1. About This Policy
CenterStage is a business-to-business event operations platform provided by 2 Stream BV (“2 Stream”, “we”, “us”, “our”), a Belgian company registered under number 1004.974.933, at Excelsiorlaan 9, 1930 Zaventem, Belgium.
This Privacy Policy explains how 2 Stream handles personal data for the https://www.centerstage.tv marketing website, business enquiries and sales, customer administration, and professional access to the CenterStage platform and APIs.
If you are attending an event hosted through CenterStage, please see our separate Event Participant Privacy Notice and the event organizer’s own privacy notice. The organizer generally decides why participant and speaker data is collected and how it is used; 2 Stream provides the technology and generally processes that data on the organizer’s behalf. This Policy remains relevant where 2 Stream processes technical data for its own platform security or operations.
Contact us about privacy at hello@centerstage.tv.
2. Our Data Protection Roles
2 Stream acts as a data controller for its own marketing, prospective and existing business contacts, customer relationship management, invoicing, authentication, platform security, technical diagnostics and other purposes it independently determines.
A Customer determines which members of its organization receive CenterStage accounts and what access rights they have. We administer authentication, platform access and service communications. Roles for specific activities depend on who determines their purposes and means.
For a Customer’s events, including registrations, speaker information, attendance records and audience interactions, the Customer generally acts as controller and 2 Stream as processor. Such processing requires an Article 28 GDPR data-processing agreement and documented instructions. Our separate Event Participant Privacy Notice explains CenterStage’s role in event pages; it does not replace the organizer’s privacy information.
3. Data We Process and Why
The following table describes 2 Stream’s principal activities as controller. Service providers refers to tools used for a particular activity; our general hosting providers are described separately in section 5.
| Purpose | Personal data | Legal basis | Service providers |
|---|---|---|---|
| Respond to demo requests | Name, company, business email, project description and correspondence | Legitimate interests — responding to professional enquiries | Email provider, Slack; Teamleader when added to CRM |
| Identify business visitors and undertake legally permitted B2B outreach | IP/network and website-visit information, identified company, professional contact information obtained through Leadinfo | Legitimate interests — identifying potential business customers and conducting B2B business development; separate electronic-marketing and device-access rules also apply | Leadinfo |
| Manage sales, customers, quotations and billing | Professional names and contact details, company, correspondence, contract and invoice data | Legitimate interests — managing commercial relationships; legal obligations — accounting and tax | Teamleader |
| Administer professional accounts and access | First and last name, email, language, organization permissions, authentication information and password hashes | Legitimate interests — secure provision and administration of business accounts | — |
| Send invitations and password resets | Name, email address and service-message information | Legitimate interests — account administration and security | Brevo |
| Display account avatars | Email-derived hash and connection information, including IP address | Legitimate interests — displaying profile pictures in the user interface | Gravatar (Automattic) |
| Diagnose errors, operate and protect our services | IP address, request and browser metadata, diagnostic reports and error context | Legitimate interests — system security, troubleshooting and service reliability | Sentry |
| Organize professional events run by 2 Stream itself | Registration responses, participation and viewing data, questions | Legitimate interests — delivering our professional events; consent for optional Google Analytics | CenterStage; Google Analytics only if configured and accepted |
| Handle privacy requests and legal claims | Contact details, request contents and verification or case information | Legal obligations; legitimate interests — establishing, exercising or defending claims | Professional advisers or authorities where necessary |
Website enquiries and prospecting
The Book a Demo form asks for name, company, professional email and a project or event description. Submissions reach us by email and Slack. We may manually add relevant contacts to Teamleader for follow-up. Your name, company and business email are needed to reply to a demo request; without them we may be unable to respond.
We use Leadinfo to recognize organizations visiting https://www.centerstage.tv and obtain professional contact details of people working at those organizations. Contact information can come from Leadinfo and its business-information sources rather than from the individuals themselves. We only send outreach where permitted by applicable electronic-marketing law. See section 8 for your right to object.
Platform accounts and technical data
An authorized CenterStage user provides first name, last name, email and language preference. The platform uses internal email/password authentication; passwords are not stored in plain text but processed through cryptographic password hashing. The Customer sets the user’s organization access rights. The account name, email and authentication information are required for account creation and secure access; without these details we cannot create or maintain an account.
Avatars are requested directly by the browser from Gravatar. This exposes the requesting IP address and an email-derived hash to that provider. We do not offer profile-image upload within CenterStage.
