The Comexposium Group pays particular attention to the protection of personal data. This is an essential requirement for the relationship of trust that the Comexposium Group wishes to establish with all those who entrust it with their personal data.

This Personal Data Protection Policy (hereinafter the ‘Policy’) sets out the practices and conditions under which COMEXPOSIUM (a simplified joint-stock company (SAS) with a share capital of 60,000,000 euros, registered with the Nanterre Trade and Companies Register under number 316 780 519, with its registered office at 17 Quai du Président Paul Doumer, 92400 Courbevoie) (hereinafter the ‘Company’), as the data controller, uses your personal data.

Personal data (hereinafter referred to as ‘Data’) means any information relating to an identified or identifiable natural person; an ‘identifiable natural person’ is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity; as defined by the regulations in force.

 

1 – WHAT DATA IS COLLECTED?

Depending on how you interact with the Company and the purpose of that interaction, the Company may collect the following Data:

  • Personal data: this data includes, in particular, your surname, first name, email address, postal address, telephone number and profile (visitor, exhibitor, supplier, etc.).
  • Data relating to your order: this Data refers to all the information required to fulfil your order in full, in particular details of the credit card used (cardholder’s name, card number, expiry date, etc.), details of the order, the order date, and correspondence with the customer service department. In any event, payment data is processed in accordance with the relevant regulations and security standards.
  • Data relating to the login and use of the Account when you are the account holder: this Data refers to all the information you need to access your personal account, as well as information relating to the use of the Customer Account, including, in particular, your username and password, your choices and preferences, and the history of events in which you have participated. In any event, the Customer Account is subject to specific terms and conditions of use.
  • Information regarding your enquiries in the ‘Contact’ section : We process your personal data in order to respond to enquiries made via the contact form on our website. This data includes your full name, your company, your email address or telephone number, and your profile (candidate, visitor, exhibitor, supplier, etc.).
  • Browsing data (for further information: see our cookies policy): this Data refers to the way in which the User navigates the Website. This data may include the IP address, screen resolution, browser used, time spent on the site, search history, operating system used, language and pages viewed.
  • Information relating to your attendance at trade fairs: date of attendance, stands visited, purchases made.
  • Data relating to the use of social media: when you interact with social media features, these communications are governed by the data protection policies of those social media platforms, which we invite you to consult.

2 – HOW IS YOUR DATA COLLECTED?

2.1. Depending on how you interact with the Company, it may collect your Data in the ways described below.

2.2. The Company collects your Data directly from you, in particular when you complete a contact or registration form, place an order or contact the Company (for example, by sending an email).

2.3. The Company collects your Data indirectly when you browse the Websites using cookies and web beacons, in accordance with the terms set out below. The Company also collects your Data via third parties, including social media platforms, when you use your account with those third parties to log in or register for an event.

2.4. When you provide Data to the Company, it is your responsibility to ensure that it is accurate and complete. If necessary, you should update them.

2.5. The data marked as mandatory is required to process your request and to enable us to provide you with the services you have requested. The forms indicate whether the provision of data is mandatory or optional, as well as any consequences of failing to provide it.

 

3 – WHY IS YOUR DATA COLLECTED?

3.1 Your Data is processed by the Company for the various purposes described below, both in connection with your use of the Websites and your participation in events organised by the Company or for which it has been entrusted with the organisation.

3.2 Your data is processed to manage the requests you make and to contact you.

  • If you are a customer, on the basis of the performance of the contract entered into with the Company (general terms and conditions of pre-registration, general terms and conditions of ticket sales or general terms and conditions of participation), your Data is processed to manage your participation requests and orders, and to organise your participation in and attendance at events that we organise or have been entrusted to organise.
  • If you are a professional prospect , the Company may send you, via any channel, its news and commercial information on the basis of its legitimate interest in promoting the events it organises.
  • If you are a non-professional prospect, the Company may send you its news and marketing information via any channel, provided you have given your consent.

3.3 With a view to continuously improving the events it organises, your Data is also processed by the Company to send you post-event surveys and analyse the results.

3.4 Subject to your consent, the Company may also send you, via any channel, news and marketing information relating to events organised by other entities within the COMEXPOSIUM Group and/or services provided by partners. 3.4 With your consent where required, your Data may also be processed to (i) analyse your preferences and habits, (ii) personalise and optimise your experience on the COMEXPOSIUM Group’s Websites, in particular by enabling you to access certain features and to enhance the interactivity of the Websites, (iii) compile statistics, in particular on the effectiveness of the COMEXPOSIUM Group’s marketing campaigns.

 

4 – WHO IS YOUR DATA INTENDED FOR?

4.1. Your Data is processed by the Company’s internal teams (Communications Department, Procurement Department). Furthermore, only service providers and their staff with specific authorisation are permitted to access your Data, and this is limited to the specific services entrusted to them, which they must carry out exclusively on behalf of the Company in strict compliance with obligations relating, in particular, to security and confidentiality.

4.2. With your consent where required, your Data may be passed on to entities within the Group to which the Company belongs, as well as to partners, in particular so that they can send you information and updates on the services and products they offer.

