Privacy Policy & Legal Notice

Effective date: 26 September 2026

1. Legal Notice (Impressum)

Curato Unternehmergesellschaft (haftungsbeschränkt)
Kurfürstendamm 11
10719 Berlin, Germany

Represented by / Geschäftsführer:
Dogan Altindag

Contact:
Phone: +49 173 4612665
Email: info@speakercuration.com

Commercial Register:
Amtsgericht Berlin-Charlottenburg, HRB 277559 B

VAT ID:
DE456011490

2. Privacy Policy (GDPR Compliance)

2.1 Introduction

This Privacy Policy explains how Curato Unternehmergesellschaft (haftungsbeschränkt) (“we”, “us”, “our”), operating the websites speakercuration.com and scurati.com, processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data-protection and digital-services privacy law.

Scurati is an AI-powered, human-led speaker curation service. We aim to process only the personal data reasonably necessary to handle requests, provide our services, maintain business relationships and operate this website securely.

2.2 Data Controller

The data controller responsible for personal data processed through this website and our related business workflows is:

Curato Unternehmergesellschaft (haftungsbeschränkt)
Kurfürstendamm 11
10719 Berlin, Germany
Email: info@speakercuration.com

2.3 Categories of Data We Process

Depending on how you interact with us, we may process the following categories of personal data:

• Contact and business data, such as name, business email address, telephone number if provided, company, role and other professional contact details.
• Event and request data, such as event name, date, venue, audience, topic, objectives, preferred language, speaker requirements, requested speakers, fee or availability enquiries and related correspondence.
• Case and relationship data used to manage an enquiry or business relationship, including case status, communication history, speaker selections, commercial follow-up and relevant CRM records.
• Chat data, including name, email address and message content if you use our live-chat function.
• Technical data, such as IP address, browser and device information, operating system, referring page, timestamps and server-log information.
• Usage and measurement data, such as pages visited, interactions and conversion events, if you consent to optional analytics or measurement.
• Consent and privacy-setting data, including whether you accepted or declined optional technologies and when that choice was recorded.

We do not intentionally request special categories of personal data, such as health information, religious beliefs, political opinions or other sensitive information, unless such information is genuinely necessary for a specific request and there is a lawful basis for processing it.

2.4 Purposes and Legal Bases

We process personal data only where there is a lawful basis. Depending on the context, this may include:

• Handling enquiries, speaker requests and pre-contractual steps – Art. 6(1)(b) GDPR where processing is necessary in order to take steps at your request before entering into a contract or to perform a contract.
• Managing ongoing business relationships and CRM records – Art. 6(1)(f) GDPR, based on our legitimate interest in maintaining professional relationships, keeping accurate records and following up on relevant business matters.
• Contacting speakers, agents or representatives at your request – Art. 6(1)(b) GDPR and, where appropriate, Art. 6(1)(f) GDPR, insofar as this is necessary to obtain fees, availability or other information relevant to your request.
• Operating, protecting and improving the website – Art. 6(1)(f) GDPR, including security, fraud prevention, error diagnosis and technically necessary functions.
• Optional analytics and measurement – Art. 6(1)(a) GDPR on the basis of your consent. Where information is stored on or accessed from your device, Section 25(1) TDDDG also applies unless the technology is strictly necessary within the meaning of Section 25(2) TDDDG.
• Compliance with legal obligations – Art. 6(1)(c) GDPR.

2.5 Recipients and Service Providers

We do not sell personal data and do not disclose it for unrelated third-party marketing. Where necessary for the purposes described above, personal data may be processed by or disclosed to:

• Hosting and technical service providers, including ALL-INKL.COM – Neue Medien Münnich, Germany, which hosts our website infrastructure.
• Google services used for website operation, measurement and workflow infrastructure, including Site Kit, Google Analytics, Google Tag technologies and Google Apps Script where applicable.
• OpenAI where API-based AI services are used to assist with analysis, semantic matching or preparation of recommendations. For customers in the EEA, relevant processing is governed by OpenAI Ireland Ltd. under OpenAI’s applicable data-processing terms.
• tawk.to for live-chat and visitor-support functionality.
• Speakers, agents, bureaus or other authorised representatives when you explicitly request fee, availability or booking-related outreach and disclosure is necessary for that purpose.
• Professional advisers and public authorities where required for legal, tax, accounting, compliance or enforcement purposes.

