service. You may withdraw any separate consent given at any time with effect for the future, without affecting the lawfulness of processing carried out on the basis of the consent before its withdrawal.

The legal basis for this disclosure is exclusively Art. 6(1)(a) GDPR (separate consent).

4. Your Rights

You may contact us either in writing or by email at privacy@diphy.ai to exercise the following rights:

  • The right of access to your data, in order to review and verify it, pursuant to Art. 15 GDPR;
  • The right to receive a copy of your personal data, Art. 15(3) GDPR;
  • The right to rectification, erasure or restriction of processing, which also includes the right to have incomplete or incorrect data completed by means of a supplementary statement, pursuant to Articles 16, 17 and 18 GDPR;
  • The right to object to the processing of personal data carried out by us on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, in accordance with Art. 21 GDPR; a right to object to the processing exists insofar as this arises from reasons relating to your particular situation;
  • The right to receive your provided data in a structured, commonly used and machine-readable format and to transmit that data to another controller, provided that you have given your consent to the processing or that the processing is based on a contract (Art. 20 GDPR);

You also have the right to lodge a complaint with a supervisory authority in connection with the processing of your personal data. You may contact the authority responsible for your place of residence or the supervisory authority responsible for Diphy.

Withdrawal of consent: If you have given your consent to a processing activity, you may withdraw it at any time with effect for the future by notifying us, e.g. via privacy@diphy.ai. We store your consent for three years after the end of the year in which the withdrawal occurs. The lawfulness of the processing carried out before the withdrawal is not affected by the withdrawal.

5. Automated Decision-Making and Profiling

As part of our networking and matching service, your personal data (in particular your profile data, LinkedIn information, and networking goals and preferences) is in part processed algorithmically in order to calculate personalised networking matching suggestions. This in part constitutes a form of profiling within the meaning of Art. 4(4) GDPR, which takes place exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.

With the exception of the services described above, your personal data is not used for automated decision-making or profiling. Profiling only takes place, as described above in connection with the individual services, with your consent.

There is no solely automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you. The matching suggestions are algorithmic recommendations and do not give rise to any legal consequences for you.

6. Changes to this Privacy Notice

We reserve the right to amend this privacy notice in the event of changes to the legal situation or our services, or for other reasons. The current version is always available on our registration page.

Back to Registration