Privacy Policy

Welcome to ExpoSync.de. We attach paramount importance to the protection of your personal data. This privacy policy explains how we collect, use, share, and protect the personal information of exhibitors and their VIP guests in the context of professional events and trade fairs (such as MEDICA).

1. Data Controller

In the context of using the ExpoSync platform, the data processor is Innowebify (the platform's technology provider), acting as a Data Processor on behalf of the exhibitor who invited you (the Data Controller).

If you have any questions regarding this policy or your rights, you can contact us at the following address: privacy@exposync.de.

2. What Data Do We Collect?

In order to provide a frictionless visitor experience and facilitate the organization of your booth appointments, we collect the following categories of data:

• Identification and Contact Information: Full name, corporate email address, phone / WhatsApp number, and company name. This data is collected only when you submit a meeting request or contact inquiry.
• Navigation and Telemetry Data: Interactions with the platform (button clicks, PDF catalog downloads, language selection, routing requests).
• Technical Data: Device type (mobile/desktop), anonymized IP address, and action timestamps, for performance optimization and security purposes.

3. How Do We Use Your Data?

Your information is processed securely and for strict, legitimate purposes:

• Meeting Scheduling: Synchronizing your appointment requests with the exhibitor's sales representatives.
• Experience Personalization: Displaying your name and relevant catalogs on your digital invitation.
• Exhibitor Analytics: Providing the inviting exhibitor with aggregated reports on event Return on Investment (ROI) and product interests.
• System Improvement: Ensuring the proper functioning of our hybrid routing and web architecture.

4. Data Hosting and Transfer (Infrastructure)

All data generated and collected on ExpoSync.de is securely hosted in Germany on the cloud infrastructure of Hetzner Online GmbH. We use privately hosted n8n workflows to automate data processing.

We do not transfer any personal data outside the European Economic Area (EEA) without ensuring that adequate safeguards are in place, in compliance with GDPR requirements.

5. Cookies and Tracking Technologies

In accordance with the ePrivacy Directive and GDPR, ExpoSync focuses on a "Zero-Friction" architecture. We use no intrusive third-party advertising cookies (no Meta pixels, no cross-site ad trackers).

We only use session Local Storage technologies and lightweight telemetry tags (Silent Beacons) strictly necessary to remember your language preferences and booking status while navigating our microsite.

6. Data Retention

Data collected on behalf of our clients (exhibitors) is retained for as long as necessary to fulfill event-related objectives (e.g., MEDICA 2026) and post-event follow-up (typically 3 to 6 months after the exhibition). Beyond this period, telemetry data is either anonymized or securely deleted from our servers.

7. Your GDPR Rights

As a European resident or user of our Europe-based platform, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the data we hold about you.
• Right to Rectification: You can request the correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): You can request the complete deletion of your data from our systems and n8n pipelines.
• Right to Object: You can object to the processing of your data for analytical purposes.

To exercise any of these rights, please email the exhibitor who invited you or contact our privacy engineering team at privacy@exposync.de.

8. Changes to This Policy

We reserve the right to modify this privacy policy at any time to reflect technological changes or developments in legal regulations. Any major modifications will be updated on this page with a revised date.