1. Introduction
Shanghai Golden Expo Group Co., Ltd. ("Golden Expo Group", "we", "us" or "our") is a company specialising in organising international exhibitions and conferences. We recognise the importance of your personal information and are committed to protecting it in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and other applicable laws.
This Privacy Policy applies to personal information we collect and process through our website (www.goldenexpo.com.cn), our exhibitions and conferences, emails and other services. It explains what information we collect, why we collect it, how we use and protect it, and the rights you have.
If you are located in the EU/EEA, we process your personal information in accordance with the GDPR. We also comply with the applicable laws of the jurisdictions where we operate, including China. In this Policy, "personal information" means any information relating to an identified or identifiable natural person.
2. Information We Collect
We collect personal information from three main sources: information you provide to us, information from third parties, and information collected automatically through the use of our services.
2.1 Information You Provide to Us
•Identity and contact information: name, title, email address, telephone number, postal address, company name, job position, department, etc.;
•Registration and event information: account credentials, exhibitor/visitor/buyer registration data, event registration details, participation preferences, dietary and accessibility requirements, etc.;
•Business matching information: information you choose to share with exhibitors, buyers or other participants, such as sourcing requirements, interests in products or services, and business card details;
•Payment information: where payment is required for services or tickets, the information necessary to process the transaction;
•Communications: your enquiries, feedback and communications with our customer service.
2.2 Information from Third Parties
Where permitted by applicable law, we may receive information from our group companies, public sources, co-marketing partners and service providers, which we use to verify or supplement the information we hold about you.
2.3 Information Collected Automatically
•Device and usage information: IP address, browser type and version, operating system, device identifiers, access times and pages, referring/exit pages, clickstream and other log data;
•Cookies and similar technologies: as described in the "Cookies and Similar Technologies" section below;
•On-site event information: where applicable, information collected through badge/QR code scanning, RFID wristbands, Bluetooth beacons and video surveillance, such as admission and location data, used for access control, visitor flow analysis and security;
•Imagery: photography, filming or CCTV at our events.
Sensitive information: where you provide sensitive information such as health conditions, disability or dietary requirements (for accessibility assistance or emergency purposes), we will obtain your explicit consent and use such information only for the relevant purposes.
3. How We Use Your Information
•To provide and manage our services: processing registrations, bookings and ticketing, delivering exhibitions and conferences, issuing badges, and providing customer and technical support;
•To facilitate business matching: with your authorisation, enabling business connections between exhibitors, buyers and visitors (e.g., badge or business card scanning, meeting scheduling and lead management) to support your business objectives;
•For marketing: sending exhibition updates, event invitations, industry information and personalised recommendations, based on your consent or another lawful basis, and always offering an easy opt-out;
•For security and compliance: identity verification, fraud prevention, protection against security incidents, fulfilling legal obligations (e.g., record-keeping and regulatory cooperation), and ensuring venue safety;
•For analytics and improvement: statistical analysis, measuring event performance, and improving our websites, exhibitions and other services;
•For any other purpose with your consent or as permitted by law.
4. Legal Bases for Processing
Under the GDPR, we process your personal information on the following legal bases:
•Your consent (Article 6(1)(a) of the GDPR): for example, for marketing communications, the processing of sensitive information, and certain cookies. You may withdraw your consent at any time;
•Performance of a contract (Article 6(1)(b)): where necessary to provide the services you have requested (e.g., registration, exhibiting, ticketing);
•Compliance with a legal obligation (Article 6(1)(c)): where required by applicable law (e.g., financial records, regulatory compliance);
•Legitimate interests (Article 6(1)(f)): where necessary for our legitimate interests in operating our exhibition business, ensuring security, preventing fraud and improving our services, provided your interests do not override those interests.
Where we rely on legitimate interests, you have the right to object (see "Your Rights" below).
5. Sharing and Disclosure of Information
We share your personal information only in the following circumstances, on a need-to-know and data-minimisation basis:
•Service providers: we disclose information to parties that provide services on our behalf (e.g., technology, payment, logistics, marketing and customer service), who are bound by contractual and confidentiality obligations;
•Exhibitors and partners: after you authorise this through badge or business card scanning, meeting requests or explicit consent, we provide relevant exhibitors/partners with your essential business information (e.g., name, position, company, contact details and event interests) so that they may contact you for business purposes;
•Group companies: where necessary for internal administration and the delivery of integrated exhibition services;
•Legal and regulatory requirements: where disclosure is required by law, regulation or judicial process, or to protect our or others' legitimate rights and interests;
•Business transactions: in the event of a merger, acquisition, reorganisation or asset transfer, we may disclose information to the relevant parties and will require the transferee to continue to observe this Policy.
