Cookies & privacy

Data controller

The controller of the data collected on the website is Camille Clairet, residing in Montpellier, France. For any question about your data processing, you can contact the controller at contact@ambyevent.fr.

Data collected

Depending on how you use the website (account, forms, browsing), AMBY may collect the following data:

• Identification data: first name, last name, email, phone, password (hashed, never stored in clear);
• Profile data: city, occupation or job title, sector, type of organizing structure, profile photo or logo, organizer biography;
• Search preferences: declared event preferences (sectors, formats, business goals);
• Activity data: events added to your favourites;
• Google sign-in: if you use « Sign in with Google », we receive your email address and the authentication tokens provided by Google;
• Data from forms without an account: PDF guide downloads (first name, last name, email) and « first 50 organizers » sign-ups (first name, last name, email, structure, message);
• Contact details entered by organizers on their event listings (name, email, phone, LinkedIn profile of visitor and exhibitor contacts);
• Free-event registrations: the event you register for and the generated ticket (a unique code);
• Technical and audience-measurement data: anonymous visit identifier, traffic source, reading duration, browser type, connection logs (for security purposes).

Processing purposes

Your data is processed for the following purposes:

• Creating and managing your user account;
• Publishing and referencing events (for organizer accounts);
• Searching and filtering events (for all users);
• Managing free-event registrations and generating your entry ticket;
• Communicating with you (validation notifications, support requests);
• Improving the quality of the service;
• Complying with legal obligations (log retention, judicial requisitions).

Legal basis

The processing of your data is based on: (i) the performance of the contract entered into with you upon account creation; (ii) your consent, collected at registration; (iii) AMBY's legitimate interest in ensuring the security and improvement of the service; (iv) compliance with applicable legal obligations.

Data recipients

Your data is only accessible to the AMBY team and its strictly necessary technical subcontractors: Brevo (sending emails and managing contact lists, data hosted in France), Scalingo (website hosting, in France) and Scaleway (image storage, in France). If you choose to sign in with Google, Google LLC (United States) also acts as a subcontractor for authentication; this transfer is governed by the EU-US Data Privacy Framework. When you register for an event, your name and email are shared with that event's organizer to manage their attendee list. No data is resold to third parties, and no transfer outside the European Union takes place without appropriate safeguards.

Retention period

Data is retained for the following durations:

• Account data: as long as the account is active. If the account is deleted, data is erased within 30 days, except for contrary legal obligations.
• Connection logs: 12 months (legal obligation).
• Published event data: as long as the listing is online, then archived for 3 years for statistical purposes (anonymized).

Your rights

Under the GDPR, you have the following rights regarding your data:

• Right of access: obtain a copy of the data concerning you;
• Right of rectification: correct inaccurate data;
• Right to erasure: request deletion of your data;
• Right to object: oppose processing on legitimate grounds;
• Right to portability: retrieve your data in a readable format;
• Right to restriction: limit processing in certain cases.

To exercise any of these rights, contact us at contact@ambyevent.fr.

You also have the right to lodge a complaint with the French National Commission for Informatics and Liberties (CNIL), 3 Place de Fontenoy, 75007 Paris: www.cnil.fr.

Cookies used

AMBY uses two categories of cookies, both exempt from prior consent under the ePrivacy directive and the French CNIL guideline n° 2020-091:

• Authentication session cookie (« next-auth.session-token »): keeps you signed in across pages. Duration: browser session, or 30 days if « Remember me » is checked. Strictly necessary cookie.
• Anonymous audience measurement cookie (« amby_vid »): a random identifier (UUID) that allows AMBY to count unique visitors per event page, estimate average reading time and identify traffic sources (search, social media, newsletter, direct). Duration: 12 months. No personal data is associated with this identifier, no IP address is stored, and no data is transmitted to a third party or cross-referenced with other processing. This cookie falls under the audience measurement exemption from consent (CNIL guideline n° 2020-091).
• No advertising cookies, no behavioural tracking, no third-party cookies, no affiliation cookies.

You can block or delete these cookies at any time via your browser settings. Removing the session cookie will sign you out; removing the audience measurement cookie has no effect on your browsing experience.