Legitimate Interests
Where we process your personal data based on a legitimate interest, we will only do so where the processing is proportionate and limited to what is necessary for the purpose it was originally collected for. We will also take steps to confirm that our legitimate interests do not override your legitimate interests as an individual.
If you have previously attended one of our events, subscribed to one of our services or we have made an assessment of your interests based on your profession or industry, then, in the absence of consent, the legal basis on which we have processed your personal data and communicated with you is legitimate interest. We have a legitimate interest in communicating with you in order to give you information regarding upcoming events or our other services. In balancing our interests against yours, we take into consideration the facts that the amount of your personal data we process is minimal, that it is not sensitive data, that there is a minimal privacy impact and that you can easily opt out or unsubscribe at any time.
8. If you fail to provide your personal data
Where we are required by law to collect your personal data, or we need to collect your personal data under the terms of a contract we have with you, and you fail to provide that personal data when we request it, we may not be able to perform the contract we have or are trying to enter into with you. This may apply where you do not provide the personal data we need in order to provide you with access to our services or Website. In this case, we may not be able to provide you with our services or access to our Website, in which case we will notify you.
9. How long we will keep your personal data
We store your personal data in accordance with applicable law and will not retain your personal data for longer than is necessary unless required to by other legal or regulatory requirements or to enable us to adequately investigate complaints. If you have any questions about the retention of your personal data, please contact us using the details at section 3 of this Privacy Policy.
10. Disclosing personal data
10.1 When we will disclose your personal data
We will only disclose your personal data with others when we are legally permitted to do so. We may disclose your personal data where:
- you have agreed to the disclosure of this information:
- during registration for an event;
- during form submission; or
- while attending one of our events, in particular when attending theatres and visiting booths;
- you have agreed to us disclosing your name and email address with carefully selected third parties (such as our exhibitors, sponsors and partners) whose products and services may interest you;
- data disclosures are required for us to fulfil a contractual obligation we have with you and/or your organization;
- we deem it reasonably necessary to enable us to provide services to you, or to help us with one of the other purposes for which we are permitted to process it under this Privacy Policy and applicable law (such as disclosures to the parties noted in section 10.2 or to sub-processors as described in section 10.3);
- you consent or authorize us to do so;
- if we are under a duty to disclose your personal data in order to comply with any legal obligation; and/or
- we sell or transfer, or we consider selling or transferring, some or all of our business, shares or assets to a third party, in which case we will disclose your personal data to such third party (whether actual or potential) in connection with the foregoing events (including, without limitation, our current or potential investors.) In the event that we are acquired by, or merged with, a third-party entity, or in the event of bankruptcy or a comparable event, we reserve the right to transfer, disclose or assign your personal data in connection with the foregoing events.
The above list is non-exhaustive and there may be circumstances where we need to share personal data with other third parties.
10.2 Who we will disclose your personal data to
Except for Special Category Data where specifically listed, the third parties that we may need to disclose your personal data with are as follows:
- entities within our group of companies (list available here): we enable access to each of the categories of personal data we process, including Special Category Data, across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services or operate our business;
- exhibitors and sponsors of events that you attend: we may share your Identity Data, Contact Data and Professional Data with such third parties that are assisting us with the operation and administration of that event for use in relation to the event;
- marketing agencies that have booked a stand on behalf of an exhibitor or sponsor of an event that you attend: we may share your Identity Data, Contact Data and Professional Data with such third parties that are assisting us with the operation and administration of that event for use in relation to the event;
- event partners and suppliers: when we run events, we may share your Identity Data, Contact Data, Professional Data, and Special Category Data with third-party service providers that are assisting us with the operation and administration of that event. If we are running an event in partnership with other organizations, we may share such data with such organizations for use in relation to the event;
- third parties (such as our exhibitors, sponsors and partners): we may share Identity Data and Contact Data with third parties who we believe you will benefit from hearing from about their third party products and services (where you have opted in to us sharing such data);
- advertising partners: we may share Professional and Website Data with third party advertising partners when you use our Website. This data is used to provide you with, and measure the effectiveness of, online personalized advertising and for other advertising related activities;
- third-party email marketing and CRM specialists: we may share Identity Data, Contact Data, Professional Data, and Marketing Data with specialist suppliers who assist us in managing our marketing database and sending out our email marketing communications;
- third-party organizations that provide applications/functionality, data processing or IT services: we may share each of the categories of personal data we process, including Special Category Data, with third parties who support us in providing the Website and help provide, run and manage our internal IT systems. Such third parties may include, for example, providers of information technology, cloud-based software as a service providers, identity management, website hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in data centers around the world, and personal data may be stored in any one of them. We may also share your Website Data with third-party service providers to assist us with insight analytics;
- payment providers and banks: We may share Identity Data, Transaction Data, and Website Data with third parties who assist us with the processing of payments;
- auditors, lawyers, accountants and other professional advisers: We may share each of the categories of personal data we process, including Special Category Data, with professional services firms who advise and assist us in relation to the lawful and effective management of our organization and in relation to any disputes we may become involved in;
- courts, law enforcement or other government and regulatory agencies and bodies: We may share each of the categories of personal data we process, including Special Category Data, with courts, law enforcement or other government and regulatory agencies or other third parties as required by, and in accordance with, applicable law or regulation; and
- occasionally, we may receive requests from third parties with authority to obtain disclosure of each of the categories of personal data we process, including Special Category Data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, or to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.
