Privacy policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter, the “GDPR”) and Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights (hereinafter, the “LOPDGDD”), IFEMA MADRID provides you with this Privacy Policy in order to inform you in detail about the processing that the Institution carries out with respect to your personal data.

This Privacy Policy applies to the processing of personal data that you provide to IFEMA MADRID by any means, whether through the Website (www.ifema.es), when you contract a service with the Institution as an exhibitor at a trade fair or when you access the fairgrounds as a visitor to a fair, among other cases. You must read the information on data protection set out below, relating to the use and purpose of the data provided, as well as the procedure for exercising and handling your rights recognised in the field of personal data protection.

 1 Data controller

The data controller is the entity that decides which personal data are processed and for what purposes. Below you can find the contact details of the controller for the processing activities carried out:

▪ INSTITUCIÓN FERIAL DE MADRID (IFEMA MADRID) – Q/2873018B.

▪ Address: Avenida del Partenón 5, 28042 Madrid (Spain).

▪ Email address of the Data Protection Officer (DPO): [email protected]

This Website offers the possibility of registering as an Exhibitor, pre-registering for trade fairs and events as a Visitor, contracting services, attending events, requesting information, taking part in activities, etc., for which the User must complete the forms provided, indicating the data necessary for their management. Registration through this channel may require the User to provide personal data in order for it to be effective.

IFEMA MADRID is committed to the security of users’ data. When we ask you to fill in the fields of personal information by which you can be identified, we do so ensuring that it will only be used in accordance with the terms of this Privacy Policy and in relation to the purposes for which the data are collected. However, IFEMA MADRID reserves the right to update this Privacy Policy whenever it deems necessary.

 2 Data Protection Officer (DPO)

IFEMA MADRID has appointed a Data Protection Officer (DPO), who is responsible for ensuring that the Institution complies with legal requirements in the area of data protection, responding to the exercise of rights by data subjects and resolving any queries on the matter. The DPO’s contact details are:

▪ PONS IP, S.A.

▪ Glorieta Rubén Darío 4, 28010 Madrid (Spain).

Any user or data subject may contact the DPO by email at [email protected] or by post addressed to IFEMA MADRID – Avenida del Partenón 5, 28042 Madrid (Spain).

 3 Personal information collected and processed

Our Website may collect personal data and information, for example: first name and surname, and contact information such as your home address or email address.

▪ Identification data: first name and surname, national ID number, age (in some cases).

▪ Contact data: postal address, email address, telephone number (landline or mobile).

▪ Contractual data: data related to contractual transactions for the purpose of managing products and services purchased.

▪ Browsing data: IP address, domain through which you access the Website and activity on the Website, browsing habits, device identification, type of browser, and information about your interests, preferences and needs.

If there is a contractual relationship or if the purpose of the relationship is to manage the User’s registration for a trade fair or event, it is necessary that you provide us with your personal data, otherwise we would not be able to comply with the obligations arising from the service nor with other legal responsibilities to which IFEMA MADRID is subject.

Likewise, the User may revoke his or her consent at any time when it comes to sending communications by email or equivalent means (for example, SMS text messages, instant messaging or telephone calls), by which we will inform you about activities, trade fairs or events organised by IFEMA MADRID, our sponsors and other third-party companies linked to these events and activities.

 4 Purpose and legal basis for the processing of your personal data and data retention

The purpose of the processing answers the question of what the data controller is going to use your personal data for, and the legal basis informs you of the legal grounds that make the processing of your data lawful and compliant with data protection regulations.

With regard to data retention, IFEMA MADRID establishes certain periods during which it is necessary, and in some cases mandatory, to retain your data before proceeding to their deletion.

In this regard, IFEMA MADRID processes the data collected for the following purposes and for the following periods of time:

4.1. Registration to attend a trade fair, show, event or activity organised by IFEMA MADRID as a professional visitor

IFEMA MADRID needs to process your personal data in order to allow you to access the trade fair, show or event of your choice. The legal basis that allows IFEMA MADRID to process the data provided is the contractual relationship that arises when purchasing a ticket to attend any trade fair or event, that is, the provision of a service by IFEMA MADRID (Article 6.1(b) GDPR).

