WEBSITE PRIVACY POLICY
This Personal Data Protection Policy (hereinafter the "Policy") sets out the practices and conditions under which W.S.N DÉVELOPPEMENT (a simplified joint-stock company (SAS) with a share capital of €1,799,073, registered with the Paris Trade and Companies Register under number 410 589 337, with its registered office at 12 rue Philippe de Girard – 75010 Paris) (hereinafter the "Company"), acting as the data controller, uses your personal data in connection with the management and organization of its trade shows and the operation of the website www.wsn-events.com (hereinafter the "Website").
W.S.N DÉVELOPPEMENT is a subsidiary of the COMEXPOSIUM Group. The COMEXPOSIUM Group places particular importance on the protection of personal data. This is an essential element of the relationship of trust that the COMEXPOSIUM Group seeks to establish with everyone who entrusts it with their personal data.
Personal data (hereinafter "Data") means any information relating to an identified or identifiable natural person. An "identifiable natural person" is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity, as defined by the applicable regulations.
1 – WHAT DATA DO WE COLLECT?
Depending on how you interact with the Company and the purpose of that interaction, the Company may collect the following Data:
- Identity data: this Data includes, in particular, your last name, first name, business email address, postal address, telephone number, company, job title, business sector and profile (buyer, exhibitor, brand, service provider, speaker, applicant, etc.).
- Data relating to your information requests submitted through the contact form: we process your personal data to respond to requests submitted via the Website contact form. This data includes your name, company, email address, telephone number, profile (visitor, exhibitor, applicant, supplier, journalist, other), as well as the information contained in the message you write.
- Data relating to partnership requests: when you submit a partnership request through the dedicated form available on the Website and the trade show websites, we collect information relating to your identity, including your first and last name, job title, company (legal name), postal address, email address and telephone number.
- Data relating to your registration and badge management: when you register for one of our trade shows as a professional visitor, buyer or accredited person (press or VIP buyer), we process your last name, first name, email address, company, job title, city, country, as well as any information required to issue your access badge.
- Data relating to your participation as an exhibitor or brand: when you participate as an exhibitor, listed brand or agency representing a brand, we process information relating to your company (legal name, legal status, SIRET number, address, website), your identity, your participation agreement, the management of your exhibitor area, your location preferences and your participation history.
- Data relating to your orders and invoicing: this Data includes all information required to complete your order and issue the corresponding accounting documents, including information relating to the payment method used, order details and date, as well as communications with the sales relations department.
- Data relating to your login and use of your personal account: if you have an exhibitor account or visitor account on one of our platforms (including wsn.community or register.premiere-classe.com), this Data includes all information required for you to log in (username and password), your choices and preferences, and the history of the events you have attended.
- Data relating to your subscription to our professional newsletter: when you wish to receive our communications and news about our trade shows, we collect your email address.
- Data relating to professional appointments between buyers and brands: as part of the business matchmaking tools available during our trade shows, we process the information required to schedule and manage B2B meetings (participants' identities, company, job title, available time slots and meeting history).
- Data relating to accreditation requests (press and VIP buyers): when processing accreditation requests, we collect your last name, first name, title, affiliated organization or media outlet, email address, telephone number, and any document proving your professional status.
- Data relating to browsing the Website (for more information: see our Cookie Policy): this Data concerns how users browse the Website. It may include your IP address, screen resolution, browser used, browsing duration, search history, operating system, language and pages viewed.
- Data relating to the use of social media: when you interact with the social media features integrated into the Website or WSN Développement platforms, these interactions are governed by the personal data protection policies of the relevant social media platforms, which we invite you to consult.
- Data relating to the measurement of our email communications: when we send you email communications, a tracking device ("tracking pixel") may allow us to determine whether the message has been opened, when it was opened, on which device, and which content you interact with (opening, reading and engagement data, device information, and the date of the last email opened).
Some processing activities are based on your consent. When these tracking devices are used to measure and analyze the performance of our communications, adapt their content, frequency, timing or delivery channel, personalize the messages and invitations we send you, create profiles for targeting purposes on other media, or detect and analyze potential fraudulent activities, they are based on your consent, which you may withdraw at any time.
Other processing activities do not require your consent. Certain tracking devices are strictly necessary and therefore do not require your consent, including those used to ensure the security and authentication of our communications; those measuring email openings solely for deliverability purposes, limited to the management of inactive recipients on our mailing lists for transactional emails or emails you have requested; and the retention of proof of an email opening where it contributes to demonstrating compliance with a legal obligation to provide information.
