Privacy
Last updated: July 3, 2026
We collect only what Build It Summit genuinely needs. Your data stays with us and our subprocessors, used only on our behalf. This notice explains what we collect, why, on what legal basis, for how long, and the rights you have over it.
Data controller
BUILD IT SUMMIT, a French simplified joint-stock company (SAS) with a share capital of €5,000, registered with the Paris Trade and Companies Register under no. 107 007 239, registered office at 229 rue Saint-Honoré, 75001 Paris, France, represented by Clément Garrigue.
For any question about your personal data, write to privacy@builditsummit.com or use the contact form. We answer every request.
What we process, why, and on what legal basis
We process personal data for distinct purposes, each with its own legal basis under the GDPR.
Updates and pre-registration (newsletter)
What: your email address and, if you give it, your first name.
Why: to keep you informed about the event, the program, the dates, and when key forms open.
Legal basis: your consent. Subscription relies on double opt-in, you confirm by clicking a link in the email we send. You can withdraw your consent at any time using the unsubscribe link in every email.
Partner, speak, press, ecosystem, crew, ambassador and contact forms
What: the details you enter in the form (such as your name, email, organization, and your message).
Why: to handle your request, review your application, and get back to you.
Legal basis: our legitimate interest in responding to a request you initiated, or pre-contractual steps taken at your request before a possible agreement. We only ever use what you submit for the request you sent.
Ticket pre-registration
What: your name, email, organization if given, your role and the pass you are interested in, your country, and, for the Student and Job Seeker passes, whether you are a student or a job seeker.
Why: to let you know when ticket booking opens on FOST Paris, with a link to your pass. Payment happens on FOST Paris.
Proof of status: for the Student and Job Seeker passes, a proof (a student ID or a job-seeker attestation) is requested after purchase. It is kept for the time of the check, then deleted.
Legal basis: pre-contractual steps taken at your request. If you also tick the optional updates box, that part relies on your consent.
Audience measurement (Plausible)
What: aggregated, non-identifying usage statistics (such as page views and referring sites).
Why: to understand how the site is used and improve it.
Legal basis: Plausible is active. It is cookieless, hosted in the European Union, and measures each visit within this site alone, keeping the data aggregate and anonymous. Under CNIL guidance, this kind of measurement is exempt from consent, so you browse straight through.
Cookies and trackers
In short: this site keeps to functional storage only, with cookieless audience measurement and clear of advertising or tracking cookies. You therefore browse it straight through.
Cookieless audience measurement
We use Plausible Analytics (hosted in the European Union), a cookieless audience-measurement tool that collects aggregate, non-identifying usage data. Under CNIL guidance, this measurement is exempt from consent. The data serves audience measurement alone.
First-party only
Everything the site loads is first-party: analytics, fonts and assets are served from our own domain.
Functional local storage
To remember your display preferences, the site stores a little information in your browser (local storage), strictly functional and kept clear of tracking or profiling:
- bis-discovery: your choice in the "Take a tour" guide and the personalized action it sets.
This information stays on your device, remains yours alone, and is reversible at any time (the "Reset" button in the "Find your place" block, or by clearing your browser storage).
Ticketing
Tickets are purchased on our partner's platform, FOST / apidays (external link). Any cookies set at that step fall under their own privacy policy, on their domain.
Changes
If we ever add a third-party service that sets non-essential cookies (for example an embedded video or a marketing tool), we will put a consent mechanism in place beforehand.
How long we keep your data
We keep your data only as long as needed for the purpose it was collected for. The periods below are our retention rules, currently being finalized with our counsel.
- Updates, pre-registration, prospects: up to 3 years after your last contact with us.
- Form requests (partner, speak, press, ecosystem, crew, ambassador, contact): up to 3 years after our last exchange, unless a relationship begins, in which case for its duration plus the legal limitation period.
- Participant and ticketing data: the duration of the event plus 12 months.
- Speaker submissions we set aside: deleted after the edition closes.
- Photos and video from the event: kept for promotional use, with removal available on request (see the recording section).
After these periods, your data is deleted or anonymized.
Subprocessors
We work with a small set of subprocessors who act on our behalf, under contract, and only on our instructions. We chose them for keeping data in Europe and for being reversible, in line with our commitment to a sovereign European stack. Each uses your data on our behalf alone.
- n8n (European Union): runs our form automation pipeline.
- Baserow (European Union): stores form submissions, open source and self-hostable.
- Plausible (European Union): cookieless audience measurement.
- Proton (Switzerland and European Union): our email service for correspondence.
- Brevo (France and European Union): email delivery for updates, when this service is activated.
Switzerland is recognized by the European Commission as providing an adequate level of data protection. We keep data within the European Union or an adequate country, and we keep our setups reversible.
Embedded video: the FOST film on the About page loads from youtube-nocookie.com only when you click play. Until that click, the player stays clear of YouTube (Google). Once you play it, YouTube's own privacy terms apply.
Your rights
Under the GDPR, you have the right to access your data, to have it corrected, to have it erased, to restrict its processing, to object to its processing, and to data portability. To exercise any of these, write to privacy@builditsummit.com or use the contact form. We answer every request.
You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
Every email we send includes an unsubscribe link. Pre-registration relies on double opt-in.
Photography and filming at the event
Build It Summit is photographed and filmed. We do this to document the event and to promote it and future editions, on stage, in the Builders Village, and around the venue.
Why and on what basis: we capture the event under our legitimate interest in documenting and promoting it. We inform you in advance, here and with signage on site, so you know what to expect before you come.
How to object: to stay out of frame, you can tell us before the event (write to privacy@builditsummit.com), avoid filmed zones on site, or tell our crew during the event. If you appear in an image after the event and want it removed, write to privacy@builditsummit.com and we will act on your request. Where an image features you individually and prominently, we will seek your agreement before using it.
Changes to this notice
We may update this notice. The current version is always the one on this page.