1. Who we are
Creativity Boosters is a podcast and events project run by Dinko Juric and Nikhil Unarkant, based in Denmark. For everything described here, the two of us are the joint data controllers under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
Questions, requests, complaints or compliments go to dinko@thecreativityboosters.com or nikhil@thecreativityboosters.com. Either of us can act on your request; Dinko is the point of contact for data matters.
2. What we collect and why
We only collect what a specific feature needs. Nothing on this site is tracked for advertising, and we don't run analytics scripts.
2.1 Requesting a seat at The Creativity Summit
| What | Why | Legal basis |
|---|---|---|
| Full name, work email, company, role, and which "world" you're from (enterprise, startup, public sector, other) | To curate the guest list, decide who gets a seat, and tell you whether you're in | Our legitimate interest in running a curated event you asked to join (GDPR art. 6(1)(f)), and the steps needed before an agreement to attend (art. 6(1)(b)) |
| Your email, used to send confirmation, speaker announcements, agenda and arrival details | Summit communication | Your consent, given by ticking "Email me about the summit" (art. 6(1)(a)). You can withdraw it at any time by replying to any mail from us. |
| Mobile number (required when you request a seat) | Reaching you about the summit when there's a real need, by text or call: door codes, room changes, schedule shifts | Our legitimate interest in running the day you asked to attend (art. 6(1)(f)). Only when there's a real need, never marketing; reply STOP or tell us, and we stop. |
| Which version of the consent text you accepted, and when | So we can prove what you agreed to | Our legal obligation to demonstrate consent (art. 7(1)) |
2.2 The attendee page for confirmed guests
Confirmed guests receive a private link to a page where they can add a mobile number (see above), answer a few short questions about innovation and AI in their organisation, and register up to three guests of their own.
- Your mobile number, if we don’t have it yet. The page asks for it first, as a separate short form sent with your name and email so we can match it to your seat request. We use it only to text or call you about the summit when there's a real need, and delete it within 30 days after the summit. Legal basis: our legitimate interest in running the day you asked to attend (art. 6(1)(f)), as for the number on the seat request.
- Your answers to the questions are used to shape the programme and are shown on stage only in aggregated or anonymised form ("60 % of the room is still piloting"; "the room's most innovative invention is the printing press"). Individual answers are never attributed to a person or a company. Legal basis: your consent, given by submitting the page (art. 6(1)(a)).
- Sending the page again replaces your earlier answers. That's by design: it's how you update your details without an account.
2.3 The dispatch (email list)
If you leave your email on the home page, we store it so we can write to you when there's genuinely something to say. Legal basis: your consent (art. 6(1)(a)). Every mail contains a way to unsubscribe, and a plain reply saying "stop" works too.
2.4 Writing to us
When you email us, we keep the conversation for as long as it's needed to deal with it. Legal basis: our legitimate interest in answering you (art. 6(1)(f)).
2.5 The Idea Graveyard
The Idea Graveyard lets you write an epitaph for an idea your organisation killed and, if you choose, add it to a public wall. It never asks for your name or email.
- What we store: the idea’s name, the years it lived and its cause of death, plus its last words and a role and industry (“mourned by”) if you fill them in. Netlify also records the IP address and browser of each submission, as it does for every form.
- Why: to read each tombstone before it goes up, to show approved ones on the wall and at The Creativity Summit, and to count which causes of death come up most. The wall shows only the idea, its years and its cause of death; last words and roles are only ever reported in aggregate.
- Legal basis: your consent, given by pressing “Add to the wall” after reading the note next to the form (art. 6(1)(a)). For the IP address, our legitimate interest in keeping spam out (art. 6(1)(f)).
- Removal: email us the idea’s name and years and we take the tombstone down. We don’t know who wrote which tombstone, so that is all we need.
2.6 Your Wallet pass
Confirmed guests can add their seat to Apple Wallet or Google Wallet. We issue the pass through Passcreator; adding it is up to you.
- What Passcreator holds: your name, work email, a link to your attendee page, whether your mobile number and answers are still missing, and which stage your pass shows. It never gets your phone number or your answers. When you add the pass, Passcreator also records your device type, operating system and browser.
- Why: your seat and nothing else. The pass shows your confirmation and updates you with the lineup, arrival details and reminders to finish your attendee page, and a small plant on it grows as the summit gets closer. Apple or Google carry those updates to your phone.
- Updates from your attendee page: when you finish a step on your attendee page, your pass changes to show it (for example to “You’re in”). Only that status travels to Passcreator, never your number or your answers.
- At the door: reception scans your pass’s QR code. Passcreator records the time of that scan, and the scan updates your pass.
- Location: the pass holds the venue’s coordinates, so your phone can suggest it when you are near Microsoft in Lyngby on the day. Your phone makes that comparison itself; we and Passcreator never learn where you are.
