Privacy Policy
Market: Global. Document language: English.
Platform operator
Changing language does not change the catalog market, currency or billing operator. This document belongs to the stated market in both language versions.
1. Data and purposes
This is primarily a B2B service: the directory contains organizations, events, activities, corporate contacts and websites. Personal data may arise in accounts, claim requests, support messages, orders, invoices, partner records and technical logs. It is used to provide the service, verify representatives, process payments, protect security and handle requests.
2. Legal bases
The basis is selected for each operation: contract performance, legal obligations, legitimate interests in security and catalog integrity, and consent where required. Optional cookies and marketing are not covered by a universal consent. Mandatory applicable data-protection requirements remain in force regardless of page language.
3. Recipients and infrastructure
Hosting, email delivery, backup, payment, accounting and security-monitoring providers may process data. Invitation contacts are passed to SiteGoToTop. For market selection, ipwho.is may receive the IP address over HTTPS; see the Cookie Policy. Personal data is not sold. The organization directory is intended to be public.
4. International processing
We do not claim that data never leaves the EEA. Where applicable law requires international-transfer safeguards, those safeguards must be applied and recorded in the processor register. Interface language does not select the location of data storage.
5. Retention
Cookie consent records: 12 months; resolved privacy requests: 24 months before deletion or anonymization; security logs: up to 12 months; opt-out records: retained to prevent further sending. Account information is retained for the account’s lifetime and mandatory subsequent periods; accounting records follow statutory retention periods. Abandoned unconfirmed requests are removed after 12 months.
6. Rights and requests
Contact info@expolocator.com for access, correction, deletion, restriction, objection, withdrawal of consent and other applicable rights. We respond within one month, subject to mandatory applicable deadlines. Automatic fulfilment of every request is not promised: legal obligations may require retention. Organization information is handled under the Data & Content Policy.
7. Security and changes
Measures include HTTPS, cookie and form protection, password hashing, access controls, logging and backups. The service is not directed to children. Material changes are published as a new version; document and acceptance history is retained.