Privacy Policy

Exhibitions Division of the GL events Group

This personal data policy applies to all companies of the Exhibitions Division of the GL events Group.

The GL events Group takes the protection of your personal data very seriously and undertakes to collect and process your personal data in accordance with French Act No. 78-17 of 6 January 1978, as amended (the “French Data Protection Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”).

Definitions: “We”, “Us” and “Our” refer to, or relate to, the data controller (for further details, please refer to the section “Who is the data controller?”).



WHO IS THE DATA CONTROLLER?

The companies of the Exhibitions Division of the GL events Group that may act as data controllers in respect of the processing of your personal data are:

  • GL events Exhibitions Opérations;
  • GL events Exhibitions Industrie;
  • Première Vision;
  • Première Vision Inc.;
  • Tranoï and Première Vision KK

To determine precisely which company is the data controller in respect of the processing of your personal data, please check:

  • the corporate name of the company identified, in the legal notice of the website on which you are browsing or from which you were redirected, as the publisher of that website; or
  • the corporate name of the company with which you are in contact (this corporate name appears in the legal notices contained in the email(s) you receive from companies of the GL events Group, or in any contract(s) you may have entered into with one of the companies of the GL events Group).


WHAT CATEGORIES OF PERSONAL DATA MAY WE COLLECT?

We collect personal data either directly from you, automatically through our websites or mobile applications, or indirectly from third parties.



PERSONAL DATA THAT YOU PROVIDE DIRECTLY TO US

You may be required to provide us with your personal data directly where:

  • We have a contractual or pre-contractual relationship with you (for example: you have ordered one of our products or services, or you have taken part in one of our prize draws or contests);
  • You create an account on our websites or mobile applications;
  • You submit a contact request to one of our departments;
  • You subscribe to our newsletter(s);
  • You request one of our catalogues;
  • You take part in one of our surveys;
  • You complete a form enabling you to download a document.

In this context, the categories of personal data that may be collected are as follows:

  • Identification data (surname, first name, user ID, nationality, date of birth, etc.);
  • Contact data (postal address, email address, telephone number, etc.);
  • Data relating to your personal and professional life (interests, preferences, order history, company, position held, etc.);
  • Economic and financial data (means of payment, etc.).




PERSONAL DATA THAT WE COLLECT AUTOMATICALLY

We automatically collect certain personal data when you browse our websites or mobile applications.

We then collect certain data relating to your connection and browsing (IP address, date and time of connection, pages viewed, operating system, type of browser used, the link through which you arrived on our websites, etc.).

This data is collected by means of cookies placed on our websites. For further details, please refer to our cookie policy.

We automatically collect certain personal data where you have consented to our teams’ use of tracking pixels, in order to measure the performance of our communications, adjust the frequency of our mailings, avoid contacting you when you no longer read our messages, and improve the relevance of the content we send.



PERSONAL DATA THAT WE COLLECT INDIRECTLY

Lastly, we may collect your personal data through social networks (Facebook, Twitter, LinkedIn, etc.). This is notably the case where your personal data originates from publicly accessible sources, or where you use social networks via our websites, for example by clicking on dedicated social network icons.

Where you do not wish your personal data to be collected through social networks when you click on such dedicated icons, you must refer to the privacy / personal data / cookie policies of the social networks concerned.

We may collect your personal data through partners or other trusted third parties.

We take care to ensure that such partners or other trusted third parties only disclose to us personal data that you have agreed to share with us for direct marketing purposes.

The categories of personal data that we may collect in this context are:

  • Identification data (surname, first name, user ID, nationality, date of birth, etc.);
  • Contact data (postal address, email address, telephone number, etc.);
  • Data relating to your personal and professional life (family situation, interests, preferences, order history, etc.).




FOR WHAT PURPOSES IS YOUR DATA PROCESSED?

Your personal data is processed, or may be processed, for the following purposes:

Management and monitoring of our contractual or pre-contractual relationship

  • Negotiations;
  • Handling of requests for quotations and participation;
  • Order processing (e.g. trade show tickets);
  • Invoicing;
  • Management of unpaid invoices and litigation;
  • Management of stand set-up and implementation.

Operation, development and management of our customer and prospect databases

  • Sending of newsletters;
  • Direct marketing;
  • Organisation of prize draws and contests;
  • Handling of requests to exercise your rights;
  • Management of registration and verification of the registration conditions for our customer accounts;
  • Handling of contact requests;
  • Organisation of business meetings;
  • Statistical monitoring of interactions with our communications.

Improvement of our services and personalisation of our services for you

  • Production of statistics;
  • Conduct of satisfaction surveys;
  • Management of newsletter / e-newsletter subscriptions;
  • Analysis of connection and browsing data for targeted advertising purposes in respect of the Site’s services.

Compliance with legal obligations



WHAT ARE THE LEGAL BASES FOR THE PROCESSING WE CARRY OUT ON YOUR PERSONAL DATA?

We only process your personal data where the envisaged processing can be justified by one of the following four (4) lawful bases:

1. The processing is necessary for the performance of a contract or for the taking of pre-contractual steps at your request

This is notably the case where the processing of personal data that we carry out is intended for the management of order(s) you have placed with us, where you have requested a quotation from us, or where you take part in one of our prize draws or contests.

