Privacy Policy

This policy explains what happens with your personal data when you visit crowdwall.live or send us a demo request. Short version: we collect little, we don't sell or share it for marketing, and analytics tools that need your consent only run if you say yes.

01Who is responsible

The controller for data processing on this website is:

SYJO MEDIA OG
Ortnergasse 11
9020 Klagenfurt am Wörthersee, Austria
Email: hello@crowdwall.live

CrowdWall is a brand of SYJO MEDIA OG. Full company details are in our Impressum.

We have not appointed a data protection officer. Under the GDPR, this is not required for a company of our size and type of processing.

02What this website does — and doesn't

crowdwall.live is an information website. There is no login, no user account, no shop, and no newsletter.

Personal data is processed in four situations:

• when your browser loads the site (technical connection data, see section 3),
• when you send us a demo request or an email (see section 5),
• when we count visits without cookies (see section 6.1 — this always runs),
• when we use analytics tools that set cookies — only if you agree in the cookie dialog (see sections 4 and 6.2).

We do not use advertising trackers, retargeting, social media pixels, or embedded third-party videos. Fonts and videos are served from our own hosting.

03Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (together with its affiliates in the EU). Cloudflare delivers the pages, protects the site against attacks, and encrypts the connection between your browser and the site (TLS).

What Cloudflare processes: When you open a page, your browser sends technical data to Cloudflare's servers: your IP address, the page you requested, date and time, browser type and version, operating system, the referring URL, and the transferred data volume. Cloudflare uses this data to deliver the site, to detect and block attacks and abuse, and to keep the service stable and secure.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a fast, secure, and reliable website. Without this processing, the site cannot be displayed.

Retention: Cloudflare stores connection logs for a limited period for security purposes and then deletes or anonymizes them. Details: Cloudflare Privacy Policy.

Our agreement with Cloudflare: We have a data processing agreement with Cloudflare under Art. 28 GDPR (Cloudflare Customer DPA). Transfers to the USA are covered as described in section 8.

04Cookies and your consent

When you first visit the site, a small dialog asks whether you're fine with analytics cookies. You can say yes or no — both take one click, and the site works the same either way. You can change your mind at any time via Cookie-Einstellungen at the bottom of this page or in the footer.

4.1 Strictly necessary — no consent needed

• Cloudflare security cookies (for example __cf_bm, cf_clearance): protect the site against bots and attacks; short-lived, no profile, no tracking.
• Your cookie choice (cw_consent): remembers whether you said yes or no, so we don't ask again on every page. Stored for 12 months.

Legal basis: Art. 6(1)(f) GDPR and § 165(3) TKG 2021 — technically necessary to deliver the service you asked for.

4.2 Analytics — only with your consent

If you agree, the tools in section 6.2 (Google Tag Manager, Google Analytics, Microsoft Clarity) set cookies and read information from your device. Which cookies, for how long, and what they do is listed in section 6.2.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021. You can withdraw it at any time with effect for the future; withdrawing is as easy as consenting.

If you say no, none of these tools are loaded. No cookies, no scripts, no data to Google or Microsoft.

Local storage: Apart from the above, we use your browser's memory only for technical preferences such as reduced motion or data-saving mode, if your device signals them.

05Demo requests and contact

5.1 The demo request form

On /book-a-demo you can ask us for a demo. We ask for:

• your name (required),
• your work email (required),
• your role — organizer, sponsor or brand, agency, or something else (required),
• one line about your event (optional).

We use this data for one purpose: to reply to you and set up the demo. We do not add you to a newsletter, and we do not start an automated email sequence. If you tell us you're not interested, that's the end of it.

Legal basis: Art. 6(1)(b) GDPR — the processing is necessary to respond to your request and take steps before a possible contract. Where you contact us on behalf of your company, we also rely on Art. 6(1)(f) — our legitimate interest in answering business inquiries.

