# Privacy Policy | Amphi

> Privacy policy for the Amphi conference platform by Bohemica Studio: what data we process, why, and your rights under GDPR.

- Canonical: https://www.amphi.cc/en/privacy
- Language: en
- All pages: https://www.amphi.cc/llms.txt

---

# **Privacy Policy**

**Effective from:** 15 October 2026

Poweron s.r.o., with its registered office at Palachova 504/7, Liberec I-Staré Město, 460 01 Liberec, Czech Republic, Company ID (IČO): 06205712, registered in the Commercial Register kept by the Regional Court in Ústí nad Labem, Section C, Insert 39873 (the “**Company**”), provides its clients with a licence to and access to the Amphi platform it operates, which enables organisers to hold webinars and conferences, manage registrations of attendees and speakers, the programme, live streaming and recordings of talks, and provide related services (together the “**Platform**”), available at www.admin.amphi.cc. This policy applies jointly to the Platform and to the Platform’s promotional website (the “**Website**”), available at www.amphi.cc.

The Company, as the controller of personal data, processes the personal data of data subjects in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “**Regulation**”), and provides the information below in this policy (the “**Policy**”).

**The main purpose of this Policy is to let you know whether you are a data subject at all, i.e. a natural person (including a self-employed natural person) whose personal data the Company processes in connection with the use of the Platform**, which personal data the Company processes, what it needs them for, what the grounds and purpose of the processing are, and what your rights as a data subject are. Where the Company works with data demonstrably belonging to a person other than a natural person, this is not processing within the meaning of the Regulation and this Policy does not apply.

Meaning of the basic terms used in the Policy:

**Clients** For the purposes of the Policy, the Company’s clients are legal entities and natural persons acting in the course of business who use the Platform or the Website under a contract concluded between them and the Company (the “**Clients**” or the “**Client**”).

**Employees** For the purposes of the Policy, employees are natural persons in an employment or similar relationship with a (prospective) business partner of the Company who are involved in the contractual relationship between that business partner and the Company, and natural persons in an employment or similar relationship with a (prospective) Client who are involved in negotiating or providing services (e.g. the Client’s contact persons) (together the “**Employees**”).

**Users** For the purposes of the Policy, users are natural persons who take part in Events (webinars and conferences) organised by a Client through the Platform, whether as a speaker or as an attendee (the “**Users**”).

**Representatives** For the purposes of the Policy, representatives are persons acting on behalf of (prospective) Clients or business partners of the Company (the “**Representatives**”).

## **1\. Why, how, for how long and which categories of personal data does the Company process?**

### 1.1 Grounds and purpose of processing, categories of personal data

If any of the activities listed below (points a) to h)) concerns you, you are most likely a data subject whose personal data the Company processes.

Unless stated otherwise, the processing described below concerns the personal data not only of the Company’s (prospective) Clients, but also of their Representatives or Employees, of Users, and of other natural persons specified below.

### a) Conclusion and performance of a contract between the Company and a Client

**Categories of data:** identification and contact details of the (prospective) Client and/or a Representative or Employee, or a User, details of any contract or of the services provided, payment details, the behaviour of the Client, Representative or Employee within the Platform and within the Workspace created for using the Platform, signature

**Grounds and purpose of processing:** the processing is a contractual requirement necessary for concluding and performing the contract between the Client and the Company and, in certain cases, the ground for processing is the Company’s legitimate interest in providing its services properly. The purpose of the processing is the performance and conclusion of the contract between the Company and the Client

**Retention period:** 3 years from the date the contract ends. Basic information about the contract (e.g. the date of conclusion, the subject of the contract) for 10 years from the date the relationship ends

Users also enter personal data into the Platform in connection with the organisation and running of Events (webinars and conferences), either themselves or through the Client entering data on their behalf, or by behaving in certain ways within the Platform. In both cases the controller of such data is the Client, which is responsible under the Regulation for informing Users of its own terms for processing their personal data.

