Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains how we handle personal data collected through this website, which promotes D-Awards — Paris 2027, taking place at Plenitude Arena, Paris La Défense, on 15 and 16 January 2027.

1. Who we are

The data controller responsible for the personal data described in this policy is:

• Story Peak Global Inc.

• Registered address: Suite 472, 29 Poeun-ro 8-gil, Mapo-gu, Seoul, Republic of Korea

• Company registration number: 769-87-03825

• Privacy contact: hello@d-awards.world

D-Awards is produced in collaboration with several event partners. Where a partner, such as a ticketing platform, processes your data for its own purposes, that partner acts as its own controller and its own privacy policy applies. Section 7 sets out who we share data with.

2. What personal data we collect

We deliberately collect very little. There is no user account on this site, and we do not sell tickets here.

Mailing list sign-up

The only form on this site is the announcement sign-up, which appears in the newsletter band and in the FAQ panel. It collects:

• Email address: The only identifier we ask for. We do not ask for your name, phone number or postal address.

• Your consent: A record that you ticked the consent box, together with the date and time.

• Your language: English or French, taken from the version of the site you signed up on, so that we write to you in that language.

• Your confirmation: The date and time your sign-up was confirmed, normally when you clicked the link in the confirmation email we send you. New sign-ups join the mailing list only once confirmed this way (double opt-in). Some earlier sign-ups, made through the same form with the consent box ticked, were confirmed through an email sent by the event's promoter instead.

Announcement emails

When we send you an announcement email, our email provider, Mailgun, records whether it was delivered and whether you opened it or clicked a link in it. Opens are detected by a small image in the email, and clicks by links that pass through Mailgun first. Each of these events comes with its date and time, your IP address, the approximate location derived from it and the type of email program or device you used. We keep these events with your address to count deliveries, opens and clicks, and to stop writing to addresses that bounce or report our emails as spam.

Anti-spam and security

• A hidden field and a Cloudflare Turnstile challenge protect the form from automated abuse. When the challenge runs, your IP address is sent to Cloudflare so it can assess whether the request is human. Cloudflare acts as our processor for this check.

• Our servers keep standard access logs, which include IP addresses, request URLs, timestamps and browser user-agent strings.

Referral and campaign measurement

If you arrive here from a link shared by an influencer, a partner or an advertising campaign, our software records how you arrived so we can measure which channels work. This may include:

• The full landing URL you opened and the referring page you came from

• Campaign parameters in the link (for example `utm_source`, `utm_medium`, `utm_campaign`) and any click identifier the platform appended

• A randomly generated visitor identifier, stored in a first-party cookie

• A hashed version of your IP address

We treat that hashed IP address as personal data. It is a one-way hash rather than a plain IP, which reduces its exposure, but it is not fully anonymous, so it stays in scope of this policy and of your rights under section 10.

Cookie preferences

When the consent banner is active, your category choices are stored in your browser so we do not have to ask again on every page. Section 5 and our Cookie Policy describe this in detail.

Media requests from press, photographers and creators

When you send a media request as a journalist, photographer or creator, we collect your role, name, email address, outlet, agency or channel and its website, plus your phone number, country, a link to your work, social media handles, follower range and message if you choose to give them. We use these details only to review your request and to contact you about it. You receive press news only if you tick the separate box for it and then confirm through the link in the email we send you.

3. Why we use your data, and our legal basis

You can object to processing based on legitimate interests at any time (see section 10).

4. What we do not do

• We do not sell your personal data.

• We do not sell tickets on this website. Ticket purchases will be handled by an appointed ticketing partner on its own platform, under its own terms and privacy policy.

• We do not take card or payment details on this site.

• We do not embed third-party video players, social feeds or share widgets. All video and imagery on this site is served from our own servers.

• We do not profile you in a way that produces legal effects or similarly significant consequences, and we do not use automated decision-making in that sense.

5. Cookies and similar technologies

We use a small number of first-party cookies. Non-essential cookies are set only after you agree to them through the consent banner, which groups them into strictly necessary, analytics, marketing and influencer-referral categories.

Our Cookie Policy lists each cookie by name, states how long it lasts and explains what it does. It also explains how to change or withdraw your choices.

