In the following you will find out which of your data we store for which reason. This concerns the processing of data by Information＆communication Technology Show and the use of cookies. We will also inform you about your rights and provide you with further legally relevant information.

Ⅰ.Who is the controller of the data?

Controller within the meaning of the GDPR is Information＆communication Technology Show. If you have any questions about data protection at Information＆communication Technology Show, please contact our Data Protection Officer, Ms. Shu

Ms. Shu

Tel.  86-21-63811020

Email: yshu@shanghaiexpogroup.com

Ⅱ.Your rights as a data subject

Every data subject has the following rights:

• right of access (Art. 15 GDPR)
• right to rectification of data (Art. 16 GDPR)
• right to erasure and/or "right to be forgotten" (Art.17 GDPR)
• right to restriction of the processing of personal data (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)

You may at any time object to the processing of your personal data for marketing purposes – including profiling in connection with direct marketing -without giving reasons.

Moreover, you have a general right to object (cf. Art. 21(1) GDPR). In this case, reasons must be given for the objection. To the extent data is processed on the basis of consent, such consent can be revoked at any time with future effect.

Should you wish to exercise your rights as a data subject, please refer to yshu@shanghaiexpogroup.com

Furthermore, you have the right to lodge a complaint with a supervisory authority against the data processing performed by us.

Ⅲ.Data collection and data processing

Business Contacts

1. Business initiation/Support regarding business and professional development

For the purpose of business initiation, Information＆communication Technology Show will collect and process personal data you provide within the scope of a business contact or in

connection with a request, a delivery or performance, or other form of business contact. By business contact, we mean the collection of data at presentations of

Information＆communication Technology Show as well as at events and networking meetings. In addition, we will collect publicly available data, like information from company websites or publicly available directories (catalogues, lists of associations, etc.).

Apart from your contact details, the data collection will include further information provided by you in this context (in addition to the data on your business card, this usually extends to requests you make or further information you provide on the company you work for). Moreover, we will collect the data made available on the website of your employer. We will process such data to provide you and the company you work for with support regarding business and professional development in accordance with the objectives of Information＆communication Technology Show

We will involve service providers in the processing of such data. If your country of residence is not China, we will transfer the above-described data to the locally responsible subsidiary and/or sales partner of Information＆communication Technology Show. Our aim is to provide support regarding business and professional development also via our subsidiaries/sales partners, to establish a long-term business relationship, and to inform about further relevant events of ICTS and its subsidiaries at their respective locations.

2. Performance of a contract

For the purpose of contractual performance, we will collect and process core data (company name, contact person, address, phone number, e-mail address) as well as further data required for purposes of contractual performance and accounting, like order and performance data, correspondence data, payment data. This also includes the use of such data for the processing of complaints and warranty cases. Furthermore, the data may be made available to external auditors, tax advisors and lawyers working for Information＆communication Technology Show.

3. Deletion of data

The data collected in connection with the ordering and delivery of services will be stored in accordance with the statutory retention periods and deleted upon expiry of the respective retention periods. The personal data of other business contacts will remain stored as long as the respective person in its function is of relevance for our business purposes. This will be reviewed internally every 5 years. To the extent required for compliance with statutory retention obligations, the data will then be archived.

4. Legal bases

The legal bases for the processing of personal data are:

• Art.6 [1] b GDPR for delivery and performance,
• Art.6 [1] f GDPR for the processing of data of suppliers and other service providers to initiate business deals
• Art. 6 [1] f GDPR for the processing of data of other business contacts, including transfer tosubsidiaries/sales partners