We will retain the data provided for as long as necessary to fulfil the contractual relationship and, in any case, for the limitation periods required by current legislation. Three years after the trade fair has been held, if you have not participated in subsequent editions, your data will be blocked in our systems in case it is necessary to comply with any legal obligation or administrative and/or judicial requirement. Subsequently, your data will be retained in anonymised form for purely statistical purposes regarding attendance at the trade fair or event you visited.

Furthermore, we inform you that in certain trade fairs IFEMA MADRID may act as co-organiser together with another entity. In such cases, responsibility for the personal data collected may be shared, although this will always be communicated to the data subject prior to collecting their data.

4.2. Participation in a trade fair or show as an Exhibitor

IFEMA MADRID needs to process the personal data of Exhibitors in order to manage the contractual relationship with the Exhibitors of the corresponding trade fair, show or event. The legal basis that allows the processing of the data provided is the existence of a contractual relationship.

IFEMA MADRID will retain the data provided for as long as necessary to fulfil the contractual relationship and, in any case, for the limitation periods required by current legislation. Three years after the trade fair has been held, if you have not taken part in subsequent editions, your data will be blocked in our systems in case it is necessary to comply with any legal obligation or administrative and/or judicial requirement. Only in the event of the Exhibitor’s express consent may the data be retained for a period of time longer than that legally established. Subsequently, once the limitation periods indicated have elapsed, your data will be retained in anonymised form for purely statistical purposes regarding attendance at the trade fair. In any case, the specific contractual conditions will apply.

4.3. Hybrid and virtual trade fairs

IFEMA MADRID will process the professional and personal data of Exhibitors and professional Visitors in order to manage and enable access to virtual or hybrid trade fairs (in which there are both in-person and virtual meetings) for which they have voluntarily registered via our forms. This will allow access to the fairgrounds on the days on which the trade fair is held in person, as well as access to the platform called LiveConnect.

The legal basis that allows the processing of the data provided within the LiveConnect platform is the contractual relationship that exists with exhibitors and professional visitors, which arises when registering for a trade fair organised by IFEMA MADRID, as well as acceptance of the IFEMA MADRID Platform Terms of Use, which takes place the first time that you access the platform.

Within LiveConnect, users are given the opportunity to interact with other users by participating in forums, accessing the content published by participants (exhibitors, visitors, speakers, general public, depending on the format) or taking part in any activities created for the relevant group.

Once registration has been completed, each user may complete their profile with other personal data such as an alias, telephone number, national ID number, country, date of birth, image (you may voluntarily upload a photo), place of residence and interests. Each user may freely decide what personal information they wish to complete in the profile of the company for which they work and may also decide at any time whether or not to show it to the rest of the LiveConnect members. The platform also allows users to connect with people with whom they share interests and to contact other members by sending messages, if the user freely decides to activate this functionality.

IFEMA MADRID will retain the data provided for as long as necessary to fulfil the contractual relationship and, in any case, for the limitation periods required by current legislation. Three years after the last trade fair in which the Exhibitor or professional Visitor participated, if they have not taken part in subsequent editions, their data and professional information will be blocked in our systems in case it is necessary to comply with any legal obligation or administrative and/or judicial requirement. Only in the event of the express consent of the Exhibitor or professional Visitor (for example, if they have voluntarily subscribed to receive newsletters or regular marketing communications) may the data be retained for a period of time longer than that legally established. Subsequently, once the limitation periods indicated have elapsed, their data will be retained in anonymised form for purely statistical purposes regarding attendance at the trade fair.

In trade fairs where IFEMA MADRID acts as co-organiser together with another entity, responsibility for the personal data collected will be shared, although this will always be communicated to the data subject prior to collecting their data. In any case, the specific contractual conditions will apply.

