Effective Date: August 3, 2026

Introduction

KuppingerCole Analysts AG ("KuppingerCole") and its affiliates are committed to protecting your personal information. This Privacy Policy ("Policy") explains how we collect, process, and protect your personal data when you interact with our services.

Data Controller & Contact Information

KuppingerCole Analysts AG
Wilhelmstr. 20-22, 65185 Wiesbaden, Germany
Email: service@kuppingercole.com

For any privacy-related inquiries, you can contact our Data Protection Officer (DPO):
Oscar Hernandez
Email: oscar.hernandez@kuppingercole.com

When Do We Collect Your Information?

We collect personal data when you:

Register for an account or use our services (e.g., purchasing licenses, event participation, accessing research materials).
Interact with us via email, social media, or customer support.
Register for or attend KuppingerCole Analysts events (virtual, on-site, or hybrid).
Engage with our websites, surveys, or marketing materials.

What Data Do We Collect?

We may collect the following categories of personal data:

Identification Data: Name, company, job title, email, phone number, and address.
Professional Data: Publicly available social media details (e.g., LinkedIn).
Event Participation Data: Registration details, networking preferences, session attendance, and interaction data.
Technical Data: IP address, browser type, device details, and behavioral engagement with our website and emails.

How Do We Use Your Information?

We process your data for the following purposes:

Providing Our Services: Facilitating event participation, delivering research, and managing your user account.
Marketing & Communication: Sending updates, newsletters, and promotional offers (with opt-out options).
Improving User Experience: Analyzing website and email engagement to optimize our services.
Security & Compliance: Ensuring site security, preventing fraud, and complying with legal obligations.
Pre-Event Lists: Before an event, we may compile a pre-event list containing job level, industry, country, and company name of registered attendees. This information is shared with event sponsors for staffing and engagement purposes. The pre-event list does not include personal contact details unless the attendee has explicitly opted in.
Third-Party Opt-In: Attendees may choose to opt in to share their name, title, company, and email address with event sponsors. Those who opt in may receive event-related communications from sponsors.
On-Site & Post-Event Delegate Lists: Attendees at physical events receive badges with QR codes that may be scanned by sponsors at their booths or activities. When scanned, the attendee’s contact information (name, title, company, email, work phone, and business address) is shared with the sponsor for marketing purposes.
Virtual Event Delegate Lists: When attending a virtual event, an attendee’s name, title, and company may be visible to sponsors in real time. If an attendee downloads sponsor content or attends sponsored sessions, their full contact details (name, title, company, email, work phone, and business address) may be shared with the sponsor.

Legal Bases for Processing

We process personal data based on the following legal grounds as permitted under Article 6 GDPR:

Performance of a Contract (Art. 6(1)(b)): When processing is necessary to provide our services, manage user accounts, or fulfill event registrations.
Legitimate Interests (Art. 6(1)(f)): For purposes such as improving our services, analysing website usage, managing event processes, and ensuring security. We ensure that our interests do not override your fundamental rights and freedoms.
Consent (Art. 6(1)(a)): For activities such as marketing communications, non-essential cookies, analytics technologies, sponsor opt ins, and any processing where your explicit permission is required.
Legal Obligations (Art. 6(1)(c)): When processing is required for compliance with applicable laws, including financial record keeping or responding to regulatory requests.

How We Store and Delete Your Data

We retain personal data only as long as necessary to fulfill the intended purposes or comply with legal obligations. Retention periods are determined based on legal requirements, contractual obligations, our operational needs, and your consent preferences. When data is no longer required, it is securely deleted. Users may request data deletion or manage their information through their account settings, cookie banner settings, or by submitting a Data Subject Request via this form. If deletion is not possible due to legal requirements, data will be restricted instead of erased. Technical log data may be retained for a longer period for security and fraud prevention purposes.

