Privacy Notice

1. Controller
   
   Tampere Trade Fairs Ltd
   Ilmailunkatu 20, 33900 Tampere, Finland
   Tel: +358 207 701 222
   Business ID: 0155043-4
   
2. Contact information for data protection matters
   
   Tampere Trade Fairs Ltd / Customer Service
   asiakaspalvelu@tampereenmessut.fi
   
3. What personal data we process
   
   We process the following categories of personal data:
   • Contact details (name, email address, phone number)
   • Organisation and role information (company, position)
   • Event-related data (registration, participation, timestamps)
   • Marketing and communication data (newsletter subscriptions, interests)
   • Possible profiling data (e.g. interests, participation history and event behaviour)
   • Technical data (e.g. use of event applications, log data, IP address and usage data)
4. Purpose and legal bases for processing
   
   Personal data is processed for the following purposes:
   • Processing event registrations and enabling participation (contract)
   • Enabling event access and access control (contract)
   • Providing event applications and participant profiles (legitimate interest)
   • Managing customer relationships, including customer service (legitimate interest)
   • Invoicing, payment processing and debt collection (contract / legitimate interest)
   • Organising and delivering events (contract / legitimate interest)
   • Developing events, analytics and reporting (legitimate interest)
   • Visitor counting and statistics (legitimate interest)
   • Customer profiling for targeted marketing (legitimate interest)
   • Event-related marketing and communications (legitimate interest)
   • Direct marketing via electronic or other channels (legitimate interest / consent, as applicable)
   • Sending newsletters (legitimate interest / consent)
   • Enabling contact between exhibitors and participants (e.g. badge scanning or networking via applications) (legitimate interest)
   • Enabling services provided together with partners (legitimate interest)
   • Monitoring system use and ensuring data security (legitimate interest / legal obligation)
   • Preventing misuse and ensuring data security (legitimate interest / legal obligation)
   • Complying with legal obligations (e.g. accounting, official requests) (legal obligation)
     
     We process personal data partly on the basis of legitimate interest. Our legitimate interest is based on conducting our business, developing events and maintaining customer and marketing relationships.
     
     We have assessed that such processing is necessary for these purposes and does not unduly interfere with the rights and freedoms of data subjects. Data subjects have the right to object to processing for direct marketing and related profiling at any time.
5. Sources of personal data
   
   Personal data is obtained from the data subject (e.g. in connection with registration), from the organisation represented by the data subject, from public sources and from partners.
   
6. Recipients of personal data
   
   Personal data may be disclosed to companies within the Tampere Trade Fairs Group, to subcontractors and service providers (e.g. IT and event systems) based on appropriate data processing agreements, and to exhibitors when a visitor shares their data via badge scanning or registers through an invitation sent by an exhibitor.
   
7. Transfers of data outside the EU/EEA
   
   Personal data may be transferred outside the EU/EEA in connection with the use of service providers. Such transfers are carried out in accordance with applicable legislation, for example on the basis of the European Commission’s standard contractual clauses or adequacy decisions.
   
8. Retention of personal data
   
   Personal data is retained for the duration of the event to enable registration, participation and access (contract), for providing event applications and participant profiles (legitimate interest), and for managing customer relationships after the event, including consumer and business customers (contract / legitimate interest).
   
   
   Personal data is also retained for marketing purposes during the customer relationship and thereafter for a reasonable period after the last contact, unless the data subject objects to processing (legitimate interest) or withdraws consent (consent). For newsletter subscribers, personal data is retained until the data subject withdraws their consent or the data subject objects to processing (legitimate interest).
   
   
   Participant profiles are stored in the event system as long as the data subject is active in the system. If a profile is not used for two (2) years, it will be deleted or anonymised. Data subjects may delete their profiles and related data themselves via the event system interface.
   
   
   If a data subject requests deletion of their data before an event for which they have registered, their registration will be cancelled and participation in the event will no longer be possible.
   
   
   Personal data may be retained longer where required to comply with legal obligations (e.g. accounting).
   
9. Rights of the data subject
   
   The data subject has the right to
   • access their personal data and obtain a copy of the data,
   • request rectification of inaccurate or incomplete data,
   • request erasure of personal data in accordance with applicable law,
   • request restriction of processing,
   • object to processing where it is based on legitimate interest,
   • object to processing for direct marketing purposes at any time,
   • receive their personal data in a structured, commonly used and machine-readable format and transfer it to another controller where processing is based on consent or a contract, and
   • withdraw consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
     
     Data subjects may exercise their rights by contacting the contact person referred to in section 2.
     
     Data subjects also have the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data violates applicable data protection legislation.
10. Marketing and profiling
    
    Personal data may be used for profiling in order to target marketing. Profiling does not result in automated decisions that would have significant effects on the data subject.
    
    
    The data subject may object to marketing at any time.
    
11. Data security
    
    Personal data is protected using appropriate technical and organisational measures. Access to personal data is restricted to persons who need it for the performance of their duties.
    
12. Changes to this privacy notice
    
    We reserve the right to update this privacy notice. Changes may be based on legislative changes or the development of our operations. Privacy Notice is updated 6.5.2026