### b) Compliance with the Company’s legal obligations

**Categories of data:** identification and contact details of the Client and/or a Representative or Employee, of Users, or of a visitor to the website operated by the Company at www.amphi.cc (the “**Website**”) or to the Company’s social media profile, details of any contract or of the services provided

**Grounds and purpose of processing:** the processing is necessary for compliance with legal obligations so that the Company acts in accordance with the law

**Retention period:** for the period laid down by applicable legislation

### c) Protection of the Company’s rights and interests (e.g. in court and other disputes)

**Categories of data:** identification and contact details of the Client and/or a Representative or Employee, of Users, or of a visitor to the Website or to the Company’s social media profile, details of any contract or of the services provided

**Grounds and purpose of processing:** the processing is necessary to protect the Company’s legitimate interest in asserting its rights and claims

**Retention period:** 5 years from the date the dispute ends

### d) Ascertaining satisfaction with the Platform

The Company may contact Clients, or their Representatives or Employees, by telephone in order to ascertain their satisfaction with the Platform and to obtain feedback for its further improvement. You provide a telephone number for this purpose voluntarily when registering on the Platform or in your profile on the Platform; not providing it has no effect on the conclusion of the contract or on the use of the Platform.

**Categories of data:** identification details and telephone number of the Client and/or a Representative or Employee, a record of the feedback provided

**Grounds and purpose of processing:** the processing is carried out on the basis of the Company’s legitimate interest in ascertaining Client satisfaction and improving the quality of the Platform.

**Retention period:** for the duration of the contract, at the latest until an objection is raised

### e) Sending the Company’s marketing communications

The Company sends marketing communications to existing or prospective Clients who gave their consent to this when registering on the Platform. Consent is voluntary, is given by ticking a separate box, and registration can be completed without it; the e-mail address to which the marketing communications are to be sent is subsequently verified.

**Categories of data:** identification and contact details of the Client and/or a Representative or Employee

**Grounds and purpose of processing:** processing based on consent given when registering on the Platform, which may be withdrawn at any time, either in the user profile on the Platform or via the unsubscribe link in the footer of each marketing communication.

**Retention period:** until consent is withdrawn

### f) Communication with the Company

You may communicate with the Company for various reasons (e.g. to ask a question or make a suggestion) and in various ways (by e-mail, by phone, etc.). The Company’s interest is to communicate with you efficiently and quickly.

**Categories of data:** identification details and contact details of the natural person communicating with the Company for the above purpose

**Grounds and purpose of processing:** the processing is carried out on the basis of the Company’s legitimate interest in responding to your questions or suggestions in order to provide services of the highest quality to prospective Clients, business partners and visitors, whether of the Website or of the Company’s social media profile. Alternatively, the ground for processing is the Company’s need to prepare a response to questions from prospective Clients or business partners of the Company who have asked for details, in particular about the Company’s service offering or the terms of cooperation

**Retention period:** 1 year from the date of the last communication with you

### g) Use of social media

The Company has profiles on social media, where it communicates in various ways (e.g. through messages, comments on posts or tagging content) with other users of the network, who may share personal data with it.

**Categories of data:** identification and contact details of network users

**Grounds and purpose of processing:** the processing is carried out on the basis of the Company’s legitimate interest in responding to your questions or suggestions in order to provide services of the highest quality to (prospective) Clients, business partners and visitors. Alternatively, the ground for processing is the Company’s need to prepare a response to questions from prospective Clients or business partners of the Company who have asked for details, in particular about the Company’s service offering.

**Retention period:** for as long as the profile exists

### h) Cookies and analysis of traffic to and use of the Website and the Platform

**Cookie consent management**

You give consent to analytics and marketing cookies through the consent management bar on your first visit to the Website. No analytics or marketing cookies are stored until consent is given. You may change or withdraw your consent at any time via the Cookie settings link in the Website footer or in your profile on the Platform; withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

**The validity period of individual cookies** varies according to their purpose: essential cookies generally expire when the browser session ends, except for the cookie storing your consent choice, which is valid for 12 months, and the reCAPTCHA cookie, which is valid for 6 months; analytics cookies are valid for up to 24 months; marketing cookies for up to 13 months.

**Essential (technical) cookies and protection of forms on the Website and the Platform against abuse**

The Website and the Platform use cookies through which the Company may collect certain personal data. Essential cookies ensure the basic functionality and security of the Website (e.g. maintaining the session, protection against abuse, storing your consent choice) and without them the Website could not function properly; no consent is required to store them.

