At Agent Conf (the “Event”) organized by Callstack, we respect your right to privacy. 

This Privacy Policy aims to help you understand what information and personal data we collect, how we use this data, and for what purposes. We are committed to protecting your privacy by ensuring the protection, confidentiality, and security of the personal data entrusted to us, in accordance with applicable law, particularly the General Data Protection Regulation (the “GDPR”). 

This Privacy Policy is an integral part of the Agent Conf Terms and Conditions (the “T&Cs”) and is published on our website https://agent.sh or otherwise made readily available to you. For the avoidance of doubt, your use of Callstack's services as defined in the T&Cs indicates that you've read and understood this Privacy Policy.

Who is your personal data controller?

The controller of your personal data is Callstack.io sp. z o. o. with its registered office in Wrocław, Poland (address: ul. Prosta 36, 53-508 Wroclaw; registration: District Court for Wrocław-Fabryczna in Wroclaw, National Court Register number: 606530; TIN: 8992785616; share capital: PLN 100,000.00; “Callstack” or “we”). Callstack.io, acting as the controller, determines the purposes and methods of processing your personal data, as well as how your data will be used. To contact us regarding personal data matters and to exercise your rights related to processing, you can reach us via email at conference@callstack.com or by (snail) mail at Callstack’s address at ul. Prosta 36, 53-508 Wrocław, Poland.

What types of data do we collect?

We only collect personal data that we reasonably require for the Event. The types of personal data we process are:

• your first and last name,
• your email address, 
• your company name,
• your country of origin,
• information about how you learned about the Event and whether you have attended any of our previous conferences,
• IP address, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages and the number of clicks (through the website log file).

Why do we collect your data?

The personal data we collect is reasonably necessary for our activities related to the Event, including providing services that we believe you would expect from us. These purposes include:

• Concluding agreements via our website or providing other services that you request from us, such as purchasing a ticket for, or participating in, the Event (such personal data processing is based on Article 6(1)(b) of the GDPR),
• Communicating with you and providing news and information regarding events and activities that you request from us (based on Article 6(1)(b) of the GDPR), or which we believe may interest you (based on Article 6(1)(f) of the GDPR),
• Fulfilling purposes necessary or incidental to providing events and activities that you have ordered or requested from us (based on Article 6(1)(b) of the GDPR),
• Maintaining documentation as part of pursuing our legitimate interests (based on Article 6(1)(f) of the GDPR),
• Archival (evidentiary) purposes, ensuring continuous and uninterrupted operation of our business and protection against various types of allegations and claims (based on Article 6(1)(f) of the GDPR),
• Determining, investigating, or defending against claims as part of pursuing our legitimate interests (based on Article 6(1)(f) of the GDPR),
• Personalizing and customizing your experience when using our website as part of pursuing our legitimate interests (based on Article 6(1)(f) of the GDPR),
• Optimizing ads based on collected anonymized data and building targeted audiences as part of pursuing our legitimate interests (based on Article 6(1)(f) of the GDPR),
• Statistical purposes, such as website traffic analysis and performing marketing activities, to better understand our users’ experience as part of pursuing our legitimate interests (based on Article 6(1)(f) of the GDPR).

Cookies

Cookies are small pieces of data that websites store on your computer while you visit a website. They are commonly used for various purposes, such as remembering user preferences, analyzing website traffic, and providing personalized content. Our cookies are necessary for the full functionality of our website and are also utilized to enhance your browsing experience. You can manage or disable cookies through your browser settings. However, please note that disabling cookies may limit your ability to fully utilize certain features of our website.

How do we share your data with third parties?

We engage with several trusted third-party service providers to facilitate our services. For instance, these providers assist us with hosting, data management, and direct marketing-related services, accessing only the necessary data on an as-needed basis.

Your personal data may be disclosed to the: 

• entities authorized under applicable legal provisions (e.g. courts, public administration authorities, law enforcement agencies, regulatory bodies),
• our employees, contractors, co-workers, and clients who are authorized to process such data,
• entities entrusted by us for processing personal data or other recipients of personal data, including email providers, accountants, legal advisors, HR contractors, transport companies, and couriers.

We ensure that all our providers adhere to our data protection standards and have implemented adequate organizational and security measures. We also require them to commit to further legal safeguards. Below is a list of our third-party service providers:

• Ti.to (Team Tito Limited)
• Google Analytics (Google LLC)
• Google Tag Manager (Google LLC)
• Google Adwords (Google LLC)
• Facebook Conversion Pixel (Facebook Ireland Limited)
• Twitter Universal Website Tag (Twitter, Inc.)
• YouTube (YouTube, LLC)
• LinkedIn Tracking Pixel (LinkedIn Corporation)
• HubSpot CRM (HubSpot, Inc.)
• Webflow (Webflow, Inc.)

Is my data well secured?

We have adopted adequate technical and organizational measures to avoid alteration, loss, or unauthorized access to your data, We carefully select only trusted and certified providers to process your data, ensuring they have stringent security measures in place. Additionally, both we and our providers use encryption protocols for data access and transfer and anonymization techniques to mitigate the risks in the event of a data breach. If you have any questions, feel free to contact us at: conference@callstack.com.

What rights do I have?

You have certain data protection rights. If you wish to inquire about the personal data we hold about you or request its removal from our systems, please choose the appropriate option in the mail you receive from us or contact us at conference@callstack.com. Subject to certain limitations outlined in the GDPR or other applicable laws, you have the following data protection rights:

• the right to access, update, or delete the information we have collected,
• the right of rectification,

• the right to object,

• the right of restriction,

• the right to data portability,

• the right to withdraw consent.

You also have the right to object to the processing of your data at any time. We will cease processing your data unless we can demonstrate valid, legitimate grounds that override your interests, rights, and freedoms or your information will be necessary for us to determine, assert, or defend claims. You have the right to object to the processing of your data for direct marketing purposes at any time. If you exercise this right, we will cease processing your personal data for those purposes.

‍

Changes to this policy

We review this Privacy Policy from time to time to ensure it is in line with best practices and in compliance with any legislative changes. Any changes to this Privacy Policy will be incorporated into a new version of the same and published online. The last update to this Privacy Policy was posted on February 16, 2026.

Miscellaneous

Please note that we do not make automated decisions or profile your data during the provision of our services. Your personal data may be transferred to an entity registered in a third country that ensures an adequate level of security, as determined by the EU Commission’s adequacy decision.

‍