FORUM SA is committed to respecting and protecting your privacy. This privacy policy applies to each FORUM SA website, event, app and other service (each, a “Service”) that refers or links to this privacy policy. This privacy policy may be supplemented by additional privacy statements, terms or notices provided to you. The FORUM SA company that owns or administers the Service, as identified therein, is the primary controller of your personal information provided to, or collected by or for, the Service.

We collect information about you in three ways: (1) from your input through our web forms, badge scanners, business cards, app forms and other mechanisms, (2) from third-party sources, and (3) through automated technologies.

The types of personal information that we collect directly from you depends on how you interact with us and the Service and may include:

• Contact details, such as your name, email address, postal address, social media handle and phone number;
• Account login credentials, such as usernames and passwords, password hints and similar security information;
• Payment information, such as credit or debit card number;
• Comments, feedback and other information you provide to us, including information that you send to customer support and messages, appointment inquiries and other information that you wish us to share with our exhibitors, visitors, partners and others; and/or
• Interests and communication preferences, including Hosted Buyer Program, matchmaking and event planning and networking choices and preferred language.

We also may obtain personal information about you from other third parties, including:

• Service providers that help us determine a location based on your IP address in order to customize certain products to your location;
• Partners with which we offer co-branded services or engage in joint marketing activities; and/or
• Publicly-available sources and data suppliers from which we obtain data to validate or supplement the information we hold.

Our Service may automatically collect information about how you and your device interact with the Service, including:

• Computer, device and connection information, such as IP address, browser type and version, operating system, platform and other software installed on your device, unique device identifier and other technical identifiers, error reports and performance data;
• Usage data, such as the features you used, the settings you selected, your URL click stream data, including date and time stamp and referring and exit pages, and pages you visited on the Service; and/or
• For location-aware Services, your location, such as where you are located on the event hall.

We collect this data through our servers and the use of cookies and other technologies. You can control cookies through your browser’s settings and other tools. However, if you block certain cookies, you may not be able to register, login, or access certain parts or make full use of the Service. For more details regarding our practices with respect to how we use cookies, read below:

We may collect data about your use of the Services through the use of cookies, Internet server logs, tracking pixels (also called web beacons) and similar technologies. A cookie is a small text file that is placed on your computer or mobile device when you visit a website, that enables us to recognize your computer/device, store your preferences and settings, enhance your user experience by delivering content specific to your interests, perform searches and analytics, and assist with security administrative functions. An Internet server log is a file where website activity is stored. Server logs are used to track usage and provide security. A tracking pixel, which is also referred to as a web beacon or a clear GIF, is an electronic tag with a unique identifier that is embedded on webpages, in online advertisements and/or email. These pixels are designed to provide usage information, such as advertising impressions or clicks, measure popularity of the Services and associated advertising, and access user cookies.

We use third parties to assist us in advertising, tracking aggregated and/or de-identified site usage statistics, and providing content-sharing services to support the Services. These third parties may also use cookies and similar technologies to collect similar information about your use of the Services. For instance, the cookies may reflect de-identified data linked to or derived from data you voluntarily have submitted to us, e.g., a hashed version of your email address, which we may share with service providers, solely in non-human readable form. We do not control these third-party technologies, and their use is governed by those parties’ privacy policies.

For more information about targeting and advertising cookies and how you can opt out, you can visit http://youronlinechoices.eu/ or www.allaboutcookies.org/manage- cookies/index.html.

Depending on how you interact with us and the Service, we use your personal information to:

• Provide, activate and manage your access to and use of the Service;
• Process and fulfill a request, download or other transaction;
• Provide technical, product and other support and to help keep the Service working, safe and secure;
• Enhance and improve the Service and our other products and services and to develop new products, services and benefits;
• Offer you customized content and other personalization to make the Service more relevant to your interests and geography;
• Respond to your requests, inquiries, comments and concerns;
• Notify you about changes, updates and other announcements related to the Service and our other products and services;
• Deliver targeted advertisements, promotional messages, notices and other information related to the Service and your interests;
• Provide you with promotional messages and other information about products, events and services of ours, our affiliates and third parties, such as exhibitors, sponsors and media partners;
• Invite you to participate in user testing and surveys as well as competitions and similar promotions;
• Identify usage trends and develop data analysis, including for purposes of research, audit, reporting and other business operations, including determining the effectiveness of our promotional campaigns and evaluating our business performance; and/or
• Comply with our legal obligations, resolve disputes, and enforce our agreements.

Depending on the Service provided, we share personal information with:

Our service providers, suppliers, agents and representatives, including but not limited to, venue providers, onsite event contractors, customer support, email service providers, IT service providers, mailing houses and shipping agents, to process the information as necessary to provide the Service, complete a transaction or fulfill your request or otherwise on our behalf based on our instructions and in compliance with this privacy policy and any other appropriate confidentiality and security measures.

We will disclose your personal information if we have a good faith belief that such disclosure is necessary to:

• meet any applicable law, regulation, legal process or other legal obligation;
• detect, investigate and help prevent security, fraud or technical issues; and/or
• protect the rights, property or safety of FORUM SA, our users, employees or others;
• and as part of a corporate transaction, such as a transfer of assets or an acquisition by or merger with another company.

FORUM offers Visitors, Customers, and Attendees who provide contact information a means to choose how FORUM communicates with you. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of each of FORUM’s marketing emails. Additionally, you may send specific requests to gdpr@forumsa.gr

The Service may allow registered users to directly access and review their account information and make corrections or updates at any time. Keeping such information up to date is solely the responsibility of the user. Registered users may also close their account directly through the Service or by contacting the Service’s customer support.

You may have the right under European and certain other privacy and data protection laws, as applicable, to request free of charge:

• access to and correction or deletion of your personal information;
• restriction of our processing of your personal information, or to object to our processing; and
  portability of your personal information.
• If you wish to exercise any of these rights, please contact us through the contact address provided below. We will respond to your request consistent with applicable laws. To protect your privacy and security, we may require you to verify your identity.

We retain your personal information for as long as necessary to provide the Service and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements.

We take precautions to safeguard your personal information against loss, theft and misuse and unauthorized access, disclosure, alteration and destruction through the use of appropriate technical and organizational measures.

We take steps, including through contracts, intended to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.

Where personal information is transferred from the European Economic Area (“EEA”) or Switzerland to a country that has not received an adequacy decision by the European Commission, we rely on appropriate safeguards, such as the European Commission-approved Standard Contractual Clauses and EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, to transfer the data.

When we collect from you any personal information within the scope of European data protection laws, we do so:

• where necessary to provide the Service, fulfill a transaction or otherwise perform a contract with you or at your request prior to entering into a contract;
• where necessary for our compliance with applicable law or other legal obligation;
• where applicable, with your consent; and/or
• as necessary to operate our business, protect the security of our systems, customers and users, detect or prevent fraud, enable our customers to comply with legal obligations, or fulfill our other legitimate interests as described in the “Information We Collect”, ”How We Use Your Information” and “Sharing of Your Information” clauses above, except where our interests are overridden by your privacy rights.
• Where we rely on your consent to process personal information, you have the right to withdraw your consent at any time, and where we rely on legitimate interests, you may have the right to object to our processing.

We will update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. If we make any material changes, we will provide notice through the Service or by other means.

If you have any questions, comments, complaints or requests concerning this privacy policy or our processing of your information, please contact:

Data Protection Officer
FORUM SA
328 Vouliagmenis Av.
173 42 Athens
Greece
or gdpr@forumsa.gr

Last updated: May 2018