Privacy policy
expolya.com
1. Data controller
The data controller is the publisher of expolya.com.
Contact: contact form
2. Data we process
The Site can be browsed without providing any data. Data is processed in the following cases.
- Contact form: last name, email address, subject and message; first name and company if you provide them.
- Adding an event: last name, organization and email address; first name, job title and phone number if you provide them; and the facts about the event that you give us. These facts, including an event contact email if you choose to give one, may be published on the event's listing. Your own contact details are not published.
The IP address is processed on a transient basis for the security of the Site (anti-bot check, limit on the number of messages sent).
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) | Data concerned |
|---|---|---|
| Responding to messages received | Legitimate interest (f) | Identification and contact |
| Securing the Site | Legitimate interest (f) | IP address, logs |
| Complying with legal obligations | Legal obligation (c) | Any data required |
4. Recipients
The data is accessible to the publisher's authorized persons and to its technical service providers, who act as processors within the meaning of the GDPR and solely on its instructions: hosting of the Site and delivery of emails.
5. Transfers outside the European Union
Some service providers may process data outside the European Union. Such transfers are governed by an adequacy decision or by the standard contractual clauses of the European Commission. Details of the providers concerned are available on request through the contact form.
6. Retention periods
- Messages sent through the contact form: 3 years from the last exchange;
- Technical security data: 48 hours at most.
7. Security
Appropriate technical and organizational measures are implemented to protect the data, in line with the recommendations of the CNIL guide on the security of personal data.
8. Your rights
Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the right of access, rectification, erasure, objection, restriction and portability. You can exercise these rights through the contact form.
The organizer of a trade fair may request the correction of the information published on its listing, and the removal of any contact address shown on it, in the same way.
You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés: CNIL, 3 place de Fontenoy, 75007 Paris, France, www.cnil.fr.
9. Cookies and trackers
The Site sets no audience measurement or advertising cookies. Only pages showing a location map embed Google Maps (Google LLC), which may set third-party cookies. See: policies.google.com/privacy.
10. Changes to this policy
This policy may be updated at any time. Last updated: October 18, 2026.
11. Contact us
To exercise your rights or for any question about your personal data, use the contact form. We reply within one month.