From Lab to Market · 29.10.2026
Privacy Policy & Information Clause
Last updated: 6 October 2026
Scope
This document explains how Magdalena Marciniak BIONIQ Consulting, operator of WeBeam, processes the personal data of people who register for and attend WeBeam events, including From Lab to Market (29 October 2026, Forum AstraZeneca, Warsaw). It is both our privacy policy for events and the information clause required by Article 13 of the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Who we are
The controller of your personal data is Magdalena Marciniak BIONIQ Consulting, ul. Gabriela Słońskiego 23E lok. 1, 30-376 Kraków, Poland, NIP 9191723925, REGON 541864032, operator of the WeBeam platform (webeam.io).
For any question about your data or to exercise your rights, write to hello@webeam.io or to the address above. We have not appointed a Data Protection Officer.
2. What data we collect
We collect only what you give us in the registration form and what is recorded at the event:
- Identification and contact data: first name, last name, email address.
- Professional data: organisation, job title, stakeholder group, and optionally your LinkedIn profile.
- Survey answers: your Innovation Scoreboard answers (top success factor, biggest risk, most overlooked criterion) and, optionally, how your organisation evaluates projects.
- Practical information: how you heard about the event and any accessibility needs you choose to share.
- Consents: which consents you gave or refused, and when.
- Image: photos and video recorded during the event, if you agree to their use.
3. Why we process your data and on what legal basis
We use your data to run the event you registered for and, only if you agree, to keep in touch afterwards.
| Purpose | Legal basis (GDPR) |
|---|---|
| Handling your registration, organising the event, sending practical information, preparing badges and the guest list | Art. 6(1)(b): steps taken at your request to let you take part |
| Venue access and security, including sharing the guest list with the venue operator | Art. 6(1)(f): our legitimate interest in safe and orderly access to the venue |
| Presenting Innovation Scoreboard answers anonymously and preparing aggregated, anonymised event insights | Art. 6(1)(f): our legitimate interest in shaping the event programme and its results |
| Event statistics (stakeholder mix, how participants heard about the event) | Art. 6(1)(f): our legitimate interest in evaluating and improving our events |
| Accommodating accessibility needs you share with us | Art. 9(2)(a): your explicit consent, given by entering the information |
| Using your image in photos and video in post-event communication | Art. 6(1)(a): your consent, together with Art. 81 of the Polish Act on Copyright and Related Rights |
| Sending you the post-event summary | Art. 6(1)(a): your consent |
| Sending you information about WeBeam events and news | Art. 6(1)(a): your consent, as required by Polish law on electronic communications |
| Establishing, pursuing or defending legal claims | Art. 6(1)(f): our legitimate interest in protecting our rights |
You can withdraw any consent at any time by writing to hello@webeam.io or using the unsubscribe link in our emails. Withdrawal does not affect processing carried out before it.
4. Innovation Scoreboard answers and photos
Scoreboard answers are never shown with your name. We display them on the Innovation Scoreboard at the venue and use them in roundtable discussions and the post-event summary only in anonymised or aggregated form. Please do not include confidential information or personal data of other people in your answers.
Photos and video will be taken during the event. We use images in which you are recognisable only if you consented to it. Images in which you appear only as a detail of a larger whole, such as a crowd or a public gathering, may be used without consent under Art. 81(2)(2) of the Polish Act on Copyright and Related Rights. If you do not want to be photographed, tell the organisers at the registration desk.
5. Who we share your data with
We do not sell your data. We share it only where needed for the purposes above:
- Service providers acting on our behalf: Google (Google Forms and Google Workspace, used to collect registrations and store data), our email provider, and the event photographer. They process data only on our instructions under data processing agreements.
- The venue operator (Forum AstraZeneca): your name and organisation, for building access and security.
- Public authorities, where the law requires it.
Transfers outside the EEA.Some providers, such as Google, may process data in the United States. Such transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on Standard Contractual Clauses. You can request a copy of these safeguards by writing to us.
6. How long we keep your data
| Data | Retention period |
|---|---|
| Registration data and survey answers | Until the end of the event, then up to 6 months to prepare the post-event summary; after that, deleted or fully anonymised |
| Accessibility information | Deleted within 30 days after the event |
| Photos and video used with your consent | Until you withdraw consent; published material is removed within a reasonable time after withdrawal |
| Data processed on the basis of consent (summary, newsletter) | Until you withdraw consent |
| Records of consents and data needed for legal claims | For the statutory limitation period for claims |
7. Your rights
You have the right to:
- access your data and receive a copy of it;
- have your data corrected;
- have your data deleted;
- restrict processing;
- data portability, for data processed on the basis of consent or to let you take part in the event;
- object to processing based on our legitimate interest;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise these rights, write to hello@webeam.io. We will respond within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
8. Other information
Providing data is voluntary, but the fields marked as required in the registration form are needed to register; without them you cannot take part in the event. Optional fields and consents have no effect on your participation.
No automated decisions. We do not make decisions about you based solely on automated processing, including profiling.
Security. We protect your data with appropriate technical and organisational measures, including access limited to the organising team and secure, access-controlled storage.