10.3 Sub-processors
In order to provide our services, we may engage third-party service providers (also known as "sub-processors") to process each of the categories of personal data we process, including Special Category Data, on our behalf. These sub-processors may include, but are not limited to, companies providing IT services, marketing services, payment processing, data analysis, event management, and customer support. Some of the third parties described in section 10.2 may also be sub-processors.
We may change or add sub-processors from time to time as part of our business operations.
A current list of our sub-processors, which is subject to change, can be made available upon request by contacting us at DataProtectionUS@closerstillmedia.com. If any sub-processor is located outside of the United Kingdom or the European Economic Area, we will utilize approved data transfer methods where required by applicable data protection laws. We will ensure that appropriate safeguards are in place to protect your personal data, as required by applicable data protection laws.
11. International transfers of personal data
In processing your personal data, it will sometimes be necessary for us to transfer your personal data outside of the country where you are located to our group companies and our third-party service providers.
In connection with such transfers, we will take commercially reasonable steps for the protection of personal information in accordance with this Privacy Policy and applicable data protection laws.
Where such transfers are from the United Kingdom (“UK”) or the European Economic Area (“EEA”), this shall include verifying that:
- there are appropriate safeguards in place such as binding corporate rules or the standard data protection model contractual clauses between either of us or between us and the recipient; or
- an adequacy decision has been made by the UK or EEA (as applicable) such that the data protection regime in the relevant location or jurisdiction has been deemed to provide an adequate level of protection for personal data; or
- one of the derogations for specific situations applies.
If you have any questions about our international transfers of personal data, please contact us using the contact details at section 3 of this Privacy Policy.
12. Marketing
As noted in section 7 of this Privacy Policy, we may send you marketing communications about our events and services as well as details of products and services of third parties (such as our exhibitors, sponsors and partners where you have opted in to receive such communications). If you would like to unsubscribe from receiving emails from us, you can click the unsubscribe link in our emails or by contacting us by email at DataProtectionUS@closerstillmedia.com and you can opt out of receiving text messages and/or WhatsApp messages from us by following the instructions on the message you receive to unsubscribe.
You can unsubscribe from emails from third parties by clicking the unsubscribe link in their emails.
13. Your data protection rights
You have the following rights in relation to the personal data we hold about you.
- The right to make a subject access request to be informed of what personal data of yours we hold. If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details).
- The right to have your personal data rectified in the event that it is inaccurate or incomplete. If we have disclosed your personal data to others, we'll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we've disclosed your personal data to so that you can contact them directly.
- The right to request the erasure of your personal data in some circumstances such as where we no longer need it or where you withdraw your consent (where applicable). If we have disclosed your personal data to others, we will let them know about the erasure where applicable. If you ask us, where it is practical and lawful for us to do so, we will also tell you who we have disclosed your personal data to so that you can contact them directly.