Our server access logs and Sentry Error Monitoring are used to detect errors and protect the service. Sentry Error Monitoring runs in the frontend; Session Replay is not enabled. Diagnostic information may include browser and request context. These tools can also operate when the platform serves event pages; the participant-facing notice addresses that context.
4. Cookies and Browser Storage
We use certain browser technologies for website language preferences, professional account access and related operations. Their purposes, providers and storage details are described in our separate Cookie Policy. Cookies and storage on event pages are described in our Event Cookie Policy.
Our use of Leadinfo for B2B visitor identification is explained above. On the marketing site, Leadinfo operates in cookieless mode. Our browser tests found no Leadinfo cookie or persistent local/session-storage identifier, although its script still sends page and browser information to Leadinfo. See the Cookie Policy for details.
5. Hosting and International Transfers
Our marketing website is hosted on Cloudflare Pages. The CenterStage application, database and stored customer files use infrastructure provided by OVHcloud. CenterStage infrastructure and database servers are hosted in France, the United Kingdom and Canada.
Some suppliers may process data outside the European Economic Area, including in Canada, the United Kingdom or the United States. Where applicable, transfers rely on the relevant European Commission adequacy decision (within its legal scope), or another mechanism permitted by Chapter V GDPR, such as Standard Contractual Clauses. The legal mechanism depends on the recipient and the applicable contractual arrangements. Providers relevant to our services include Cloudflare, Sentry, Slack, Gravatar (Automattic), Leadinfo, Google Analytics (where configured and accepted), and streaming providers such as Uplynk. You can request information about the safeguards applicable to your data at hello@centerstage.tv.
6. Retention
We retain personal data based on the purposes described above and applicable legal requirements:
| Category | Retention rule or criterion |
|---|---|
| Demo enquiries and prospective contacts | Kept while a professional enquiry or prospective business relationship remains active; reviewed and deleted when further follow-up is no longer justified. |
| Active customer and CRM records | Maintained during the business relationship and afterwards where needed for justified follow-up, legal obligations or claims. |
| Participants in events organized by 2 Stream itself | Kept while needed for delivery and follow-up of the relevant event. |
| Invoices and mandatory accounting records | Retained for the periods required by Belgian accounting and tax law. |
| Professional user accounts | Profile and authentication records are removed from the active application database when an organization administrator deletes the user. Content the user created for the organization remains with that organization. |
| Technical logs and Sentry error reports | Nginx access and error logs rotate daily, with 14 retained daily rotations. Sentry error and diagnostic reports are retained for 30 days. Database-system logs are kept for operational troubleshooting and security purposes; their retention is governed by the applicable operational arrangements. |
Customer organization data and event data are also subject to the customer agreement, applicable data-processing terms, legal duties and the organizer’s instructions. The Event Participant Privacy Notice addresses the participant-facing aspects of event retention.
7. Security
We use measures intended to protect personal data, including access controls, cryptographic password storage, HTTPS connections and technical error monitoring. No online service can guarantee absolute security. Processing carried out for Customers is also subject to contractual security and data-protection requirements.
8. Your Rights and Direct Marketing
Subject to the GDPR’s conditions and exceptions, you may request access, correction, erasure, restriction, portability or objection, and withdraw consent where consent is the basis for processing. We do not use solely automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR.
Right to object to processing based on legitimate interests. You may object on grounds relating to your particular situation. We will stop the processing unless we demonstrate compelling legitimate grounds to continue or the information is required for legal claims.
Right to object to direct marketing. You may object at any time to processing of your personal data for direct marketing, including related profiling. Reply to a marketing message or email hello@centerstage.tv; we will stop using your data for that purpose.
To exercise rights relating to processing for which 2 Stream is controller, email hello@centerstage.tv. We may verify your identity and ordinarily respond within one month, with lawful extensions where appropriate. For personal data controlled by an event organizer, direct your request to that organizer; we assist it as required by applicable law.
You may lodge a complaint with the Belgian Data Protection Authority at https://www.dataprotectionauthority.be/ or another competent EU/EEA supervisory authority.
9. Changes to This Policy
We may update this Policy to reflect changes in our services, data practices and legal requirements. The date above indicates the latest revision. We will provide further notice or seek consent where the law requires it.
10. Contact
2 Stream BV
Excelsiorlaan 9
1930 Zaventem
Belgium
Belgian company number (BCE/KBO): 1004.974.933
VAT number: BE 1004.974.933
Company register: RPR Brussel / RPM Bruxelles
Email: hello@centerstage.tv
Website: https://www.centerstage.tv