2 – HOW IS YOUR DATA COLLECTED?
2.1. Depending on how you interact with the Company, it may collect your Data in the ways described below.
2.2. The Company collects your Data directly from you, in particular when you complete a registration or contact form, place an order, submit an accreditation or participation request, or contact the Company directly (for example by sending an email).
2.3. The Company indirectly collects your Data when you browse the Website through cookies and similar technologies under the conditions described below. The Company also collects your Data through third parties, including social media platforms, when you use your account with those third parties to log in or register for one of our events.
The Company uses tracking devices ("tracking pixels") embedded in its emails to measure and analyze your interactions with these communications. The purposes pursued, the Data processed and the legal basis applicable to each processing activity are set out below.
2.4. When you provide Data to the Company, you are responsible for ensuring that it is accurate and complete. Where necessary, you must keep it up to date.
2.5. Data identified as mandatory is necessary to process your request and enable the Company to provide the requested services. Whether Data is mandatory or optional is indicated on the relevant forms, together with the possible consequences of failing to provide it.
3 – WHY IS YOUR DATA COLLECTED?
3.1. Your Data is processed by the Company for the various purposes described below, both in connection with your use of the Website and your participation in events organized by, or entrusted to, the Company.
To facilitate understanding of the processing activities carried out, the table below summarizes the purposes pursued, the categories of Data concerned and the corresponding legal bases.
| Purpose | Category of Data | Legal Basis |
|---|---|---|
| Management of your requests | Identity data (last name, first name, email address, telephone number), and the content of your request. | The Company's legitimate interest in responding to your request or for pre-contractual purposes. |
| Management of your participation in events (visitors, exhibitors) and creation of your account | Identity data (last name, first name, email address, telephone number, job title, company). | The performance of pre-contractual and/or contractual measures relating to the individual's registration for and participation in an event organized by the Company. |
| Improving the quality and organization of events | Identity data (job title, company, email address, telephone number), and data relating to account login and use. | The Company's legitimate interest in improving the quality of the events it organizes. |
| Sending information and commercial communications – business prospects | Identity data (last name, first name), professional data (job title, company), contact details (email address, telephone number). | The Company's legitimate interest in promoting its events to a professional audience. |
| Sending information and commercial communications – private individuals | Identity data (last name, first name), contact details (email address, telephone number). | Your consent. |
| Sending communications relating to other Group companies or partners | Identity data (last name, first name, job title, company, email address, telephone number). | Your consent and/or the Company's legitimate interest. |
| Personalizing and optimizing your experience and producing statistical analyses | Browsing data and data relating to account login and use (preferences, etc.). | Your consent and/or the Company's legitimate interest. |
Consent-exempt tracking pixels
Certain tracking technologies embedded in our emails do not require your consent where they are strictly necessary to provide a service you have requested or to comply with our legal obligations.
This includes pixels used for security and authentication purposes (for example, to confirm the opening of an email containing a one-time code), pixels related to our transactional communications (order confirmation, badge/ticket/invitation delivery), those required to comply with a legal obligation or to establish evidence (updates to our terms and conditions, notification of a security incident), as well as pixels used solely to measure email deliverability and identify inactive recipients.
For this latter purpose, only the date of the most recent email opening is retained, excluding the time of opening, and this information is overwritten each time a new opening is recorded.
These tracking technologies are not used for any other purpose, in particular audience measurement, personalization or targeting, all of which require your prior consent.
4 – WHO ARE YOUR DATA SHARED WITH?
4.1. Your Data is processed by the Company's internal teams. In addition, only authorized service providers and their duly authorized personnel may access your Data, solely to the extent necessary to perform the specific services entrusted to them on behalf of the Company, and in strict compliance with security and confidentiality obligations.
4.2. Subject to your consent where required, your Data may be shared with other entities of the Comexposium Group to which the Company belongs, as well as with partners, in particular so that they may send you information and updates regarding their products and services.
4.3. Where required by applicable law, the Company may disclose your Data to organizations and public authorities legally authorized to access it (including judicial and administrative authorities).
5 – HOW IS YOUR DATA PROTECTED?
The Company takes all appropriate precautions to preserve the security, integrity and confidentiality of your Data, in particular to prevent it from being altered, damaged, disclosed or accessed by unauthorized third parties.
The Company also implements internal procedures to ensure the security of your Data during its use, transfer and storage. It regularly maintains and updates these procedures to ensure compliance with applicable regulations.
