Effective Date: 13 July 2025
Last Updated: 3 August 2025
Risk-!n (“we”, “us”, “our”, or “the Conference”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you interact with us, including through our website https://www.risk-in.com, newsletters, registration platforms, community networks, and sponsor engagements.
Risk-!n is the data controller for the processing of your personal data under:
• EU General Data Protection Regulation (GDPR)
• Swiss Federal Act on Data Protection (FADP)
• Other applicable data protection laws depending on your location
Contact for data protection inquiries:
📧 Stéphane Martin – stephane.martin@risk-in.com
We collect your personal data when you:
A. Subscribe to our Newsletter (via Mailchimp)
• Data collected: First name, last name, job title, email, company name, country
• Purpose: To send updates about Risk-!n events, programs, and content
• Legal basis: Your consent (can be withdrawn at any time via the unsubscribe link in all newsletters)
B. Register for Events (via PheedLoop)
• Data collected: First name, last name, job title, email, company name, company address (incl. postal code, town), country
• Purpose: To manage ticketing, communicate event logistics, and grant access
• Legal basis: Performance of a contract
C. Engage with Sponsors
• Data shared: Depending on your consent and registration level:
o Platinum & Gold sponsors: First name, last name, job title, email, company name
o Silver & Bronze sponsors: First name, last name, job title, company name (no email)
• Legal basis: Your explicit consent obtained during registration
D. Join Our Community Platform (via LinkedIn)
• Data collected with consent: Name, email, biography, work and education history, languages
• Purpose: To facilitate networking among attendees and partners
• Legal basis: Consent
E. Other Sources
We may also collect publicly available or directly shared data such as:
• Business cards at events
• Public LinkedIn profiles
• Attendee lists from partner events
Your data is used to:
• Deliver event services and manage logistics
• Send you newsletters and communications
• Support sponsor engagement (if you consented)
• Enable community networking
• Comply with legal and regulatory obligations
We rely on the following legal bases:
• Contractual necessity (e.g., event registration)
• Legitimate interests (e.g., improving our services)
• Consent (e.g., marketing, sponsor data sharing)
• Legal obligation (e.g., retention for accounting or compliance)
You may withdraw your consent at any time without affecting your participation in the event.
We only share your data when necessary:
• With service providers (Mailchimp, PheedLoop, LinkedIn, Dropbox) under strict confidentiality agreements
• With sponsors, only with your explicit consent
• With authorities when legally required
International Transfers:
Some providers are based outside the EU or Switzerland (e.g., in the USA).
We implement adequate safeguards such as:
• EU Standard Contractual Clauses (SCCs)
• Swiss FDPIC-approved transfer mechanisms
• Adequacy decisions by the EU/Swiss authorities
➡️ Mailchimp is used to manage our newsletter distribution lists. Personal data such as name, email, and company are stored and processed by Mailchimp on our behalf. Mailchimp relies on EU SCCs and implements industry-standard security controls and GDPR-aligned practices. More details are available on Mailchimp’s Data Processing Addendum.
➡️ PheedLoop is our event registration and logistics platform. It stores information such as names, email addresses, and company details provided during event sign-up. PheedLoop hosts its infrastructure in secure environments and applies safeguards consistent with EU SCCs and data protection best practices.
➡️ LinkedIn is used for our community networking features. If you opt in, your LinkedIn profile data (e.g., name, biography, job title) is processed via LinkedIn’s platform. LinkedIn’s data transfers are supported by adequacy decisions and/or SCCs, and it complies with both GDPR and FADP.
➡️ Dropbox is used as a secure team-shared folder where personal data may be stored (e.g., attendee lists, sponsor data). Dropbox operates under EU SCCs and has implemented additional safeguards in line with GDPR and Swiss FADP requirements. More information is available in Dropbox’s privacy and compliance center.
We retain personal data only as long as necessary:
• Newsletter data: Until you unsubscribe
• Event registration data: Up to 3 years for compliance and communication purposes
• Community platform: Until you delete your profile or revoke LinkedIn access
You have the following rights under the GDPR, Swiss FADP, and other applicable laws:
• Access to your personal data
• Correction of inaccurate or outdated information
• Erasure (“Right to be Forgotten”)
• Restriction of processing in certain circumstances
• Objection to processing, especially for direct marketing
• Portability of your data
• Withdraw consent at any time
To exercise your rights, contact:
📧 stephane.martin@risk-in.com
If you are unsatisfied with our response, you have the right to contact your local data protection authority:
• In the EU: Contact your national Data Protection Authority
• In Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• Elsewhere: Refer to your local regulator if available
This Privacy Policy applies worldwide to all users and stakeholders of Risk-!n, regardless of their country of residence. Local privacy rights and obligations may apply in addition to the rights listed here.
We may update this policy to reflect changes in law or our services. The latest version will always be available at:
👉 https://www.risk-in.com/privacy-policy