How to Collect Photos at a Corporate Conference Without a Photography Contract
A booked photographer gives you a few hundred polished frames of the keynote and the sponsor wall. What they cannot give you is the rest of the event: the breakout sessions running in parallel, the corridor conversations, the team that flew in from three offices and finally met in person, the sponsor stand when the energy was highest. Those moments are on hundreds of phones in the room — and without a system, they stay there.
This is a guide for the event manager who wants all the photos from a corporate conference, not just the contracted set, and who needs to do it without signing a second photography contract, without chasing "please send me your photos" emails for two weeks, and without exposing employee or attendee images to a tool that cannot tell you where the data lives. The mechanism is a QR code: attendees scan it, upload from the browser, and everything lands in one moderated, branded album you control.
We cover how the method works, where to place the codes, the GDPR questions a procurement team will ask, and how it compares to the alternatives. Competitor facts are verified from each provider's own pages as of June 2026 — where a figure is quote-only, we say so rather than invent one.
This is not legal advice. The GDPR sections below summarise the relevant articles so you know what to check; your Data Protection Officer or counsel should confirm how they apply to your specific event and jurisdiction.
A photographer is scoped: one or two people, a fixed shot list, a defined window — exactly what you want for the keynote and the headshots. But a conference is a distributed event. Concurrent sessions, networking blocks and sponsor activations happen faster than any single contract can cover, and the most shareable content is candid — the kind attendees would happily contribute if asking took five seconds instead of five emails.
The raw material is already in the room: smartphone penetration in Germany was forecast to reach 97% in 2024 (Statista), so nearly every attendee is carrying a capable camera. The problem has never been capture; it has been collection. Group chats are where event photos go to be forgotten — research on group-chat fatigue found 40% of respondents felt overwhelmed by group-message volume (The Conversation, 2023), which is why "drop your photos in the WhatsApp group" quietly fails after day one. A QR-code tool inverts the model: every attendee becomes an opt-in source, and upload friction drops to a single scan. You are not replacing the photographer — you are capturing everything they were never scoped to be in the room for.
The method is deliberately boring, which is the point at a professional event. With Gathmo, the flow is:
Two honest clarifications. First, automatic face-recognition photo search is not part of Gathmo's launch product — it is on the roadmap (Phase 2). If "let each attendee find photos of themselves by selfie" is a hard requirement today, Eventiere offers face-find, though it does not match Gathmo on EU data residency. Second, a live photo wall on the conference screen is available — a live slideshow from the Celebrate tier up, a true live stream on Grand — but it is a separate decision from collection.
Yes — stop treating this as a risk. 68% of consumers reported using a QR code at least once in the past year (TEAM LEWIS, 2024), and across the UK and Europe 86.66% of smartphone users have scanned at least one QR code, with 36.40% scanning one every week (MobileIron/Ivanti). At a conference, where badges and signage already carry codes, scanning to upload is a familiar gesture, not a novelty you have to teach.
A conference gives you more good surfaces than a wedding or a party, and the scan distance changes the size you need. The governing rule is the 10:1 distance-to-size ratio: the minimum code size is the maximum scan distance divided by ten (Uniqode). Plan placements accordingly:
A few specs that prevent a printed code from silently failing:
(For the full print-spec rundown, see the hub's QR code guide.)
Frequently asked
Generally yes — a photograph that identifies a person is their personal data. But an ordinary event photo is not automatically special-category (biometric) data. Recital 51 is explicit that photographs trigger the higher bar of Article 9 only when processed through a specific technical means allowing unique identification — i.e. facial-recognition templating. A launch product without face-recognition (like Gathmo today) therefore keeps a simpler compliance footprint: ordinary collection and display does not, by itself, put you into Article 9 territory.
A host acting as controller must identify a lawful basis under Article 6(1). For ordinary, non-special-category photos a host can often rely on legitimate interest (Art. 6(1)(f)), subject to a balancing test, but consent (Art. 6(1)(a)) is the safer basis and is required where the balance fails. For employees specifically, German law adds a wrinkle: under BDSG § 26, processing in the employment context turns on necessity — a poor fit for marketing-style event photos — so freely given, documented consent (with a genuine right to refuse) is typically prudent. Because Gathmo captures consent on upload and the attendee chooses to contribute, you are working with an opt-in act, not a covert capture.
Yes. Article 13(1) requires that, when the data are obtained, you provide defined information — the controller's identity, the purposes and legal basis, the retention period and the data subjects' rights. In practice that means a clear privacy notice on the upload page.
Yes — the right to erasure (Art. 17(1)) applies where a ground exists (for example, consent is withdrawn). The controller must respond without undue delay and within one month (Art. 12(3)), extendable by two further months for complex requests. Your tooling needs per-item or per-person deletion that is actually executable within that window.
Only as long as necessary: Art. 5(1)(e) (storage limitation) and Art. 5(1)(c) (data minimisation) require defined retention windows, not indefinite storage. Gathmo's per-event tiers carry explicit periods — for example, 183 days on Celebrate and 365 days on Grand — so the gallery expires by design.
For an EU conference this is usually the deciding question, and the one consumer tools most often fail. Two parts:
GuideHow to collect photos from your event guests (the easy way)
A printed QR code on the table collects more photos than any link in a group chat -- here is why, and how to set one up in two minutes.
StoryThe most underrated wedding keepsake: guest voice messages
Photos freeze a face; a voice keeps the person. Why recording short voice notes from guests is the memory couples treasure most.
GuideCollecting guest photos in the EU without the GDPR headache
Consent, data residency, and erasure -- the three things that make event-media GDPR-compliant, and how to get them right by default.