These security measures include, in particular:
- ensuring that the service providers and subcontractors engaged by the Company, particularly those responsible for making the Website and its platforms available or fulfilling your requests, comply with their contractual obligations to provide appropriate protection for the Data to which they have access;
- restricting access to your Data to employees who are subject to confidentiality obligations and whose access is necessary to provide you with the requested services and/or justified by their duties;
- storing your Personal Data on servers providing appropriate security guarantees. The Data is retained, in accordance with applicable regulations, for the periods specified in Article 7.
6 – WHAT ARE YOUR RIGHTS?
6.1. In accordance with applicable regulations and under the conditions they define, you may exercise the following rights at any time:
- Right of access: you may request information from the Company regarding the processing of your Data and obtain a copy of such Data.
- Right to rectification: you may request that inaccurate or incomplete Data concerning you be corrected.
- Right to erasure ("right to be forgotten"): you have the right to obtain the deletion of your Data where one of the grounds provided for by applicable regulations applies (for example, where the Data is no longer necessary or where you withdraw your consent for processing based on such consent).
- Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your Data, including processing for direct marketing purposes.
- With regard to the measurement of our email communications, which is based on your consent, you may withdraw that consent at any time, using the methods described in our emails or by contacting us using the contact details provided in this article.
- Right to data portability: you have the right to receive your Data in a structured, commonly used, machine-readable format. This right applies only to Data that you have provided to the Company or that results from your use of its services, where such processing is based on your consent or on the performance of a contract.
- Right to restriction of processing: you may request that the Company suspend the processing of your Data where one of the grounds provided for by applicable regulations applies (for example, where you contest the accuracy of the Data or where the processing is unlawful).
Right not to be subject to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, without human intervention.
Right to post-mortem instructions: under the conditions laid down by applicable regulations, you also have the right to define general or specific instructions regarding the storage, deletion and communication of your Personal Data after your death.
6.2. Where your Data is processed on the basis of your consent, you may withdraw that consent at any time. However, you are informed that any processing carried out before such withdrawal will remain lawful.
6.3. Your data protection remedies
You may exercise your rights by contacting the Company:
- Via our online form
- By email at: [email protected], or by post at the following address: WSN Développement – Personal Data Department, 12 rue Philippe de Girard – 75010 Paris, France.
You are also informed that, in certain cases, the Website's features allow you to view and modify the Data you have provided to the Company.
You are informed that the Company will respond to your request as soon as possible and within one month of receiving it (except in the case of a complex request, which may require additional processing time).
The Company takes the utmost care with your Data. However, if you consider that the processing of your Data infringes your rights, you have the right to lodge a complaint with the French Data Protection Authority (CNIL) – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 – France.
7 – HOW LONG DO WE RETAIN YOUR DATA?
7.1. The Company retains your Data for no longer than is necessary to fulfill the purposes described in this Policy. Beyond this period, your Data may be archived to comply with the Company's legal obligations or deleted.
7.2. Data required to establish proof of a right or contract, or retained by the Company to comply with a legal obligation, is archived in accordance with the applicable legal provisions.
7.3. The Company takes into account the seasonal nature of the events it organizes. Accordingly, the retention periods below are defined according to the type of processing and the category of data subject.
| Category of Data | Retention Period |
|---|---|
| Prospect data | 3 years after the last contact. |
| Customer data | For the entire duration of the service agreement and for 5 years after its termination. |
| Order and invoicing data | Invoice data is retained for 10 years in accordance with the provisions of the French Commercial Code. |
| Data relating to requests you submit to us | For the period necessary to process and close your request. |
| Data relating to your subscription to our professional newsletter | 3 years from your last active contact or until you withdraw your consent or exercise your right to object. |
| Website browsing data (cookies and trackers requiring consent) | Up to 13 months from the date the tracker is placed. |
| Data relating to the use of social media | Data processed through social media platforms is subject to the respective retention policies of those platforms. |
| Bank card data (card number and expiry date) | 13 months following the debit date (15 months for deferred debit cards). |
8 – DATA TRANSFERS
For the hosting and processing of your Data, the Company gives preference to resources located within the European Union. Should it nevertheless become necessary to transfer your Data to a country outside the European Union, the Company undertakes to ensure that appropriate technical and organizational safeguards are implemented.
9 – CHANGES TO THIS PRIVACY POLICY
9.1. Any amendment to this Policy made by the Company will be published through an update on the Website.
9.2. Users are encouraged to consult this Policy regularly in order to stay informed of any updates or changes.
9.3. If any provision of this Policy is held to be invalid or contrary to applicable laws or regulations, it shall be deemed unwritten and shall not affect the validity of the remaining provisions of this Policy.