Consent & Revocation

You have the right to withdraw your consent for data processing based on consent at any time with effect for the future. To revoke your consent, please submit a Data Subject Request via this form. If you withdraw your consent, we will cease processing your data unless there is another legal basis for processing, such as compliance with legal obligations.

Your Data Protection Rights (GDPR Rights)

Under the General Data Protection Regulation (GDPR), you have a range of rights regarding the processing of your personal data. These rights are designed to give you greater control and transparency over how your data is handled:

Right of Access:
You have the right to obtain confirmation as to whether or not we are processing your personal data, and if so, access that data along with information about how it is used, shared, and stored.
Right to Rectification:
If any of your personal data is inaccurate or incomplete, you can request that we update or correct the information promptly.
Right to Erasure ("Right to be Forgotten"):
You can request the deletion of your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw your consent (where applicable). This right may be subject to certain legal obligations that require us to retain the data.
Right to Restrict Processing:
In certain circumstances, you have the right to ask us to limit the processing of your personal data. This means that while we may continue to store your data, we will not process it further until the restriction is lifted.
Right to Data Portability:
You can request that your personal data be provided to you in a structured, commonly used, and machine-readable format. Additionally, you have the right to transfer this data directly to another data controller, where technically feasible.
Right to Object:
You have the right to object to the processing of your personal data based on your particular circumstances. This is especially applicable for processing conducted for direct marketing purposes or where processing is based on our legitimate interests.
Right to Withdraw Consent:
If your personal data processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing that occurred before your withdrawal.

To exercise any of these rights, please submit a Data Subject Request via this form We will respond to your request within the timeframe required by applicable law and provide you with the necessary information regarding your rights and how to exercise them.

Third-Party Services We Use

We use third-party platforms to enhance our services. The following providers process your data in accordance with GDPR:

Livestorm

Used for hosting webinars and virtual events. Data collected includes registration details, participation analytics, and IP address.

Livestorm, 16 rue Cuvier, 69006 Lyon, France
Privacy Policy: https://livestorm.co/privacy-policy

Brella

Used for networking and event management. Data collected includes profile information and engagement data.

Brella Inc., 470 Ramona Street, Palo Alto, CA 94301, USA
Privacy Policy: https://www.brella.io/privacy-policy

Stripe

Used for secure payment processing. Data includes name, billing details, and payment transaction history.

Stripe Payments Europe, Ltd., 10 George Street, Dublin 2, Ireland
Privacy Policy: https://stripe.com/privacy

Kinde

We use Kinde as an authentication and identity management platform to securely handle user registrations and logins. Kinde processes personal data such as login credentials, authentication logs, and session data to ensure secure access to our services.

Kinde Australia Pty Ltd, 26/368 Sussex St, Sydney NSW 2000, Australia
Privacy Policy: https://docs.kinde.com/trust-center/privacy-and-compliance/privacy-policy/

DataGuard

We use DataGuard for privacy management and compliance processes, including the handling of data subject requests, records of processing activities (RoPA), and GDPR documentation.

DataCo GmbH, Sandstraße 33, 80335 Munich, Germany
Privacy Policy: https://www.dataguard.com/privacy-policy

OpenAI

Our chatbot service is powered by OpenAI to enhance customer interactions and provide automated support. While interacting with the chatbot, data such as chat logs, queries, and conversation history may be collected to improve service quality. We strongly recommend that users avoid sharing personally identifiable information (PII) in chat interactions.

OpenAI Ireland Limited 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43
Privacy Policy: https://openai.com/enterprise-privacy

Use of Cookies, Consent Tools and Analytics Technologies

We use cookies and similar technologies to operate our website and, subject to your consent, to analyze website usage, improve our website and enhance user experience. Non-essential cookies and similar technologies are only activated after you have given your consent via our consent banner. You can change or withdraw your consent at any time in the cookie settings on our website.

Cookiebot by Usercentrics

We use Cookiebot by Usercentrics as our consent management platform. Cookiebot helps us manage and document your cookie preferences and supports the categorization of cookies and tracking technologies used on our website.

