Demio
Demio is a US webinar platform used to host live and automated webinars, capture registrations, and track attendee engagement. It collects registrant details such as name and email, plus attendance, poll answers, chat, and technical data like IP address, and its embedded registration and event scripts set cookies. Because it is US operated and sets non essential cookies, it requires prior consent under the GDPR and the ePrivacy Directive and transfers data to a third country.
What does Demio do?
What Demio is
Demio is a webinar and virtual event platform operated by Banzai in the United States. Marketing and sales teams use it to run live and automated webinars, manage registration, and measure engagement. When you embed a Demio registration form or event on your site, it loads scripts that set cookies and collect data in the visitor browser.
What data and cookies Demio collects
Demio processes registrant details such as name and email address, attendance and watch time, poll and survey answers, chat messages, and technical data like IP address, device, and browser. It uses cookies and identifiers to recognise registrants, resume sessions, and measure engagement. This builds a detailed record of how each attendee participated.
GDPR and ePrivacy implications
The embedded registration and event components set non essential cookies and record engagement, so the ePrivacy Directive requires prior consent and the GDPR requires a lawful basis and transparency. Registration data and engagement metrics are personal data, and chat or polls can contain sensitive information. Demio acts as your processor, so a data processing agreement is required.
When consent is required
Obtain prior, opt in consent before Demio cookies load on your site, and block the embed behind your consent banner. For registration itself you rely on consent or your relationship with the registrant, with clear information about how their data and engagement will be used. Make consent specific and easy to withdraw.
Data transfers outside the EU
Demio and Banzai are based in the United States and process data there, so using Demio involves a third country transfer under Chapter V of the GDPR. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, supported by a transfer impact assessment. Document the registrant and engagement data sent to the US.
Practical compliance steps
To use Demio compliantly, gate its cookies behind consent, sign a data processing agreement, and complete a transfer impact assessment. Collect only the registration fields you need, set retention limits for recordings and engagement data, and inform attendees that sessions may be recorded. List Demio in your cookie policy and privacy notice and review its subprocessors periodically.
Demio and the GDPR
Demio is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for cookies and engagement tracking; consent or legitimate interest (Art. 6(1)(a)/(f) GDPR) for delivering a registered webinar
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), CCPA
Impact assessment (DPIA)
Demio collects registration details and detailed engagement data for each attendee, and may record sessions, which raises its risk profile. Key DPIA points: (1) transfer of personal data to Demio and Banzai in the United States, requiring SCCs or the Data Privacy Framework and a transfer impact assessment; (2) detailed engagement profiling including watch time, polls, and chat; (3) recording of webinars that may capture attendee voices, video, or comments; (4) non essential cookies that require consent; (5) the need for a data processing agreement, minimised registration fields, and retention limits. A DPIA is recommended for large or recurring webinar programmes.
Sample text for your banner
We use Demio to host webinars and manage registration. With your consent, Demio sets cookies and records your registration details, attendance, and engagement such as poll answers and chat, along with technical data like your IP address. This data is processed by Demio (Banzai) in the United States under appropriate safeguards. You can withdraw your consent at any time via our cookie settings.
What Demio sets and contacts
- Tracking method
- Embedded registration form and webinar event scripts that set cookies and track engagement
- Server location
- United States (Demio, operated by Banzai)
- Data transferred outside the EU
- Demio and Banzai are based in the United States and process data there. Transfers rely on Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU US Data Privacy Framework, and should be supported by a transfer impact assessment.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| demio_session | Functional | Session | Maintains the registration and webinar session state for the attendee. |
| demio_uid | Analytics | 1 year | Recognises a returning registrant and links their registrations and attendance. |
| demio_engagement | Analytics | 1 year | Records engagement such as watch time, poll responses, and interactions during a webinar. |
Third-party domains contacted (3)
demio.commy.demio.comevent.demio.com
Frequently asked questions about Demio
Can't find your question? Write to us, we answer fast.
What cookies does Demio set?
Demio sets functional cookies to run the registration and event experience and analytics cookies that recognise registrants and measure engagement. The analytics cookies are not strictly necessary and require consent. Cookies are set both on your embedded registration form and on the Demio event pages.
Do I need consent to use Demio?
Yes for the embedded cookies, because they are non essential and record engagement, so obtain prior, opt in consent before they load. For the registration data itself, rely on a lawful basis and give clear information about how attendance and engagement are used.
What is the legal basis for Demio?
The cookies and engagement tracking rely on consent (Art. 6(1)(a)) and the ePrivacy Directive. Processing registration data to deliver a webinar someone signed up for can rely on consent or, where appropriate, legitimate interest, with transparency about engagement tracking.
Does Demio transfer data to the US?
Yes. Demio is operated by Banzai in the United States, so its use is a third country transfer. It relies on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, which you should document in a transfer impact assessment.
Is a DPIA needed for Demio?
A DPIA is recommended for large or recurring webinar programmes. Assess the US transfer, the engagement profiling, any recording of attendees, the cookies set, and your retention periods.
How do I implement Demio compliantly?
Block the embed behind your consent banner, sign a data processing agreement, and complete a transfer impact assessment. Collect only necessary registration fields, set retention limits, inform attendees about recording, and document Demio in your cookie policy and privacy notice.
Are there alternatives to Demio?
Yes. EU based or self hosted webinar and streaming tools, such as a self hosted BigBlueButton instance or an EU hosted webinar service, can reduce cookies and third country transfers. They give more control over data location, though some marketing features may differ.
How do I update my cookie policy for Demio?
Add a Demio entry listing its functional and analytics cookies, their purposes and durations, and the fact that registration and engagement data is processed by Demio (Banzai) in the United States. Link to Demio''s privacy notice and review the entry when its cookies or subprocessors change.
Rumble
Rumble is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Rumble integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Rumble helps organizations maintain robust websites that meet user expectations and technical requirements.
Myhkw player
Myhkw player is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Myhkw player supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Myhkw player ensures smooth playback across all devices and network conditions for engaging video experiences.
SoundManager 2
SoundManager is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SoundManager integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SoundManager helps organizations maintain robust websites that meet user expectations and technical requirements.
DPlayer
DPlayer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. DPlayer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, DPlayer helps organizations maintain robust websites that meet user expectations and technical requirements.
Webinaris
Webinaris is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Webinaris enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Webinaris empowers marketing teams to achieve measurable growth.
InPlayer
Inplayer is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Inplayer supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Inplayer ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.