Legal

Privacy Policy

How ExpoAxis collects, uses, and protects your personal data.

Last updated: May 2025 Applies to: www.expoaxis.com Jurisdiction: EU / GDPR

This Privacy Policy explains what personal data ExpoAxis collects from visitors to www.expoaxis.com, how that data is used, who it may be shared with, and what rights you have under the General Data Protection Regulation (GDPR) and applicable German data protection law.

Please read this policy carefully before submitting any personal information through our website. By using this site you acknowledge that you have read this policy.

1. Who We Are (Data Controller)

ExpoAxis is the data controller responsible for personal data collected through this website.

For all privacy-related enquiries or to exercise your data rights, contact us at info@expoaxis.com.

2. What Personal Data We Collect

We only collect data that you actively provide to us. We do not use tracking pixels, behavioural advertising, or third-party analytics that collect personal data.

Contact / Enquiry Form — when you submit a quote request or enquiry we collect:

  • Full name (required)
  • Email address (required)
  • Company name (optional)
  • Phone number (optional)
  • Exhibition / show name (required)
  • Stand size (optional)
  • Project details / message (required)
  • Date and time of submission

Technical data automatically collected by your browser:

  • IP address (processed by our form processor; not retained by us long-term)
  • Browser type and version (via browser User-Agent headers)

We do not collect sensitive personal data (health data, financial data, political opinions, etc.).

3. How We Use Your Data

We use your personal data only for the purposes for which it was collected:

  • To respond to your enquiry — we use your name, email, and project details to prepare and send a personalised quote, 3D concept, or other response.
  • To manage our client relationship — if you proceed with a project, your data is used for project coordination, invoicing, and delivery.
  • To improve our service — aggregate, anonymised feedback may inform how we structure our services. No personal data is used for this purpose.

We do not use your data for automated profiling, sell it to third parties, or use it for unsolicited marketing without your separate consent.

4. Legal Basis for Processing (GDPR Article 6)

  • Consent (Art. 6(1)(a)) — when you tick the consent checkbox on the contact form, you give us explicit permission to process your enquiry data.
  • Legitimate interest (Art. 6(1)(f)) — after consent is given, we have a legitimate interest in retaining correspondence related to a potential or active business relationship.
  • Contract performance (Art. 6(1)(b)) — once a project contract is in place, processing your data is necessary to fulfil that contract.

You may withdraw your consent at any time by emailing info@expoaxis.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Third-Party Services and Data Processors

We use the following third-party services that may process your personal data on our behalf. All are bound by data processing agreements and operate under appropriate safeguards:

Web3Forms (form submission processor)
When you submit the contact form, your data is transmitted to Web3Forms (web3forms.com) which forwards the submission to our email inbox. Web3Forms processes your data solely to relay the form contents; it does not store your data long-term or use it for its own purposes. For details, see the Web3Forms Privacy Policy.

Google Fonts
Our website loads typefaces from Google Fonts (fonts.google.com). This causes your browser to make a connection to Google's servers, which may log your IP address. Google operates under the EU–US Data Privacy Framework. See Google's Privacy Policy.

Font Awesome (CDN icon library)
Icons on this site are loaded from the Cloudflare CDN. Your browser connects to Cloudflare servers which may log IP addresses for security and performance purposes. See Cloudflare's Privacy Policy.

We do not use Google Analytics, Facebook Pixel, or any other behavioural tracking services.

6. Cookies

This Cookie Policy explains how ExpoAxis (www.expoaxis.com) uses cookies and similar browser storage. It applies to visitors of this marketing website.

This website uses no tracking or advertising cookies. We do not use Google Analytics, advertising pixels, or other tools that set analytics or marketing cookies.

Necessary / functional storage — the only browser storage we use is:

  • Cookie consent preference — stored in localStorage under the key expoaxis-cookies to remember whether you have accepted or declined our cookie notice. This contains no personal data and is required so we do not show the banner on every visit.
  • Language preference — if you change language on the site, your choice may be stored locally so the site can open in that language next time.

Analytics and marketing cookies — we do not set these. If that changes, we will update this section and, where required, ask for consent first.

No cookies are set before you interact with the cookie consent banner. You can decline via the banner, or clear this preference at any time by clearing your browser's site data for expoaxis.com.

How to control cookies: most browsers let you block or delete cookies and site data in their settings. Guidance is available from your browser vendor (for example Chrome, Firefox, Safari, or Edge). Blocking all storage may reset your consent and language choices on your next visit.

Questions about cookies: info@expoaxis.com.

7. Data Retention

  • Enquiries that do not result in a project — retained for up to 12 months to allow us to follow up if requested, then securely deleted.
  • Project correspondence and contracts — retained for 10 years in accordance with German commercial law (§ 257 HGB) and tax regulations.
  • Form submission logs (Web3Forms) — processed in transit only; not stored beyond the relay to our inbox.

8. Data Security

All data submitted through our contact form is transmitted over an encrypted HTTPS connection. Our email systems are protected by industry-standard security measures. Access to customer data is restricted to authorised ExpoAxis staff involved in the relevant project.

No method of transmission over the internet is 100% secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

9. International Data Transfers

ExpoAxis is based in Germany and primarily processes data within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g. via Google Fonts CDN nodes), appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the European Commission.

10. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

  • Right of access (Art. 15) — request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — ask us to correct inaccurate or incomplete data.
  • Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
  • Right to restriction of processing (Art. 18) — ask us to restrict processing in certain circumstances.
  • Right to data portability (Art. 20) — receive your data in a structured, commonly used format.
  • Right to object (Art. 21) — object to processing based on legitimate interests.
  • Right to withdraw consent — withdraw consent at any time without affecting prior processing.

To exercise any of these rights, email info@expoaxis.com with the subject line "Data Rights Request". We will respond within 30 days.

11. Right to Lodge a Complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority. In Germany, the lead authority is:

  • Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
  • Website: www.bfdi.bund.de

You may also contact the data protection authority in your own EU member state.

12. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through our site, please contact us immediately.

13. Links to Third-Party Websites

Our website may contain links to external sites (e.g. trade fair websites, partner organisations). We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before submitting any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically. Continued use of the website after any change constitutes acceptance of the updated policy.

15. Contact Us

For any questions about this Privacy Policy or to exercise your data rights: