GDPR information

Supplement to Privacy Policy tailoring Articles 12–22 expectations for controllers operating EU/UK expos co-selling tickets with influencer networks, multilingual consent receipts, biometric opt-in choreography.

Informational—not bespoke legal counsel

European skyline at dusk conveying regulatory context

Controller vs joint controller interplay

Organizers customizing checkout microcopy referencing co-branded influencer drops may constitute joint controllers; transparency artifacts must list each party’s responsibilities, contact handles, DPAs bridging ticket revenue splits.

Lawful bases mapping (illustrative)

  • Contract performance: fulfilling ticket SKUs, generating QR codes, delivering marketplace deliverables.
  • Legitimate interests: fraud analytics with balancing tests archived for regulator review; attendees may object where law permits.
  • Legal obligation: AML screening, tax retention, court orders.
  • Consent: optional marketing beacons, experimental personalization toggles default-off for EU visitors unless organizer enables explicit opt-in flows.
  • Vital interests: rare medical emergencies relaying triage data to onsite medics with minimal disclosure.

Automated decision-making & profiling transparency

Dynamic pricing suggestions remain advisory until organizers publish; no fully automated legal/equivalent effects trigger without human validation toggles. Waitlist prioritization may weigh loyalty signals—logic summaries exportable for transparency requests.

Cross-border transfers & representative appointments

EU representatives exist for non-EU processors as required; UK representatives mirror post-Brexit governance. TIA documentation updates when intelligence law opinions shift; customers receive major refresh digests.

Children & sensitive data guardrails

Youth expos obtain guardian consent tokens; health screening data defaults to ephemeral unless sponsor contracts demand longer windows with narrow purposes.

Supervisory authorities & complaint encouragement

Nothing here blocks lodging complaints with local authorities after exhausting good-faith dialogue with your controller; we provide routing tables linking fair venue countries to primary regulators.