Usercentrics A/S (Cookiebot) Havnegade 39, 1058 Copenhagen K, Denmark
Further information: https://www.cookiebot.com/en/privacy-policy/

Google Tag Manager

We use Google Tag Manager to manage and deploy website tags and scripts. The actual processing of personal data depends on the tags and services implemented through Google Tag Manager. Non-essential tags are only activated if you have given your consent where required.

Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland
Further information: https://policies.google.com/privacy

Google Analytics 4

If you give your consent, we use Google Analytics 4 to analyze how our website is used. This may include information such as your device and browser data, pages viewed, general geographic information and interactions on the website. Google Analytics 4 is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Data collected in this context may be processed by Google, including on servers in the United States. Where personal data is transferred to a third country, such transfer takes place on the basis of applicable safeguards.

Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland
Further information: https://policies.google.com/privacy

Microsoft Clarity

If you give your consent, we use Microsoft Clarity to understand how users interact with our website and to improve usability. Clarity may collect interaction data such as page views, clicks, scrolling behaviour, navigation patterns, session replays and heatmaps. According to Microsoft, sensitive form fields are masked before capture. Microsoft Clarity is only used after you have given your consent to analytics cookies or similar technologies. The legal basis is Art. 6(1)(a) GDPR. Data collected through Clarity may also be processed in third countries such as the United States, subject to applicable safeguards.

Microsoft Ireland Operations Limited One Microsoft Place South County Business Park, Leopardstown, Dublin 18, Ireland
Further information: https://clarity.microsoft.com/privacy

Salesforce

Used for customer relationship management, including tracking interactions and preferences.

Salesforce Inc. Salesforce Tower, 415 Mission Street, San Francisco, California 94105
Privacy Policy: https://www.salesforce.com/company/legal/privacy

Salesforce Account Engagement (Pardot)

Used for marketing automation and email tracking. We analyze newsletter engagement to tailor content.

Salesforce Inc. Salesforce Tower, 415 Mission Street, San Francisco, California 94105
Privacy Policy: https://www.salesforce.com/company/privacy

Oktopost

Used for social media management and analytics. We collect engagement metrics and professional social media details while maintaining anonymity.

Oktopost Technologies, Inc., Zeev Jabotinsky St 5, Ramat Gan, 5252006, Israel
Privacy Policy: https://www.oktopost.com/privacy

Apollo.io

Used for business-to-business (B2B) sales intelligence. We may process professional contact details and interaction data.

ZenLeads Inc. 440 N Barranca Ave #4750, Covina, CA 91723-1722
Privacy Policy: https://www.apollo.io/privacy-policy

Leadfeeder

We use Leadfeeder as an additional marketing analytics tool to identify which companies visit our website and to analyze visitor behavior. This data helps us tailor our marketing strategies and improve our services. Leadfeeder processes data in compliance with GDPR.

Dealfront Group GmbH, with registered office at Durlacher Allee 73, D-76131 Karlsruhe, Germany
Privacy Policy: https://www.leadfeeder.com/privacy/

Programmatic Advertising (Tagesspiegel Media / The Trade Desk)

We use programmatic advertising services provided by Tagesspiegel Media GmbH, which uses the demand-side platform (DSP) of The Trade Desk, Inc., to deliver personalised advertising, retargeting and campaign measurement, based on your consent. In this context, online identifiers (e.g. cookie IDs, mobile advertising IDs), IP address, device and browser information, and interaction data may be processed. Data may be transferred to the United States under appropriate safeguards.

The Trade Desk, Inc., 42 N. Chestnut St, Ventura, CA 93001, USA
Privacy Policy: https://www.thetradedesk.com/us/privacy

Changes to This Policy

We may update this policy periodically. The latest version will always be available on our website at https://www.kuppingercole.com/privacy.

For any questions, please contact our DPO at oscar.hernandez@kuppingercole.com.

Privacy Policy