- Legal basis: our legitimate interest in running the event you asked to attend (art. 6(1)(f) GDPR). Updates are service messages about your seat, never marketing.
- Stopping it: turn off notifications in the pass’s details, or delete the pass, at any time. Email us to have your pass deleted at Passcreator too.
2.7 Just visiting
This site is a set of static pages hosted by Netlify. Like every web host, Netlify processes your IP address and browser details to deliver the page and to protect against abuse; this appears in short-lived server logs we do not analyse. Legal basis: legitimate interest in operating a secure website (art. 6(1)(f)). We set no cookies of our own. The episode player is a Spotify embed that only loads after you click "Load Spotify player"; see the cookie policy.
3. Guests added by attendees
Attendees can bring guests. When someone registers you as their guest, we receive your name, work email and company from them, not from you. We use it for one thing: to check that you fit the room and, if you do, to write to you with confirmation and practical details. The first email you get from us links to this policy, which is how we inform you as GDPR art. 14 requires. Legal basis: our legitimate interest in running the event (art. 6(1)(f)). If you'd rather not be on the list, reply to that email and you're off it.
4. Who sees your data
We don't sell, rent or trade personal data. The only parties that touch it:
| Who | What for | Role |
|---|---|---|
| Netlify, Inc. (USA) | Hosts the site and stores form submissions (seat requests, attendee page, dispatch sign-ups, Idea Graveyard) | Processor |
| ImprovMX (France) and our mailbox providers | Deliver email sent to @thecreativityboosters.com addresses | Processor |
| Resend (USA) and Google (Gmail) | Send the summit’s emails: confirmation of your seat, the links to your pass and practical details | Processors |
| Microsoft Danmark ApS (venue) | Receives the final attendee list (name and company) so reception can let you in on the day | Independent controller for building access |
| Passcreator (Germany) | Issues and updates the Wallet pass, if you add one | Processor |
| Apple and Google | Carry pass updates to Wallet on your phone, if you add the pass | Independent controllers |
| Speakers and hosts | Get the aggregated, anonymised results of the attendee questions | No personal data shared |
| Spotify AB (Sweden) | Only if you choose to load the embedded player; Spotify then processes your data under its own privacy policy | Independent controller |
5. Transfers outside the EU
Netlify stores data in the United States. Transfers rely on the EU-US Data Privacy Framework where Netlify is certified, and on the European Commission's Standard Contractual Clauses in Netlify's data processing terms otherwise. Passcreator hosts pass data in the EU. The summit’s emails go out through Resend and Google’s Gmail, which may process your name, email address and the links to your pass in the United States under their own data processing terms. No other transfer outside the EU/EEA takes place unless you load the Spotify player or add the Wallet pass, whose updates Apple or Google deliver under their own terms.
6. How long we keep it
| Data | Kept until |
|---|---|
| Seat requests, attendee page answers, guest details | Six months after the summit (deleted by 31 May 2027), unless you ask us to delete them sooner |
| Mobile numbers | Deleted within 30 days after the summit |
| Wallet pass records at Passcreator, including the time your pass was scanned at the door | Deleted with the seat requests, six months after the summit. Deleting the pass from your phone stops updates at once. |
| Dispatch email list | Until you unsubscribe, or after two years without a single email sent |
| Idea Graveyard submissions, as received (including the IP address) | Deleted at the end of the quarter they arrive in, so never more than three months (first clean-up 31 December 2026). Approved tombstones on the wall hold no personal data and stay up. |
| Email correspondence | Up to one year after the last message, unless the thread has a longer practical purpose |
| Proof of consent (version and time) | As long as the related data exists, plus one year |
7. Your rights
Under the GDPR you can ask us, at any time and free of charge, to:
- See the data we hold about you (access);
- Correct it if it's wrong (rectification);
- Delete it (erasure), which we'll do unless a legal reason stops us;
- Restrict or object to processing based on legitimate interest;
- Receive the data you gave us in a machine-readable format (portability);
- Withdraw consent, which stops future processing but doesn't undo what happened before.
Email dinko@thecreativityboosters.com. We answer within a month. If you think we've handled your data badly, you can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark. We'd obviously prefer you told us first.
8. Security
The site is served over HTTPS only, with a strict Content Security Policy. Form data is stored in Netlify's form system behind our account login and is only ever exported to the two of us. We keep the number of people and services that can see your data as small as the list in section 4.
9. Changes to this policy
If we change something that matters, the version number at the top changes and the forms on the site start referencing the new version. Consent you gave under an earlier version stays valid for the purposes described then.
Plain summary
We collect what the summit and the podcast need, keep it for a defined time, share it with as few services as possible, and delete it when we're done. If in doubt, email us.