How the form is transmitted: When you submit the form, your entries are sent encrypted to a function running on Cloudflare's infrastructure and forwarded to us by email via Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA — Resend DPA). Both providers act as our processors under Art. 28 GDPR. Your data ends up in our mailbox; the form itself does not build a database.

Spam protection with Cloudflare Turnstile: To keep out automated spam, the form uses Cloudflare Turnstile. Turnstile checks whether a request comes from a real browser. For this, Cloudflare processes technical data such as your IP address, browser characteristics, and interaction signals. Turnstile does not show puzzles and is not used to track you across sites. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in protecting the form against abuse. Details: Cloudflare Turnstile Privacy.

5.2 Email

If you email us directly, we process your email address, your name, and whatever you write to us — to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR, as above.

Please don't send us sensitive information by email. If you need to share confidential material for a project, ask us for a secure way to do so.

06Website analytics

We use analytics to see which pages are read, whether the site loads fast, and where visitors get stuck. Two kinds:

6.1 Counting visits without cookies — Cloudflare Web Analytics (always on)

Cloudflare Web Analytics by Cloudflare, Inc. (address in section 3) measures page views, the referring page, your country (derived from your IP address, which is not stored), browser and device type, and performance metrics such as load time. All of this is aggregated. It sets no cookies, uses no local storage, and does not fingerprint your browser. We cannot see individual visitors.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding how the site is used and keeping it fast. Because nothing is stored on or read from your device, § 165(3) TKG 2021 does not require consent.

6.2 Analytics with cookies — only if you agree

The following tools run only after you click "Yes" in the cookie dialog. Legal basis for all of them: your consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021.

Change your mind: Cookie-Einstellungen — opens the dialog again; you can withdraw consent with one click.

07Links to other sites

This site links to external websites, including our social media profiles. These are plain links — we don't embed social media feeds, share buttons, or third-party widgets. Nothing is transferred to those providers until you click a link. Once you're on their site, their privacy policy applies.

08Data transfers outside the EU

Cloudflare, Google, and Microsoft are US companies or have US parent companies. This means connection data (section 3), form data in transit (section 5), and analytics data (section 6) can be processed on servers in the United States.

All three are certified under the EU–U.S. Data Privacy Framework, which the European Commission recognizes as providing adequate protection (Art. 45 GDPR). In addition, our data processing agreements with each of them include the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as a fallback.

For Google Analytics and Microsoft Clarity, data leaves the EU only if you have consented to these tools (section 4.2).

Our email delivery provider Resend (section 5.1) is also a US company; transfers are covered by the EU Standard Contractual Clauses included in its data processing agreement.

We do not transfer your data to other third countries.

09How long we keep data

10Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR) — to know what data we hold about you.
• Rectification (Art. 16) — to have incorrect data corrected.
• Erasure (Art. 17) — to have your data deleted, where no legal duty requires us to keep it.
• Restriction (Art. 18) — to limit how we process your data.
• Data portability (Art. 20) — to receive your data in a common, machine-readable format.
• Objection (Art. 21) — to object to processing based on our legitimate interests (sections 3, 4.1, 5, 6.1). We will then stop, unless we can show compelling legitimate grounds.
• Withdrawal of consent (Art. 7(3)) — for the analytics tools in section 6.2, at any time via Cookie-Einstellungen. Withdrawal does not affect processing that happened before.

To exercise any of these rights, email us at hello@crowdwall.live. We'll reply within one month. We may ask you to verify your identity first — only as much as needed to make sure we're talking to the right person.

Complaint: If you believe we're handling your data unlawfully, you can lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at · dsb.gv.at

You can also contact the supervisory authority in your own EU member state.

No automated decisions: We don't make automated decisions about you and we don't build profiles that have legal effects on you (Art. 22 GDPR).

11Changes to this policy

We update this policy when the site or the law changes — for example, if we add a new tool. The current version is always at crowdwall.live/privacy. The date below tells you when it was last changed.

Last updated: September 1, 2026