Forms on the Website and on the Platform are protected by the Google reCAPTCHA service, which analyses behaviour to assess whether a form is being submitted by a human or by an automated tool.

**Analytics cookies – measuring traffic and behaviour on the Website and the Platform**

On the Website and on the Platform the Company uses Google Analytics 4 and OpenReplay, and on the Website also Microsoft Clarity. Through these tools the Company monitors how the Website and the Platform are used, measures traffic to them and records the course of visits (session replay).

Form fields containing personal or other sensitive data are masked for the purposes of Clarity and OpenReplay.

**Categories of data:** online identifiers (cookie identifier), IP address, data on behaviour on the Website and the Platform (pages visited, order and length of the visit, clicks, traffic source, events performed), data on the device, operating system and browser, approximate location derived from the IP address, recording of the course of the visit and of interactions during the visit (session replay).

**Grounds and purpose of processing:** processing based on voluntary consent given separately for the Website and for the Platform through the consent management bar, which may be withdrawn at any time. The purpose is to measure traffic, analyse visitor behaviour, produce statistics and reports, detect errors and improve the Website and the Platform.

**Marketing cookies – conversion measurement, attribution and ad targeting**

On the Website and on the Platform the Company uses marketing (advertising) cookies and similar technologies, in particular for Google Ads, Meta Ads and LinkedIn Ads and for the OpenAI advertising pixel. They are used to measure conversions, attribute advertising campaigns, for remarketing and to target advertising at a relevant audience, including outside the Website and the Platform, in particular on Google, Facebook, Instagram and LinkedIn and in OpenAI services. On the Website the Company also uses the Leadfeeder tool, which identifies, based on the visitor’s IP address, the company from whose network the visit to the Website comes, and records which pages were visited, for the purpose of business development.

**Categories of data:** online identifiers (advertising cookie identifiers), IP address, data on behaviour on the Website and the Platform and on completed conversions, data on the ad or campaign from which the visitor came to the Website, data on the device and browser, approximate location derived from the IP address, interest and demographic segments derived by the advertising platform provider.

**Grounds and purpose of processing:** processing based on consent given through the consent management bar, which may be withdrawn at any time. The purpose is to measure advertising effectiveness, attribute conversions, remarketing and ad targeting.

**Overview of cookies used**

| Cookie type | Tool | Where used | Cookies the tool stores and reads | Provider |
| --- | --- | --- | --- | --- |
| Essential | Technical cookies of the Website and the Platform | Website, Platform | cookie with the session and login identifier; cookie storing your cookie consent choice | Poweron s.r.o. |
| Essential | Google Tag Manager | Website, Platform | sets no cookies of its own; only deploys the other tools and passes on your consent choice | Google Ireland Limited |
| Essential | Google reCAPTCHA | Website, Platform | _GRECAPTCHA – assessing whether a form is being submitted by a human or by an automated tool | Google Ireland Limited |
| Essential | Bunny Stream (video recording player) | Platform | technical player cookies necessary for playing and smoothly delivering the video recording | BunnyWay d.o.o. |
| Analytics | Google Analytics 4 | Website, Platform | _ga, _ga_* – visitor and session identifier, data on the visit and its source | Google Ireland Limited |
| Analytics | OpenReplay | Website, Platform | visitor and session identifier for recording the course of the visit (session replay); also stored in the browser’s local storage | Poweron s.r.o. (own instance of the tool) |
| Analytics | Microsoft Clarity | Website | _clck, _clsk – visitor and session identifier for measuring traffic and recording the course of the visit; CLID, MUID, ANONCHK, MR, SM – identifiers set by Microsoft domains (clarity.ms) | Microsoft Ireland Operations Limited |
| Marketing | Google Ads | Website, Platform | _gcl_au, _gcl_aw – conversion measurement and attribution; advertising cookies of the doubleclick.net domain (e.g. IDE) – remarketing and ad targeting | Google Ireland Limited |
| Marketing | Meta Ads (Meta Pixel) | Website, Platform | _fbp, fr – browser identifier for conversion measurement and ad targeting | Meta Platforms Ireland Limited |
| Marketing | LinkedIn Ads (LinkedIn Insight Tag) | Website, Platform | li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory, li_fat_id – browser identification, conversion measurement and ad targeting | LinkedIn Ireland Unlimited Company |
| Marketing | Leadfeeder | Website | _lfa – visitor identifier for identifying the company from which the visit comes and recording the visited pages | Leadfeeder Oy (Dealfront) |
| Marketing | OpenAI advertising pixel | Website, Platform | advertising and conversion identifiers set by the OpenAI pixel – conversion measurement and ad targeting | OpenAI Ireland Ltd |

Where your data are processed on the basis of the Company’s legitimate interest, you may, as the data subject, object to such processing by e-mail sent to [info@amphi.cc](mailto:info@amphi.cc).