We do not sell your personal information.
6. International Data Transfers
We are a company operating in China and serving customers worldwide. Your personal information may be stored and processed in China and in other countries where we or our service providers are located, including countries outside the EU, where data protection standards may differ from those in the EU.
Where we transfer personal information to countries outside the EU/EEA, we do so in accordance with the GDPR, relying on appropriate safeguards, including: an adequacy decision by the European Commission (Article 45), Standard Contractual Clauses (Article 46) together with any necessary supplementary measures, or one of the derogations under Article 49 (e.g., your explicit consent). You may contact us to obtain a copy of the safeguards in place.
Our service providers (e.g., cloud services, analytics tools and payment processors) are likewise required to comply with the safeguards set out in their contracts with us.
7. Data Retention
We retain your personal information only for as long as necessary to achieve the purposes described in this Policy, taking into account the purpose of processing, legal requirements and reasonable business needs. When the retention period expires, we will delete or anonymise your information.
For example: technical log data is generally retained for a short period (e.g., 30 to 90 days); financial and business records are retained for the periods required by applicable law; and after you unsubscribe from marketing, we retain only the minimum information necessary to honour your opt-out request and ensure you receive no further marketing communications.
Where a processing activity may have a significant impact on you, we will determine and communicate the applicable retention period in accordance with legal requirements.
8. Your Rights
Under the GDPR, you have the following rights:
•Right of access: to obtain confirmation of whether we process your information and a copy of it;
•Right to rectification: to correct inaccurate or incomplete information;
•Right to erasure ("right to be forgotten"): to request deletion of your information in the circumstances provided by law;
•Right to restriction of processing: to request restriction of processing in the circumstances provided by law;
•Right to object: you may object to processing based on legitimate interests, and you may object to direct marketing at any time without giving reasons;
•Right to data portability: to receive your information in a structured, machine-readable, commonly used format, or to have it transmitted directly to another controller;
•Right to withdraw consent: to withdraw any consent you have previously given, without affecting the lawfulness of processing based on consent before its withdrawal;
•Right to lodge a complaint: if you believe we have not processed your information lawfully, you may lodge a complaint with the data protection supervisory authority (DPA) in your EU member state.
You may exercise these rights through the contact details at the end of this Policy (or through your account settings). To verify your identity, we may request additional information from you, and we will respond within the time limits prescribed by applicable law (usually within one month).
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies:
•Strictly necessary cookies: required for basic website functions (e.g., login, security, shopping basket), which generally do not require consent;
•Analytics and marketing cookies: used to analyse browsing behaviour, measure marketing effectiveness and deliver personalised content and advertising, and are only enabled with your consent.
You can manage or withdraw your consent at any time through your browser settings or the consent management tool on our website. We may also use pixels or links in marketing emails to understand whether emails are opened or clicked; you can stop such tracking by unsubscribing.
Some third-party services (e.g., analytics tools) may set their own cookies, and their processing is governed by the respective third parties' privacy policies.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including access controls, encryption (in transit and at rest), pseudonymisation/de-identification, staff confidentiality and training, and incident response plans, to prevent unauthorised access, disclosure, alteration or loss.
In the event of a personal information security incident, we will notify you and/or the relevant supervisory authority in a timely manner, as required by law.
11. Children
Our exhibitions and conferences are primarily directed at business professionals and are not generally intended for children. We do not knowingly collect personal information from children (individuals under the age of 14); if we become aware that we have collected such information inadvertently, we will delete it as soon as possible. If you are a parent or guardian and believe this may have occurred, please contact us.
12. Changes to this Policy
This Policy may be updated from time to time. We will publish the updated version on our website together with its effective date; for material changes, we will notify you in a prominent manner (e.g., via a website announcement or email).
13. Contact Us
If you have any questions, comments or requests regarding this Policy or our processing of your personal information, please contact us at:
Company: Shanghai Golden Expo Group Co., Ltd.
Website: www.sinotradefair.com
Data protection contact: privacy@goldenexpo.com.cn
Effective date: 10 October 2025
