Privacy Policy

DataFest Tbilisi – datafest.ge

Last updated: 31 August, 2026

1. Who we are

DataFest Tbilisi is organised by DataFest Tbilisi LLC, registered in Georgia under identification number 406313396 (“DataFest”, “we”, “us”).

We are the data controller for the personal data described in this policy.

Contact for privacy matters: hello@datafest.ge

2. What this policy covers

This policy explains how we collect and use personal data when you:

• visit www.datafest.ge;
• buy a ticket to DataFest Tbilisi through our website;
• subscribe to our newsletter;
• contact us by email or social media;
• attend the festival in person.

It does not cover the practices of other organisations whose websites we link to, or of our sponsors once they hold your data as their own controller (see section 7).

We process personal data in accordance with the Law of Georgia on Personal Data Protection.

3. What data we collect

When you buy a ticket

• Full name
• Email address
• Phone number
• Organisation and job title
• Ticket type, quantity, order number, and the price you paid
• Billing details and, where you request an invoice, your company’s name, address and tax ID
• Any discount or promotional code you use

Card details. Payment is processed by the Bank of Georgia. Your card number, expiry date and security code are entered on the gateway’s secure page and are never received or stored by DataFest. We only receive confirmation of whether the payment succeeded, plus the last four digits and card type for reconciliation.

When you subscribe to the newsletter

Your name and email address, and basic engagement data such as whether an email was opened or a link clicked. Our newsletter is delivered through Brevo (Sendinblue).

When you attend the festival

• Check-in and badge scan records
• Photographs and video recordings taken at the venue (see section 8)
• Anything you submit through feedback forms or surveys

When you use the website

• IP address, approximate location (city level), browser and device type, operating system, referring page
• Pages viewed, time on page and other usage statistics
• Cookie and similar identifiers (see section 9)

4. Why we use your data, and on what legal basis

Where we rely on consent, you can withdraw it at any time — this does not affect processing carried out before you withdrew it.

5. Who we share it with

Service providers acting on our instructions. Website hosting, the payment gateway, Brevo for email delivery, Google for analytics, our ticketing plugin, the venue (for access control and headcounts), and our accountants. Each is bound to process the data only for the purposes we specify.

Sponsors and partners. Sponsors support DataFest and are given the chance to meet participants. We share your name, email address, organisation and job title with a sponsor only where:

• you allow that sponsor to scan your badge at their stand or session; or
• you tick a box asking to be contacted by sponsors during registration.

Once a sponsor receives your details it becomes an independent controller and handles them under its own privacy policy. We will name the sponsors of each edition on our website. If you have allowed a scan and change your mind, tell us and we will pass the request on, but you will usually need to contact the sponsor directly to have your data deleted.

Authorities. Where we are legally obliged to disclose data, or need to in order to establish or defend a legal claim.

We do not sell personal data.

6. Photography and filming at the festival

DataFest is documented in photographs and video, and we publish this material on our website, social media channels, YouTube and in reports about the festival. Recording a public conference and showing what it looked like is a legitimate interest of ours, and we consider it something participants reasonably expect. We rely on consent where a recording focuses on you individually — for example a filmed interview.

At the event you can:

• ask a photographer not to take your picture;
• pick up a marker (such as a differently coloured lanyard) at the registration desk if we offer one for that edition;
• write to hello@datafest.ge with a description of the photograph or a timestamp, and we will remove it from our own channels. Material already reshared by third parties or picked up by media may be outside our control.

Sessions are recorded. If you speak from the floor during a Q&A, your question and voice may end up in the published recording.

7. Cookies and analytics

We use:

• Necessary cookies that make the site work — session management, your shopping basket, security. These cannot be switched off.
• Analytics cookies set by Google Analytics, which tell us how many people visit, which pages they read and how they found us. We only set these if you agree through the cookie banner.

You can change your choice at any time via [the cookie settings link in the site footer], or by clearing cookies in your browser.

8. Your rights

Under Georgian law you may ask us to:

• tell you what data we hold about you, why we process it, where we got it, and who we have shared it with;
• give you a copy of that data, or transfer it to another controller in a machine-readable format;
• correct or update anything inaccurate or incomplete;
• delete your data;
• block processing while a dispute about accuracy or lawfulness is resolved;
• withdraw consent at any time, including consent to marketing;
• object to processing based on our legitimate interests.

Write to hello@datafest.ge. We will respond within the time limits set by Georgian law and will not charge you, except where a request is manifestly unfounded or repetitive.

To stop receiving the newsletter, use the unsubscribe link at the bottom of any email, or email us. We will act on marketing opt-outs promptly and in any case within the period required by law.

If you are unhappy with how we have handled your data, you can complain to the Personal Data Protection Service of Georgia (personaldata.ge) or go to court.

9. Children

DataFest Tbilisi is aimed at adults, and tickets are sold to people aged 18 and over. Where an edition includes a programme for children, participation is arranged through a parent or guardian and we will provide separate information about how those details are handled.

10. Changes to this policy

We will update this page when our practices change, and update the date at the top. If a change materially affects how we use data you have already given us, we will tell you by email.

11. Contact

DataFest Tbilisi LLC – hello@datafest.ge