### 1.2 Manner and duration of processing

Personal data will generally be processed within the EU and the EEA. Should personal data be processed outside the EU and the EEA, the Company will ensure that appropriate safeguards for the protection of personal data are applied in accordance with Chapter V of the Regulation (e.g. through standard contractual clauses approved by the European Commission).

The Company’s applications and databases run on secure servers provided by Hetzner Online GmbH, with its registered office at Industriestr. 25, 91710 Gunzenhausen, Federal Republic of Germany. All data are physically stored in data centres within the European Union in accordance with the requirements of the Regulation.

In connection with the use of Google Analytics 4, Google Tag Manager, Google Ads, Google reCAPTCHA, Meta Ads, LinkedIn Ads, Microsoft Clarity and the OpenAI advertising pixel, personal data may be transferred to Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, Meta Platforms Ireland Limited, with its registered office at Merrion Road, Dublin 4, Ireland, LinkedIn Ireland Unlimited Company, with its registered office at Wilton Plaza, Wilton Place, Dublin 2, Ireland, Microsoft Ireland Operations Limited, with its registered office at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, and OpenAI Ireland Ltd, with its registered office at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland, and subsequently processed by their parent companies based in the United States of America. Such transfers rely on the European Commission’s adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), under which Google LLC is certified, or on standard contractual clauses approved by the European Commission. With regard to traffic measurement, Google acts as a processor; with regard to advertising features and ad personalisation, it may also act as an independent controller, whose processing is governed by its own privacy policy available at [https://policies.google.com/privacy](https://policies.google.com/privacy).

Personal data are also transferred to the United States of America in connection with sending e-mails through the Postmark service and with payment processing; in these cases too, the transfer is based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) where the recipient is certified, and otherwise on standard contractual clauses approved by the European Commission.

If the Client integrates the Platform with external tools, applications or services of third parties, including artificial intelligence (AI) tools operated by third parties (e.g. OpenAI ChatGPT and others), the Client acknowledges that these external tools are not part of the Platform. The Company has no control over which personal data the Client passes to these external tools, how these tools handle them, or whether they store them. The processing of personal data within these external tools is governed exclusively by the contractual terms and privacy policies of the third parties concerned.

The Company does not transfer personal data to third parties, except to its processors and to persons directly involved in the Company’s internal processes for the purpose of necessary processing, and except to public authorities in the course of fulfilling its legal obligations. Persons cooperating with the Company (employees, subcontractors) are required to adhere to the Company’s personal data processing policy.

Processing is carried out by individual persons cooperating with the Company, or by a processor within the meaning of the Regulation. The Company processes personal data both manually and automatically. The Company has adopted technical and organisational measures to protect personal data, in particular measures to prevent unauthorised or accidental access to personal data, their alteration, destruction or loss, unauthorised transfers, unauthorised processing, and any other misuse of personal data.

The Company will process personal data only for as long as necessary to fulfil the purpose for which they were collected (but no longer than stated in [Section 1.1](#purpose) above), i.e. to the extent necessary to carry out the activities listed above (see [Section 1.1](#purpose) above) and for the period necessary to achieve them or for the period directly laid down by law. The personal data are then erased or anonymised.

### 1.3 Sources of personal data, categories of recipients and processors

As sources of the personal data it processes, the Company uses the data subjects themselves, publicly accessible records, registers and lists, the Website, the Platform and social media.