4.4. Sending newsletters and marketing communications by email or equivalent means

If you have given us your express consent, IFEMA MADRID will periodically send you newsletters and marketing communications by email or equivalent means to inform you about trade fairs, activities, events, special offers, new products and other information related to IFEMA MADRID’s services. By equivalent means we refer to the use of SMS text messages, instant messaging systems and telephone calls. These marketing communications may include advertising content about activities, events and services of IFEMA MADRID or third parties, which may be sponsors, exhibitors, partners or third companies that contract IFEMA MADRID’s digital advertising services, all of them related to the trade fairs, activities and events organised at IFEMA MADRID. Under no circumstances will your data be disclosed to these third companies, sponsors, exhibitors or visitors. Marketing communications and any advertising content will always be sent by IFEMA MADRID.

Sponsors are companies with which IFEMA MADRID has entered into a collaboration agreement with the aim of jointly promoting the Institution or a specific trade fair, event or product. Thanks to these sponsorship agreements, IFEMA MADRID incorporates sponsor content into the event or trade fair communication materials, especially where such content provides benefits for IFEMA MADRID’s customers. A list of our sponsors can be found both on IFEMA MADRID’s corporate website and on the websites of our trade fairs, where the current sponsorships are listed and updated.

These emails or messages will be sent to the address you have provided when giving us your consent to send them, and you may withdraw your consent at any time and free of charge.

The legal basis for the processing of your personal data is your express consent (Article 6.1(a) GDPR), so that IFEMA MADRID may send such communications, and it will remain valid until you withdraw your consent, which you may do at any time.

4.5. Participation in prize draws and contests

IFEMA MADRID will process your personal data for the purpose of managing the prize draw or contest in which you have freely registered. The legal basis that allows IFEMA MADRID to process the data provided is the data subject’s consent obtained upon participation.

IFEMA MADRID will retain the data provided for as long as necessary for the purposes for which they were collected, provided that their deletion is not requested beforehand, and in any case for the limitation periods required by current legislation. The data will be retained in accordance with the conditions or legal bases of each contest that you accepted and, in any case, will be deleted or modified at your request through the procedure for exercising your rights described below.

Furthermore, we inform you that for some contests and prize draws IFEMA MADRID may act as co-organiser together with another entity. In such cases, responsibility for the personal data collected may be shared, although this will always be communicated to the data subject prior to collecting their data.

4.6. Sale of tickets to the general public

IFEMA MADRID will process your personal data for the purpose of managing the sale of tickets to the general public, as well as to allow you to access the trade fair, show or event of your choice.

The legal basis that allows IFEMA MADRID to process the data provided is the contractual relationship that arises when purchasing a ticket to attend any trade fair or event, that is, the provision of a service by IFEMA MADRID (Article 6.1(b) GDPR).

IFEMA MADRID will retain the data provided for as long as necessary to fulfil the contractual relationship and, in any case, for the limitation periods required by current legislation. Three years after the event has been held, if you have not attended any other event, your data will be blocked in our systems in case it is necessary to comply with any legal obligation or administrative and/or judicial requirement. Subsequently, your data will be retained in anonymised form for purely statistical purposes regarding attendance at the event you attended.

If you have given us your express consent to retain your data for a longer period, IFEMA MADRID will retain them until such consent is withdrawn by the data subject through the procedure for exercising rights described below.

4.7. Prospective exhibitors and visitors. Contact data of individuals

IFEMA MADRID processes personal data of prospective exhibitors and visitors to trade fairs in order to manage commercial relationships with these people because they are interested in taking part in trade fairs organised by IFEMA MADRID in the future.

The legal basis that allows IFEMA MADRID to process the data provided is the performance of pre-contractual measures and the legitimate interest in locating and contacting a professional.

IFEMA MADRID will retain the contact data provided for as long as necessary to maintain a pre-contractual relationship with you. They will subsequently be deleted, in general, except where it is necessary to retain them in order to comply with any legal obligation or administrative and/or judicial requirement. If you have given us your express consent to retain your data for a longer period, IFEMA MADRID will retain them until such consent is withdrawn by the data subject through the procedure for exercising rights described below.

4.8. Customer service by telephone

IFEMA MADRID processes personal data of individuals who call the “Customer Service” telephone line in order to handle their enquiries and, where appropriate, to inform them about trade fairs, activities, events, special offers, new products and other information related to IFEMA MADRID’s services and/or its sponsors which we consider relevant for you or that may provide you with some benefit.

The legal basis that allows IFEMA MADRID to process the data provided is its legitimate interest in locating and contacting customers.