Processors acting on our behalf are engaged under appropriate contractual arrangements where required by data-protection law.

2.6 International Data Transfers

Some service providers or their subprocessors may process data outside the European Economic Area. Where personal data is transferred to a country that does not benefit from an adequacy decision by the European Commission, we rely on an appropriate transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, participation in an applicable adequacy framework, or another safeguard permitted under Chapter V GDPR.

2.7 Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, taking into account the nature of the relationship, potential follow-up, statutory limitation periods and legal retention requirements.

• Enquiry and case data is retained while a request is active and, where appropriate, for a reasonable period afterwards to support follow-up and an ongoing or reasonably expected business relationship.
• CRM and professional contact data may be retained while a relevant business relationship exists or can reasonably be expected, subject to periodic review and your rights under the GDPR.
• Contract, accounting and tax records are retained for the statutory periods applicable to the relevant document type.
• Technical logs are generally retained only for a limited period unless a longer period is necessary for security, troubleshooting or legal reasons.
• Consent records may be retained for as long as necessary to remember, administer and where required demonstrate your privacy choices.

2.8 Cookies, Consent and Analytics

We distinguish between technologies that are technically necessary for the website or a service you expressly request and optional analytics or measurement technologies.

For visitors in the EEA, Switzerland and the United Kingdom, our consent mechanism communicates your privacy choice to supported Google services through Google Consent Mode and the WordPress Consent API. Optional analytics and measurement are disabled by default and are activated only after you select Accept optional.

We use Google Analytics 4 and related Google measurement technologies through Site Kit by Google to understand how the website is used and to measure relevant interactions and conversions. These technologies are used for optional measurement only where the required consent has been given.

You can decline optional technologies by selecting Only essential. You can change or withdraw your choice at any time by opening Privacy settings in the website footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

2.9 Live Chat – tawk.to

We use the live-chat service tawk.to, provided by tawk.to Inc., to make direct support available on the website and to help us understand when visitors may need assistance.

The tawk.to widget may be loaded when a page is visited. In doing so, technical connection and usage information such as IP address, browser and device information, approximate location, referring page, currently viewed page and timestamps may be processed by tawk.to. Our legitimate interest under Art. 6(1)(f) GDPR is to provide timely customer support and operate the service effectively.

For European visitors, the tawk.to European Consent Form is enabled. According to tawk.to, chat-widget cookies and local storage are not set until the visitor accepts that consent form. If you open the chat, you are asked to review the consent notice before starting a conversation. We also require a name and email address before the chat begins. This information and the content of the conversation are then processed in order to handle your enquiry.

tawk.to acts as a processor for customer chat data under its Data Processing Addendum and uses subprocessors in several countries, including the United States and the European Union. More information is available in tawk.to’s privacy and data-protection documentation.

2.10 AI-Assisted Processing

Scurati uses artificial intelligence and automated tools to assist with the analysis of event briefs, semantic matching, speaker research and the preparation of speaker recommendations.

These systems support our curation process but do not replace human commercial judgment. Speaker recommendations, outreach, fee and availability enquiries, booking decisions and contractual decisions remain subject to human review and oversight.

Where AI-assisted workflows involve personal data, we aim to limit the information submitted to what is reasonably necessary for the relevant purpose. We currently use OpenAI API services for parts of this workflow. OpenAI states that business and API data is not used to train its models by default.

Scurati does not use AI to make decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals within the meaning of Art. 22 GDPR. Where the EU AI Act requires a transparency notice for a direct interaction with an AI system, we will provide that notice in the relevant interface or interaction.

2.11 Your Rights under the GDPR

Subject to the applicable legal requirements, you may have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, contact us at info@speakercuration.com.

2.12 Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure or unauthorised access. No method of transmission or storage can, however, guarantee absolute security.

2.13 Supervisory Authority

You have the right to lodge a complaint with a competent data-protection supervisory authority. For our Berlin establishment, the competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin, Germany
www.datenschutz-berlin.de

2.14 Updates

We may update this Privacy Policy when our services, technologies or legal requirements change. The current version will be published on this page together with its effective date.