Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Demio is a US webinar platform used to host live and automated webinars, capture registrations, and track attendee engagement. It collects registrant details such as name and email, plus attendance, poll answers, chat, and technical data like IP address, and its embedded registration and event scripts set cookies. Because it is US operated and sets non essential cookies, it requires prior consent under the GDPR and the ePrivacy Directive and transfers data to a third country.
Demio is a webinar and virtual event platform operated by Banzai in the United States. Marketing and sales teams use it to run live and automated webinars, manage registration, and measure engagement. When you embed a Demio registration form or event on your site, it loads scripts that set cookies and collect data in the visitor browser.
Demio processes registrant details such as name and email address, attendance and watch time, poll and survey answers, chat messages, and technical data like IP address, device, and browser. It uses cookies and identifiers to recognise registrants, resume sessions, and measure engagement. This builds a detailed record of how each attendee participated.
The embedded registration and event components set non essential cookies and record engagement, so the ePrivacy Directive requires prior consent and the GDPR requires a lawful basis and transparency. Registration data and engagement metrics are personal data, and chat or polls can contain sensitive information. Demio acts as your processor, so a data processing agreement is required.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Obtain prior, opt in consent before Demio cookies load on your site, and block the embed behind your consent banner. For registration itself you rely on consent or your relationship with the registrant, with clear information about how their data and engagement will be used. Make consent specific and easy to withdraw.
Demio and Banzai are based in the United States and process data there, so using Demio involves a third country transfer under Chapter V of the GDPR. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, supported by a transfer impact assessment. Document the registrant and engagement data sent to the US.
To use Demio compliantly, gate its cookies behind consent, sign a data processing agreement, and complete a transfer impact assessment. Collect only the registration fields you need, set retention limits for recordings and engagement data, and inform attendees that sessions may be recorded. List Demio in your cookie policy and privacy notice and review its subprocessors periodically.
Websites using Demio must obtain user consent under GDPR regulations.
DPIA considerations
Demio collects registration details and detailed engagement data for each attendee, and may record sessions, which raises its risk profile. Key DPIA points: (1) transfer of personal data to Demio and Banzai in the United States, requiring SCCs or the Data Privacy Framework and a transfer impact assessment; (2) detailed engagement profiling including watch time, polls, and chat; (3) recording of webinars that may capture attendee voices, video, or comments; (4) non essential cookies that require consent; (5) the need for a data processing agreement, minimised registration fields, and retention limits. A DPIA is recommended for large or recurring webinar programmes.
Sample consent text
We use Demio to host webinars and manage registration. With your consent, Demio sets cookies and records your registration details, attendance, and engagement such as poll answers and chat, along with technical data like your IP address. This data is processed by Demio (Banzai) in the United States under appropriate safeguards. You can withdraw your consent at any time via our cookie settings.
Third-party domains contacted
demio.commy.demio.comevent.demio.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| demio_session | Functional | Session | Maintains the registration and webinar session state for the attendee. |
| demio_uid | Analytics | 1 year | Recognises a returning registrant and links their registrations and attendance. |
| demio_engagement | Analytics | 1 year | Records engagement such as watch time, poll responses, and interactions during a webinar. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
Demio sets functional cookies to run the registration and event experience and analytics cookies that recognise registrants and measure engagement. The analytics cookies are not strictly necessary and require consent. Cookies are set both on your embedded registration form and on the Demio event pages.
Yes for the embedded cookies, because they are non essential and record engagement, so obtain prior, opt in consent before they load. For the registration data itself, rely on a lawful basis and give clear information about how attendance and engagement are used.
The cookies and engagement tracking rely on consent (Art. 6(1)(a)) and the ePrivacy Directive. Processing registration data to deliver a webinar someone signed up for can rely on consent or, where appropriate, legitimate interest, with transparency about engagement tracking.
Yes. Demio is operated by Banzai in the United States, so its use is a third country transfer. It relies on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, which you should document in a transfer impact assessment.
A DPIA is recommended for large or recurring webinar programmes. Assess the US transfer, the engagement profiling, any recording of attendees, the cookies set, and your retention periods.
Block the embed behind your consent banner, sign a data processing agreement, and complete a transfer impact assessment. Collect only necessary registration fields, set retention limits, inform attendees about recording, and document Demio in your cookie policy and privacy notice.
Yes. EU based or self hosted webinar and streaming tools, such as a self hosted BigBlueButton instance or an EU hosted webinar service, can reduce cookies and third country transfers. They give more control over data location, though some marketing features may differ.
Add a Demio entry listing its functional and analytics cookies, their purposes and durations, and the fact that registration and engagement data is processed by Demio (Banzai) in the United States. Link to Demio''s privacy notice and review the entry when its cookies or subprocessors change.