6. Analytics and advertising

Two analytics tags run on this site: Google Analytics 4 (visits and pages viewed) and Microsoft Clarity (usage insight, session replays, heatmaps). Both load through a Google Tag Manager container and only after you accept the analytics category in the consent banner; until then neither loads and nothing is sent to Google or Microsoft. No Google Ads, Microsoft Advertising or Meta Pixel tag is configured.

Measurement works as follows:

• All tags load through a single tag-management container, and none of them fire before you give consent.

• Analytics tags are released only by the analytics consent category; advertising and remarketing tags only by the marketing category.

• We apply Google Consent Mode, so a default state of "denied" is in force until you choose otherwise.

• This policy and the Cookie Policy will be updated to name each tag before it goes live, and the stored policy version will be raised so you are asked again rather than carried over on an old choice.

7. Who we share data with

We share personal data only where we need to, and only with parties bound to protect it:

• Mailgun (Sinch Mailgun, EU region): The email provider that sends your confirmation, welcome and announcement emails. For announcement emails it also records whether each one was delivered, opened or clicked (see section 2). Mailgun acts as our processor, and we use its EU region.

• Hosting and infrastructure: The provider that runs the servers this site is served from.

• Cloudflare: Anti-bot verification of the sign-up form.

• Google and Microsoft: Google Analytics 4 and Microsoft Clarity measure how this site is used, only after you accept the analytics category.

• Mailing list: We do not use a mailing list platform. The list is kept in our own database. New addresses join it only after the link in the confirmation email is clicked (double opt-in; section 2 covers earlier sign-ups), and every announcement email carries an unsubscribe link.

• Ticketing partner: Once appointed. If you follow a link from this site to buy a ticket, we may pass a referral code so the sale can be attributed to the channel that referred you. Your purchase details are collected by that partner, not by us.

• Event partners: The organisations named in our site footer, among others, where sharing is necessary to deliver the event.

• Professional advisers, auditors and authorities: Where we are legally required to disclose, or need to establish or defend a legal claim.

8. International transfers

Some of our providers operate outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on an adequacy decision by the European Commission where one applies, or otherwise on the European Commission's Standard Contractual Clauses together with any additional safeguards the transfer requires. You may request a copy of the relevant safeguards using the contact details in section 14.

9. How long we keep data

10. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy

• Rectify data that is inaccurate or incomplete

• Erase your data where there is no overriding reason for us to keep it

• Restrict how we process your data while a dispute is resolved

• Object to processing based on our legitimate interests, including our referral measurement

• Receive the data you gave us in a structured, machine-readable format (portability)

• Withdraw consent at any time, which does not affect processing that already took place. Every announcement email carries an unsubscribe link, and cookie choices can be changed from the "Cookie settings" link in the site footer whenever the banner is active.

To exercise any of these, write to hello@d-awards.world. We answer within one month, and will tell you if we need longer because a request is complex.

If you are not satisfied with our response, you may complain to the data protection authority in the EU or EEA country where you live, work, or where you believe the problem occurred. You may also seek a remedy through the courts.

11. Children

This site is intended for adults. We do not knowingly collect personal data from children. Admission rules for the event itself, including any age restriction and any requirement to be accompanied by an adult, will be published with the ticket terms. If you believe a child has given us personal data, contact us and we will delete it.

12. Security

We protect personal data with transport encryption (HTTPS), encrypted and HTTP-only cookies where the cookie is not required by client-side code, restricted administrative access, and providers selected for their own security posture. No system is perfectly secure, but we take reasonable and proportionate measures and will notify you and the relevant authority where a breach requires it.

13. Changes to this policy

We will update this policy when what we do with personal data changes. The "last updated" date above always reflects the current version. Where a change materially affects cookies or tracking, we will raise the stored policy version so that the consent banner asks you again rather than relying on an earlier choice.

14. Contact us

For any question about this policy or about your personal data:

• Story Peak Global Inc.

• Suite 472, 29 Poeun-ro 8-gil, Mapo-gu, Seoul, Republic of Korea

• hello@d-awards.world

Legal notice

This policy describes our data practices in good faith and in plain language. It is not legal advice.