The categories of recipients of personal data are mainly:

a) public authorities, where the Company fulfils obligations laid down by the applicable legislation,

b) the Company’s employees,

c) external subcontractors, in particular those who assist the Company by

- providing services to the Company so that it can provide services to its clients,
- sending marketing communications,
- carrying out marketing activities in connection with the provision of the Company’s services, providing payment services,
- providing forwarding services,
- providers of tools for traffic measurement, analytics and diagnostics of the Website (Google Ireland Limited or Google LLC – Google Analytics, Google Tag Manager; Microsoft Ireland Operations Limited – Microsoft Clarity),
- providers of advertising platforms for conversion measurement, attribution and ad targeting (Google Ireland Limited or Google LLC – Google Ads; OpenAI Ireland Ltd – OpenAI advertising pixel),
- providers of tools for securing the Website and protecting forms against abuse (Google Ireland Limited or Google LLC – Google reCAPTCHA).

In particular, the Company uses the following processors and recipients of personal data:

- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany – operation of server and database infrastructure (hosting);
- BunnyWay d.o.o., Cesta Komandanta Staneta 4A, 1215 Medvode, Slovenia – storage, delivery and playback of video recordings;
- Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland – payment processing; the Company passes to this provider the Client’s identification, contact and billing details and details of the ordered Service. The Client enters payment card details directly into the payment service provider’s environment and the Company has no access to them; with regard to these data and to the provider’s obligations under legislation governing payment services and anti-money-laundering measures, the provider acts as an independent controller;
- the provider of the Postmark service (ActiveCampaign, LLC, based in the United States of America) – sending transactional and informational e-mails;
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – traffic measurement, tag management, form protection and advertising services;
- Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland – advertising services and measurement of advertising effectiveness;
- LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland – advertising services and measurement of advertising effectiveness;
- Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland – traffic measurement and analysis of behaviour on the Website (Microsoft Clarity);
- Leadfeeder Oy (Dealfront), Finland – identification of companies visiting the Website (Leadfeeder);
- OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland – advertising services and measurement of advertising effectiveness.

Persons who may have access to the personal data processed by the Company are bound to protect them and to maintain confidentiality.

Some of the Company’s suppliers may be based outside the EU. In that case, they are suppliers that provide appropriate safeguards that the personal data processed will be secure and that the rights of data subjects will not be restricted in any way.

## **Your rights**

If you are a data subject whose personal data the Company processes, you have the right to obtain confirmation from the Company as to whether or not personal data concerning you are being processed and, where that is the case, the right to access those personal data and the information set out in this Policy.

You may lodge a complaint about the Company’s processing of personal data with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), using the contact details at [www.uoou.cz](https://www.uoou.cz).

In relation to the Company, you have:

- **the right to rectification of personal data** - the Company will rectify inaccurate personal data concerning you without undue delay;
- **the right to erasure of personal data** - the Company may accept a request for erasure of personal data only on the grounds set out in the Regulation;
- **the right to restriction of processing of personal data** - the Company will restrict processing where:

    a) you contest the accuracy of the personal data, for a period enabling the Company to verify their accuracy;

    b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

    c) the Company no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims;

    d) you have objected to processing, pending verification of whether the Company’s legitimate grounds override yours;

- **the right to object** - you may object to processing carried out on the basis of the Company’s legitimate interest. After an objection is raised, the Company will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests or rights and freedoms, or for the establishment, exercise or defence of legal claims;
- **the right to data portability** - where the Company processes personal data by automated means and on the basis that this is necessary for the performance of a service contract concluded with the Company, you may ask the Company to provide you with your personal data in a structured, commonly used and machine-readable format and to transmit them to another controller of your choice;
- **the right to withdraw consent** - where the Company processes your personal data on the basis of your consent, you may withdraw your consent at any time by e-mail sent to [info@amphi.cc](mailto:info@amphi.cc). You may also withdraw consent to receiving marketing communications at any time in your profile on the Platform or via the unsubscribe link in the footer of each marketing communication. You may also change or withdraw your consent to analytics and marketing cookies at any time via the Cookie settings link in the Website footer or in your profile on the Platform. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may send your request in writing to the Company’s registered office or by e-mail to [info@amphi.cc](mailto:info@amphi.cc).

Capitalised terms used in the Policy without being defined in it have the meaning given to them in the [General Terms and Conditions and Licence Terms of Poweron s.r.o.](https://www.amphi.cc/en/tos)

This privacy policy will be updated regularly. The current version is always available on the Website.