IFEMA MADRID will retain the data provided for as long as is strictly necessary for the purposes for which they were collected and, in any case, for the limitation periods required by current legislation. The data will be deleted thereafter, except where it is necessary to retain them in order to comply with any legal obligation or requirement from a public administration.

4.9. Management of incidents and accidents occurring within the fairgrounds (including trade fair workers and visitors)

IFEMA MADRID may process certain personal data (in some cases, sensitive data) in the event that, unfortunately, an incident or accident occurs within the fairgrounds and the injured person requires any type of medical assistance.

In such cases, the legal basis that allows IFEMA MADRID to process the data of the injured person is the controller’s legitimate interest in providing healthcare assistance and managing the consequences of the incident or accident.

In this regard, IFEMA MADRID may be required to provide certain data and information to the relevant insurance companies in order to manage the consequences of the incident and, in some cases, IFEMA MADRID may be required to inform the competent authorities.

IFEMA MADRID will retain the data provided for as long as necessary for the purposes indicated and, in any case, for the limitation periods required by current legislation. The data will be deleted thereafter, except where it is necessary to retain them in order to comply with any legal obligation or administrative and/or judicial requirement.

4.10. Video surveillance

IFEMA MADRID will process personal data of individuals who access the fairgrounds (specifically, their image) in order to guarantee the security of people, property and facilities.

The legal basis that allows IFEMA MADRID to process the data is its legitimate interest in ensuring the security of the fairgrounds, as well as of all individuals present there.

IFEMA MADRID will retain the images captured by video surveillance systems for a maximum period of one (1) month from the moment they are recorded. After this period, they will be deleted in general, except where it is necessary to retain them in order to comply with any legal obligation, administrative and/or judicial requirement, or in exceptional circumstances that justify retaining the recordings for a longer period than that legally established.

4.11. Ambient recordings of events, trade fairs and activities

The entire fairgrounds may be recorded by IFEMA MADRID, media outlets and, where applicable, sponsoring companies of the events held there, for the purpose of capturing ambient images of such events and their activities. It is also reported that these images may be used for promotional and/or commercial purposes by IFEMA MADRID and by the event itself. In relation to sponsors, more details can be found on the website of each event or trade fair.

The images captured, which may include the voice and/or image of attendees, may be processed and disseminated through various channels such as the relevant websites, social media or fan pages, and may be included as content in TV programmes or content for device applications (e.g., smartphones, smartwatches, tablets, 3D glasses). IFEMA MADRID will process the images captured, as data controller, for the purposes indicated on the basis of its legitimate interest.

4.12. Video recording of interviews, sessions, webinars and events

On certain occasions, IFEMA MADRID conducts interviews or organises workshops, webinars and/or sessions in which the participants may be recorded and, therefore, certain identification data such as the image, voice or name of speakers will be processed. The legal basis that allows IFEMA MADRID to process the data provided is the express consent of the speaker. These images will be processed for the purpose previously accepted through the required authorisation for the assignment of image rights in favour of IFEMA MADRID and will be retained in accordance with the authorised conditions. In general, the content generated will form part of IFEMA MADRID’s image gallery as part of its historical documentary archive. In any case, speakers may exercise their rights through the procedure described below.

Additionally, IFEMA MADRID will process the personal data of participants in sessions and/or Committee meetings for the purpose of allowing them to access such sessions and to publish them on social media (specifically on the YouTube channel, although other platforms may be included in the future).

The legal basis that allows IFEMA MADRID to process the data provided is express consent in the case of Committee members and legitimate interest in the case of sessions with participants.

IFEMA MADRID will retain the personal data provided for as long as necessary to provide access to the sessions and while they remain published on social media. Subsequently, the data will be blocked in general, except for the limitation periods for liabilities required by current legislation or by administrative and/or judicial requirements.

4.13. Suppliers

IFEMA MADRID needs to process the personal data of its suppliers in order to manage the contractual relationship with them, this being the legal basis for the processing.

IFEMA MADRID will retain the data provided for as long as the contractual relationship between the parties lasts and, in any case, for the limitation periods required by current legislation. The data will subsequently be retained in blocked form, with access only possible if necessary to comply with any legal obligation or requirement from a public administration.