- The right to object at any time to the processing of your personal data, especially where the processing is carried out for direct marketing purposes. You can ask us to stop processing your personal data, and we will do so, if we are relying on our own or someone else's legitimate interest to process your personal data (except if we can demonstrate compelling legal grounds for the processing) or we are processing your personal data for the purposes of direct marketing.
- The right to restrict the processing of your personal data. You can ask us to 'block' or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us processing it for a particular purpose. This may not mean that we will stop storing your personal data but, where we do keep it, we will tell you if we remove any restriction that we have placed on your personal data to stop us processing it further. If we've shared your personal data with others, we'll let them know about the restriction where it is possible for us to do so. If you ask us, where it is practical and lawful for us to do so, we'll also tell you who we've disclosed your personal data with so that you can contact them directly.
- The right to data portability. You have the right, in certain circumstances, to obtain personal data you have provided to us (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer it to a third party of your choice.
- Rights in relation to automated decision-making and profiling. You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for the entering into, or the performance of, a contract between you and us.
- The right to withdraw your consent to the processing of your personal data. If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time. You can exercise your right of withdrawal by contacting us using our contact details in section 3 above or by using any other opt-out mechanism we may provide, such as an unsubscribe link in an email.
Your rights above can be exercised by contacting us using the contact details set out in section 3 of this Privacy Policy. We may require confirmation of your identity depending on your request and we will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your identity. We may decline a request where we are unable to authenticate you as the person to whom the personal data relates.
Further, we may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or other rights of another person, would reveal a trade secret or other confidential information, would interfere with a legal or business obligation that requires retention or use of the data, is unreasonable or excessive, or where otherwise permitted by applicable law.
If you reside in the United States of America, you may have additional rights. Please see the US Addendum below for additional information.
Should you have any queries or complaints in relation to how we use your personal data, please contact us using the details set out in section 3 of this Privacy Policy. If you wish to take any complaints or queries further, you have the right to contact a national supervisory authority in the place of your residence or the place of the alleged infringement regarding such issues.
14. Security of your personal data
We take precautions to help safeguard your personal data against loss, theft and misuse and unauthorized access, disclosure, alteration and destruction through the use of technical and organizational measures.
All our employees and data processors (i.e. those who process your personal data on our behalf) who have access to and are associated with the processing of personal data are obliged to respect the confidentiality of the personal data.
15. Third party links and services
Our Website may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these websites or their related policies. Please check these policies before you submit any personal data via these websites. This Privacy Policy shall not apply to the processing of your personal data carried out by a third-party provider.
16. Our use of cookies and other technologies
We, our sub-processors, and third parties may use certain cookies, web beacons, pixel tags, log files and other technologies (collectively, “Technologies”) in connection with our Website to collect personal data and other data.
16.1 Cookies and other Technologies
Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server.
Web beacons and pixel tags are electronic images (also clear GIFs) that are contained within a website or email. When your bowser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our email messages or newsletters to tell us if you open and act on them.
Other Technologies may also be used to collect data about you or your device when accessing our Website.
16.2 Use of Technologies
We, our sub-processors, and third parties may use Technologies to collect personal data and data about your online activities over time and across different websites or online services.
We and our sub-processors use personal data collected from Technologies for a variety of purposes, such as to store your preferences and settings, enable you to sign-in, analyze how our Website performs, track your interaction with the Website, develop inferences, deliver and tailor interest-based advertising, combat fraud, and for other business and operational purposes. We and our sub-processors may also disclose the personal data we collect or infer to others to assist with these purposes.
Companies acting as third parties, such as advertising partners, use personal data collected from Technologies for our purposes and other purposes. These third parties may use and combine this data across multiple sites for their own and third-party purposes.
16.3 Your choices
We use an IAB Europe-registered Consent Management Platform to display the current list of sub-processors and third parties that provide technologies used on the Website, and purposes, defined under the Transparency & Consent Framework (TCF v2.2). To review or change your choices and view the list at any time, select Manage cookies below.
Manage cookies
If you reside in the United States, please see the United States Addendum to Privacy Policy below for more details about the choices we offer.
17. Changes to this Privacy Policy
We will update this Privacy Policy from time to time to reflect any changes or proposed changes to our use of your personal data. We may also make changes to comply with changes in applicable law or regulatory requirements.
We will notify you by email of any significant changes to this Privacy Policy. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal data.