Skip to content
Adsumio

Privacy policy

Last updated: November 1, 2026

In short

  • We sell no data and show no advertising.
  • Data is hosted in France, in a separate database for each organization.
  • Attendees do not need an account, and their data is anonymized automatically after the event.
  • A single cookie, strictly necessary: no advertising or analytics trackers.

Who is responsible

Adsumio is published by the company named in the legal notice. Depending on the data, we act in one of two roles:

  • Controller: for user accounts (organizers, staff members, administrators), the security of the service, and visits to this website.
  • Processor: for event data (registrations, attendance, survey answers). The organization that creates the event is the controller of that data; we process it only on its instructions, under a contract that meets Article 28 of the GDPR.

If you registered for an event, the organizer is your main contact. Their name appears on the event page and in the emails you receive.

The data we process

  • User account: email address, language, hashed password (never stored in plain text), encrypted two-factor secret, organizations and roles.
  • Security: sign-in history (date, IP address, browser) and a log of sensitive actions.
  • Attendees, on behalf of organizations: name, email address, registration form answers, consents, ticket, check-in time, survey answers, and the history of emails sent.
  • Staff: functions, expected schedule, check-ins, late arrivals, and corrections.
  • Website visits: technical data needed to display the site and keep it secure, such as the IP address in server logs.

Why, and on what legal basis

  • Creating your account and providing the service: performance of the contract.
  • Sending service emails (activation, password, invitations): performance of the contract.
  • Protecting the service (sign-in rate limits, abuse prevention, audit log): legitimate interest.
  • Running events on behalf of organizations: on their instructions; each organization chooses its own legal basis.
  • Marketing from an organizer: only with your consent, given by ticking a box that is never pre-ticked, and withdrawable at any time.
  • Meeting our legal obligations: legal obligation.

Who can see your data

  • Members of the organization concerned, according to the roles and permissions they were given.
  • Our technical processors: OVH SAS for hosting in France, and our email delivery provider: [to be completed].
  • To place an event on a map (organizer admin only): address search is sent to Nominatim (OpenStreetMap Foundation), and map tiles are loaded from MapTiler’s tile servers. The organizer’s IP address and search text may be sent to those providers. Public event pages do not embed a map; they only offer a link to OpenStreetMap.
  • Authorities, only on a lawful request.

Data stays in the European Union, except for the mapping services above (OpenStreetMap / MapTiler), which may process technical data outside the EU under their own policies.

How long we keep it

  • User account: while the account is active, then deleted or anonymized when it is closed.
  • Attendees: 12 months after the event ends by default, then anonymized automatically. The organization can adjust this period. Attendance statistics are kept without personal data.
  • Staff attendance: same default period.
  • History of emails sent: 90 days by default.
  • Sign-in history and audit log: 12 months.
  • Consent records: as long as needed to demonstrate compliance.
  • Data placed under a legal hold by the organization: until the hold is lifted.

How we protect it

  • A separate database for each organization, with its own credentials.
  • Encrypted connections (HTTPS), hashed passwords, and two-factor authentication.
  • Ticket, cancellation, and survey links that cannot be guessed; only their fingerprint is stored.
  • Permissions checked on the server and an audit log of sensitive actions.
  • Regular backups.

Cookies and local storage

  • One strictly necessary session cookie: it keeps you signed in and remembers your language. It is deleted when you close the browser.
  • One entry stored in your browser so the privacy banner stays hidden once you close it.
  • The map and address search set no cookies: they are technical requests (map tile images and a geocoding query) used only in the organizer interface.

No advertising cookies or third-party analytics are used. Cookies and local storage that are strictly necessary for the service do not require consent.

Your rights

You have the right to access, rectify, erase, restrict, object to, and port your data, to withdraw your consent at any time, and to give instructions about your data after your death.

  • Attendees: use the privacy link in your emails to export or delete your data, or contact the organizer.
  • Users: write to contact@adsumio.com.

We reply within one month. You can also lodge a complaint with your data protection authority; in France, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, https://www.cnil.fr

Changes

The date of the last update is shown at the top of this page. Users are notified by email of any significant change.

Contact

For any question about your data: contact@adsumio.com