4.14. Bidders

If IFEMA MADRID launches public tenders for the provision of a service or the purchase of a product, the Institution will process personal data of the employees and contact persons of companies that decide to participate in such tenders.

The purpose of the processing is to manage the pre-contractual relationship in order to determine which company is the winner of the tender and will ultimately provide a service to IFEMA MADRID. The legal basis that allows IFEMA MADRID to process these data is the performance of pre-contractual measures.

The personal data provided will be retained for as long as the pre-contractual relationship lasts and, in any case, for the limitation periods required by current legislation. If the data are no longer necessary for the fulfilment of the purposes for which they were collected, they will be deleted in general, except where it is necessary to retain them in order to comply with any legal obligation or administrative and/or judicial requirement.

However, if express consent has been given in the tender form by the bidder, their data will be retained for a longer period of time in order to consider them as a potential supplier of IFEMA MADRID in the sector corresponding to their professional activity.

With regard to the personal data linked to the company that wins the tender, such data will be retained for as long as the contractual relationship with IFEMA MADRID lasts, plus the corresponding limitation periods in accordance with current legislation.

4.15. Curriculum vitae (CV)

If you have sent us your CV, there is no contractual relationship yet between IFEMA MADRID and yourself.

However, we need the personal data of candidates in order to assess the professional experience of each one and determine whether IFEMA MADRID is interested in their profile for an employment position, as well as for other processes that may arise in the future. The legal basis for the processing is the data subject’s consent and the establishment of a pre-contractual relationship.

For personal data included in CVs, IFEMA MADRID will process the data strictly for the duration of the recruitment process, unless we are expressly authorised to process them for a longer period for future recruitment processes. Therefore, following the principle of data quality, personal data of any candidate not selected will be retained for a maximum period of two (2) years from the end of the recruitment process, provided that we have received express consent to retain them. The CV and any other information collected during the recruitment process for a job position will subsequently be definitively deleted.

4.16. Media and press: accreditation and contacts

IFEMA MADRID will process the personal data of people associated with media and press in order to manage their access to the trade fair, show or event they are going to cover, as well as the contact between the Institution and these media.

The legal basis that allows IFEMA MADRID to process the data provided is the data subject’s consent, IFEMA MADRID’s legitimate interest in ensuring the security of the fairgrounds, as well as the purpose of locating and contacting professionals.

IFEMA MADRID will retain the data provided by people associated with media outlets for as long as their consent is not withdrawn.

4.17. Management of visits

IFEMA MADRID will process the data of individuals who access its premises and offices. The legal basis that allows IFEMA MADRID to process the data is IFEMA MADRID’s legitimate interest in access control and security of the fairgrounds.

IFEMA MADRID will retain the data provided for a maximum period of one (1) month from the visit, unless required by an administrative and/or judicial authority or where there is a legitimate interest in retaining them.

4.18. Profiling

Only if you have given us your express consent, IFEMA MADRID may create profiles of users who register through the forms available on our corporate website, as well as the related websites of trade fairs and events organised by IFEMA MADRID and our social media, in order to use such profiles to offer new products and information related to IFEMA MADRID’s services that we consider relevant to you. These communications will be sent to the address you have provided when giving us your consent to send them, and you may withdraw your consent at any time.

The legal basis for the processing of your personal data is your express consent. The personal data provided for profiling and authorised by the data subject will be retained until you send a request withdrawing your consent to such processing, without prejudice to your right to erasure or objection.

4.19. Whistleblowing channel

IFEMA MADRID undertakes to process, at all times, the personal data received through the Ethics Channel with absolute confidentiality and in accordance with the purposes provided for in its procedure. IFEMA MADRID will adopt the necessary technical and organisational measures to guarantee the security of the data and to prevent their alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed, all in compliance with the provisions of personal data protection legislation. Furthermore, the whistleblower may voluntarily decide whether to preserve his or her anonymity in relation to IFEMA by ticking a box.

The legal basis for the processing of your data lies in compliance with a legal obligation in accordance with Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, Law 2/2023 of 20 February regulating the protection of persons who report regulatory breaches and the fight against corruption, and Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing.