2. The processing is necessary for compliance with a legal obligation

3. The processing is necessary for the purposes of our legitimate interests

Where we have a legitimate interest in processing your personal data, we take care not to override your interests or your fundamental rights and freedoms.

Furthermore, we ensure that you are able to object, at the time your data is collected and thereafter, to the processing of your personal data based on legitimate interests, where the purposes of such processing relate to direct marketing.

If you are an individual, we have a legitimate interest in processing your personal data where:

  • You are one of our customers and we wish to send you communications and carry out direct marketing for products or services similar to those you have already purchased from us.
    Legitimate interest: operation and development of our commercial database.
  • You are one of our customers or prospects (for example, you have subscribed to one of our newsletters) and we wish to carry out internal analyses.
    Legitimate interest: operation and development of our commercial database.
  • You submit a contact request.
    Legitimate interest: handling of requests from our customers and prospects.

If you are a business professional, we have a legitimate interest in processing your personal data where:

  • You are one of our customers or prospects and we wish to send you communications and carry out direct marketing for any product or service, and/or we wish to carry out internal analyses.
    Legitimate interest: operation of our commercial database.
  • You submit a contact request.
    Legitimate interest: handling of requests from our customers and prospects.

4. You have given your consent to the processing carried out on your personal data.

If you are an individual, this is the case where:

    • You are one of our customers and we wish to send you communications and carry out direct marketing for products and services that are not similar to those you have already purchased from us.
    • You are one of our prospects and we wish to send you communications and carry out direct marketing for our products and services.
    • You are one of our customers or prospects and we wish to send you communications from partners.
    • We wish to transfer your personal data to partners or trusted third parties.

If you are a business professional, this is the case where we wish to transfer your personal data to partners or trusted third parties.



IS THE PROVISION OF YOUR PERSONAL DATA MANDATORY?

The personal data that you are required to provide to us is identified by asterisks in our collection forms or is otherwise identified as mandatory.

Should you choose not to provide us with the aforementioned personal data, we will be unable to provide you with the service you have requested (contact request, processing of an order, etc.).



WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

The recipients of your personal data are the relevant departments of the data controller (please refer to the section “Who is the data controller?” for further details).

Our partners may also be recipients of your personal data where you have given your consent.

Trade show organisers may make a badge-scanning service available on exhibitors’ stands. This service enables visitors to transmit their contact details directly to the exhibitor and to save time. The visitor is expressly informed, and is accordingly deemed to expressly agree, that by using this service made available by the data controller, part of their personal data (company name, surname, first name, postal address, email, telephone and mobile number) will be transferred to the exhibitor in respect of which the service has been used, notwithstanding the fact that the visitor, at the time of registration or pre-registration, declined to share their personal data with partners.

We may also use trusted third parties, such as IT service providers (processors), who may then be recipients of your personal data.

Lastly, we may also share your data with subsidiaries of the GL events Group, either because you have consented to it, or because it is necessary for the performance of a contract or of a service that you have requested from the data controller.

Certain companies of the GL events Group to which your data may be disclosed, notably Première Vision Inc. (United States) and Première Vision K.K. (Japan), are established outside the European Union. Such transfers are governed by Chapter V of the GDPR. Where the recipient country benefits from an adequacy decision of the European Commission, the transfer may be carried out on that basis. Where this is not the case, we put in place the appropriate safeguards provided for by Chapter V of the GDPR.



HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain your personal data:

    • for the period necessary for the operations for which it was collected, in accordance with applicable laws and regulations;
    • where we carry out direct marketing, for a maximum period of five years from the last effective contact with the prospect, save in exceptional circumstances justified by a particular context (e.g. biennial trade show);
    • for the period necessary to comply with legal obligations. Examples:

– Contracts or agreements entered into in the context of a commercial relationship are retained throughout the commercial relationship and for 5 years after its termination;
– Contracts entered into by electronic means are retained for 10 years from the date of delivery or performance of the service;
– Banking documents are retained throughout the commercial relationship and for 5 years after its termination;

– Etc.



WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

You have the right of access to, rectification of, and erasure of your data, the right to restriction of processing of your data, the right to data portability, and the right to give general and specific directives regarding the manner in which your rights are to be exercised after your death.

You are expressly informed that you also have the right to object to the processing of your personal data on legitimate grounds, as well as the right to object to your data being used for direct marketing purposes.

To exercise your rights, please send an email to the following address: dpglex@gl-events.com, specifying the identity of the data controller.

You may also lodge a complaint with a supervisory authority.



SECURITY OF YOUR PERSONAL DATA

We ensure the security of your personal data by implementing reinforced data protection through physical, software and organisational security measures, including in particular:

    • Video surveillance of premises;
    • Physical access control to premises;
    • Access control to Information Systems;
    • Cybersecurity programme – a dedicated department in charge of implementing the GL events Group’s Information Systems Security Policy and Security Assurance Plan;
    • Training of employees to raise awareness of personal data protection, cybersecurity and fraud risks.