4.3. Where required by applicable regulations, the Company may disclose your Data to bodies and authorities legally authorised to access it (in particular judicial and administrative authorities).

 

5 – HOW IS YOUR DATA PROTECTED?

The Company takes all necessary precautions to safeguard the security, integrity and confidentiality of your Data, in particular to prevent it from being distorted, damaged or disclosed, and to prevent unauthorised third parties from gaining access to it.

The Company also implements internal procedures to ensure the security of your Personal Data whilst it is being used, transferred or stored. We also ensure that the procedures put in place are maintained to guarantee their compliance with the applicable regulations.

These safety procedures include, in particular:

  • A commitment on the part of our service providers and subcontractors, when we engage their services – in particular to make the Website and its content available to you, or to fulfil your orders – to comply with their contractual obligations in order to ensure adequate protection of the Personal Data to which they have access;
  • restricting access to your Personal Data to employees who are bound by a duty of confidentiality, and whose access to your Personal Data is necessary to provide you with products and services and/or justified within the scope of their duties;
  • the storage of your Personal Data on servers that offer full security guarantees. The data is retained, in accordance with the Applicable Regulations, for the periods specified in Article 7.*

6 – WHAT ARE YOUR RIGHTS?

6.1. In accordance with the applicable regulations and subject to the conditions set out therein, you may at any time exercise your:

  • Right of access: you may request information from the Company regarding the processing of your Data and a copy of such Data.
  • Right to rectification: you may request the rectification of inaccurate Data concerning you where the Data held by the Company is incorrect or incomplete.
  • Right to erasure (right to be forgotten): you have the right to request that the Company erases your Data where one of the grounds set out in the regulations applies (the Data is no longer necessary, withdrawal of your consent for processing based on that consent, etc.).
  • Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your Data, including for the purposes of direct marketing.
  • Right to data portability: you have the right to receive the data in a structured, commonly used, machine-readable and machine-processable format. This right applies only where the Data is provided to the Company by you or arises from your use of its services. This data is processed on the basis of your consent or the performance of a contract.
  • Right to restriction of processing: you may request that the Company suspend the processing of your Data where one of the grounds set out in the regulations applies (disputing the accuracy of the data, etc.). Subject to the conditions set out in the regulations, you also have the right to set out general or specific instructions regarding what is to happen to your Data after your death. You are, however, advised that only specific guidelines relating to the processing of Data carried out by the Company for the purposes set out in this Policy will be recorded by the Company, subject to your specific consent.

Subject to the conditions set out in the regulations, you also have the right to set out general or specific instructions regarding what is to happen to your Data after your death. You are, however, advised that only specific guidelines relating to the processing of Data carried out by the Company for the purposes set out in this Policy will be recorded by the Company, subject to your specific consent.

6.2. Where your Data is processed with your consent, you may withdraw that consent at any time. Please note, however, that any processing carried out prior to this withdrawal will remain valid.

6.3. You may exercise your rights by contacting the Company:

  • by email: https://bit.ly/46QR6ut
  • by post to the following address: COMEXPOSIUM Group – Tourism Trade Fairs – Privacy, 17 Quai du Président Paul Doumer, 92400 Courbevoie.

You are also informed that, in certain cases, the features of the Websites allow you to view and amend the Data you have provided to the Company.

The Company takes the utmost care with your Data; however, if you consider that its processing infringes your rights, you have the right to lodge a complaint with the French Data Protection Authority (CNIL) – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

 

7 – HOW LONG DO WE KEEP YOUR DATA?

7.1. The Company retains your Data for a period not exceeding that necessary for the purposes set out in this Policy. In addition, your Data may be archived in order to comply with the legal obligations to which the Company is subject, or it may be deleted.

7.2. Data used to establish proof of a right or a contract, or retained by the Company to comply with a legal obligation, is archived in accordance with the provisions in force.

7.3. The Company takes into account the seasonal nature of the events it organises. Accordingly, you will find below the retention periods set out according to the type of event in question.

  • Event type: Quarterly and half-yearly events, or annual => Data retention period: For a period of 3 years from the contact’s (prospect’s) last expression of interest and 5 years from the contact’s (customer’s) last expression of interest
  • Event type : Biennial and triennial events => Data retention period: Valid until the end of the second edition following the contact’s most recent expression of interest
  • People affected : All types of event participants (exhibitors, visitors, partner guests, speakers, etc.)

7.4 When you make an online purchase, your bank details are retained for the following periods: Bank card number and expiry date: 13 months from the date of the debit, or 15 months in the case of deferred-debit payment cards; The security code on a bank card: the transaction time.

8 – DATA TRANSFER

For the hosting and processing of your Data, the Company gives preference to facilities located within the European Union. Should a transfer of data to a country outside the European Union nevertheless be envisaged, the Company will provide you with specific information.

9 – AMENDMENTS TO THE DATA PROTECTION POLICY

9.1. Any changes made by the Company to this Policy will be published on the Website.

9.2. Users are advised to review this Policy regularly to keep abreast of any updates or changes.

9.3. If any provision of this Policy is declared invalid or contrary to the law, it shall be deemed not to have been included, but this shall not render the other provisions of the Policy invalid.