No disclosure of personal data to third parties is envisaged unless the reported facts could be considered a criminal offence or administrative infringement, in which case the matter will be brought before the competent administrative or judicial authority. No international data transfers will be made.

The personal data of the person submitting the communication will be retained in the whistleblowing management system only for the time strictly necessary to decide whether it is appropriate to initiate an investigation into the reported facts. Data processed in the context of investigations will be deleted as soon as such investigations have been completed, unless the measures adopted give rise to administrative or judicial proceedings.

In any case, after a maximum period of six months from the entry of the data, they will be deleted from the whistleblowing management system, unless the purpose of retention is to leave evidence of the functioning of the model for preventing criminal offences by the legal entity. Reports that have not been pursued may only be retained in anonymised form.

You may exercise your data protection rights by sending a communication to the DPO by email or to IFEMA MADRID’s postal address, indicating “Exercise of Rights – Whistleblowing Channel” as the reference.

4.20. Digital platform for the management of Communities and virtual events (LiveConnect)

IFEMA MADRID processes personal data of individuals who voluntarily decide to join its platform for Communities and virtual events, called LiveConnect. Within these Communities, users are given the opportunity to interact with other users by participating in forums, accessing the content published by participants (exhibitors, visitors, speakers, general public, depending on the format) or taking part in any activities created for the relevant group.

The basic data required to join the Communities are first name, surname and email address. Once registration has been completed, each user may complete their profile with other personal data such as an alias, telephone number, national ID number, country, date of birth, image (you may voluntarily upload a photo), place of residence and interests. Each user may freely decide what personal information they wish to complete in their profile and may also decide at any time whether or not to show it to the rest of the Community members. Registering on the LiveConnect platform enables you to connect with people with whom you share interests and to contact other members by sending messages, if you freely decide to activate this functionality. Within some Communities, individuals and companies that form part of them may promote their products and services through the platform, under the conditions explained in the IFEMA MADRID Platform Terms of Use.

The legal basis that allows IFEMA MADRID to process the data provided is each user’s consent when registering in LiveConnect and the contractual relationship that exists with exhibitors and professional visitors when they register for a trade fair organised by IFEMA MADRID. The personal data provided will be retained for as long as you do not withdraw your consent to such processing, without prejudice to your right to erasure or objection and, in any case, for the limitation periods required by current legislation. If you do not wish to receive Community newsletters, you may unsubscribe at any time. In addition, the platform has an implemented push notification system, which can be freely activated and deactivated.

 5 Disclosure of data to third parties

IFEMA MADRID may disclose your personal data to third parties for legitimate reasons and in accordance with the provisions of the applicable regulations. Any disclosure of your data will be subject to your prior knowledge and consent, in which case you will be informed of the recipient’s details, the purpose of the disclosure and any other relevant information in accordance with the applicable regulations. In particular, you will be informed if the recipient is located in a country that does not guarantee an adequate level of protection for your personal data.

Thus, IFEMA MADRID will only disclose personal data when necessary to carry out any of the purposes described in the previous sections or in cases where there is a legal obligation to do so. The following disclosures of data may occur:

a) To public, administrative or judicial authorities, where they so request or where it is necessary to comply with a legal obligation;

b) To payment service providers where necessary (including payment gateways, financial institutions, banks, etc.);

c) To postal service providers where it is necessary to deliver any goods;

Cases in which IFEMA MADRID commissions a third party to process your personal data as part of a service provided between IFEMA MADRID and said third party (e.g. hosting personal data on a server) are not considered data disclosures. These situations will be duly governed by means of the signing of data processing agreements.

You should also note that IFEMA MADRID may be required by law to disclose your personal data to a judicial or administrative authority or for any other legally established reason.

6 International data transfers

We inform you that IFEMA MADRID occasionally performs international data transfers to recipients located in countries outside the European Economic Area (that is, the countries of the European Union plus Liechtenstein, Iceland and Norway).

