Back

Personal Data Processing Policy

ROMEXPO Lead Management Platform

Last updated: January 19, 2026

ROMEXPO S.A. and EUROEXPO FAIRS SRL attaches great importance to your privacy and respects legal provisions regarding data protection. In the following, we will explain how we manage your personal data that is collected and processed through the ROMEXPO Lead Management Platform.

1

Data Controller

ROMEXPO S.A., headquartered in Romania, 65-67 Mărăști Blvd, District 1, Bucharest and EUROEXPO FAIRS SRL, 7 Expoziției Blvd., District 1, Bucharest, is the controllers of personal data processed through the ROMEXPO Lead Management Platform, hereinafter referred to as the "Platform".

Data Protection Officer
Email: data.protection@romexpo.ro and data.protection@euroexpo.ro

2

Purpose of Data Processing

Personal data is collected and processed for the following purposes:

  • Registration and management of potential visitors and customers interested in trade fairs and exhibitions organized by ROMEXPO S.A. and EUROEXPO FAIRS SRL
  • Providing relevant information about events, exhibitions and related services
  • Sending commercial communications, newsletters and event invitations
  • Contacting users by phone and/or SMS for information and marketing purposes
  • Analyzing the effectiveness of marketing campaigns and promotional channels
  • Creating statistical reports and internal analyses
  • Profiling users to adapt content and offers to declared or inferred interests
  • Ensuring compliance with applicable legal obligations
3

Types of Data Processed

The Platform may process the following categories of data:

Identification Data

First name, last name

Contact Data

Email address, phone number

Professional Data

Company, position, field of activity (where applicable)

Interest Data

Interest in certain trade fairs or exhibitions, answers to specific questions for each event

Technical and Marketing Data

Traffic source, advertising campaign, platform of origin, tracking parameters

Consent Data

Consents expressed for different types of communications and processing

4

Legal Basis for Processing

Data processing is carried out based on the following legal grounds:

Express Consent of the User
  • Commercial communications and newsletter
  • Profiling
  • Contact by phone and SMS
Legitimate Interest of ROMEXPO S.A. and EUROEXPO FAIRS SRL
  • Campaign performance analysis
  • Security and operation of the Platform
Legal Obligations

Legal obligations applicable to the operator according to current legislation.

Consent is expressed freely, specifically and informedly, by checking the dedicated boxes in the Platform forms.

5

Profiling

The Platform uses profiling mechanisms, consisting of analyzing the interests declared by the user (trade fairs, areas of interest, types of events), as well as their interactions with forms and transmitted communications.

The purpose of profiling is:

  • Sending relevant offers, invitations and information
  • Avoiding irrelevant communications
  • Optimizing content and marketing campaigns

Profiling does not produce legal effects and does not significantly affect the user.

6

Data Recipients

Data may be accessed by:

  • Authorized ROMEXPO S.A. and EUROEXPO FAIRS SRL personnel
  • Service providers involved in Platform operation (IT, hosting, maintenance)
  • Contractual partners involved in organizing trade fairs, exclusively for declared purposes
  • Public authorities, when there is a legal obligation

Important: Data is not sold and is not transferred to third parties for independent purposes.

7

Data Transfers Outside the EU

When using marketing or analysis tools that involve transfers outside the European Union, ROMEXPO S.A. and EUROEXPO FAIRS SRL ensures that appropriate safeguards are applied, in accordance with GDPR legislation.

8

Storage Duration

Data is stored for the period necessary to fulfill the purposes for which it was collected or until the user withdraws consent, but not longer than necessary according to legal obligations and internal policies.

We delete or anonymize your personal data as soon as it is no longer necessary for the purposes mentioned in this policy.

9

Rights of Data Subjects

Users have the following rights:

  • Right of access – you can request information about the personal data we hold about you
  • Right to rectification – you can request correction of inaccurate data
  • Right to erasure – you can request deletion of data ("right to be forgotten")
  • Right to restriction – you can request limitation of data processing
  • Right to object – you can object to data processing in certain circumstances
  • Right to portability – you can request transfer of data to another controller
  • Right to withdraw consent – you can withdraw your consent at any time
  • Right to lodge a complaint – you can file a complaint with the National Authority for the Supervision of Personal Data Processing

Rights can be exercised through a written request sent to: data.protection@romexpo.ro and data.protection@euroexpo.ro

10

Data Security

ROMEXPO S.A. and EUROEXPO FAIRS SRL applies appropriate technical and organizational measures to protect data, including:

  • Access control to data
  • Secure storage
  • Monitoring of Platform activities
  • SSL encryption for data transmission
11

Policy Changes

This policy may be updated periodically. The updated version will be published on the Platform and will take effect from the date of posting.

Contact

Address
Bd. Mărăști 65-67, Sector 1, Bucharest
General Email
Data Protection (DPO)