For the optimal provision of the services offered by IFEMA MADRID, it may be necessary for other third-party service providers of the Institution to access the personal data of our customers (whether exhibitors, professional visitors or members of the general public) and/or users of our websites as data processors. This occurs, for example, when we contract third-party developers, if we need to use service providers that process data outside the European Economic Area or in countries that have not been declared as having an adequate level of protection and, in particular, your data may be disclosed to our IFEMA MADRID Offices assigned to the country of origin of the visitor or exhibitor, which you can find in the “IFEMA MADRID International” area of our website.

In any case, IFEMA MADRID has adopted appropriate safeguards to ensure the security and lawfulness of the processing of your data, as such transfers are based on the signing of Standard Contractual Clauses adopted by the European Commission with all service providers in accordance with the provisions of the GDPR, or where one of the exceptions set out in the regulations applies.

For more information on international data transfers, you can contact the Data Protection Officer (DPO) by email at [email protected].

7 Rights in relation to the processing of your personal data

Legislation recognises several rights in relation to the processing of your personal data. These rights are as follows:

▪ Right to request access to your personal data;

▪ Right to request the rectification of your personal data;

▪ Right to request the erasure of your personal data;

▪ Right to request the restriction of the processing of your personal data;

▪ Right to object to the processing of your personal data;

▪ Right to data portability;

▪ Right not to be subject to decisions based solely on automated processing, including profiling; and

▪ Right to withdraw your consent at any time.

These rights may be exercised by various means:

▪ By sending a written communication indicating “Exercise of Rights” in the subject line, together with your name and ID number, to the following address: Avda. del Partenón 5, 28042 Madrid (Spain).

▪ By sending an email to [email protected].

In any of these cases, and in order to duly protect your personal data, we will need to confirm your identity, either by requesting identification or by confirming some of your personal data.

Likewise, you may request the protection of the Spanish Data Protection Agency in relation to the exercise of your rights listed above via its website https://www.aepd.es/.

8 Security measures

IFEMA MADRID is highly committed to fulfilling its obligation to keep your information secure. To protect your information, we have adopted the legally required security measures, we use the most advanced systems and constantly update them to ensure that no unauthorised access occurs.

9 Record of processing activities

9.1. Prospective Exhibitors and Prospective Visitors “PEX and PVIS”

9.2. Exhibitors and Co-exhibitors

9.3. Former Exhibitors “EX PEX”

9.4. Visitors

9.4.1. General public visitors (non-professionals) – ticket sales

9.4.2. Professional visitors

9.5. Partners / partners / co-organisers of trade fairs

9.6. Speakers at conventions, presentations, concerts and trade fair and musical events organised by IFEMA

9.7. Major Buyers programme and Collector visitors

9.8. List of authorities and VIPs

9.9. “Club Feria Oro Card” and “Club Feria Plata Card”

9.10. Sending invitations by electronic and/or postal means (for trade fairs, award ceremonies, events, conferences, press conferences)

9.11. Sending marketing communications or newsletters

9.12. Prize draws and contests

9.13. Social media (Facebook, Twitter, LinkedIn, YouTube channel, etc.)

9.14. Press accreditation

9.15. Service of foreign delegates and commission agents

9.16. Registration of groups and schools for “School Days”

9.17. Customer service (call centre)

9.18. Management of incidents and accidents (including trade fair workers and visitors)

9.19. Management with insurance companies

9.20. Video surveillance

9.21. Self-protection: use of images for internal purposes

9.22. Lost property, complaints and claims

9.23. Access control to the IFEMA fairgrounds (visits)

9.24. Collaboration with private investigators

9.25. Suppliers / Purchasing

9.26. Bidders

9.27. Employees

9.28. Recruitment / Talent management

9.29. Work-related accidents

9.30. Courtesy Wi-Fi® service

9.31. Recording of sessions

9.32. Profiling

9.33. Ethics Channel

9.34. Photographs / IFEMA events

9.35. Targeted advertising based on customer lists

9.36. Handling data subjects’ rights requests

9.37. Notification and management of security breaches

9.38. Webinars and Committee meetings

9.39. Virtual trade fairs

9.40. Tool for managing minor expenses

9.41. Digital platform for communities and events

9.42. Geolocation and push notifications

9.43. Van geolocation

9.44. ACM: system for translations and subtitles in presentations (pilot project)

Updated in October 2025