COOKIE POLICY - EASYFAIRS INTERNATIONAL SA/NV AND AFFILIATES

1 INTRODUCTION

1.1 Easyfairs International SA/NV is the parent company of a group of companies active in event and exhibition organisation and venue management. 1.2 Easyfairs International SA/NV and its affiliated entities take the protection of the personal information of their clients (exhibitors, participants, visitors, organisers, readers, advertisers, members, partners, potential partners, etc.) very seriously. Therefore, the personal data of our customers is kept securely and treated with the utmost care, and this is also true for our suppliers, other interested parties and any third parties who contact us. 1.3 In processing your personal data, Easyfairs International SA/NV/NV and its affiliated entities respect your right to privacy and will only process your personal information in accordance with applicable data protection rules, including the General Data Protection Regulation (Regulation 2016/679) ("GDPR") and national data protection laws. 1.4 This Privacy Policy (the "Policy") explains (i) how we process the personal information we collect about you, (ii) how you can instruct us if you prefer to limit the use of that information and (iii) what procedures we have in place to safeguard your privacy.

2 CONTACT DETAILS OF THE CONTROLLER

2.1 Your personal data will be processed by the following Joint Controllers: - Easyfairs Iberia SL - Easyfairs UK Ltd. - Easyfairs Oriex SAS (Fr) - Easyfairs Northeral SPRL (B) - Easyfairs Italia SRL - Clinical Events Ltd. - Easyfairs International SA/NV, having its registered office at Rue Saint-Lambert 135, 1200 Woluwe-Saint-Lambert, Belgium (together "Easyfairs" or "we" or "us"). 2.2 For further information about this Privacy Policy or in the event that you wish to exercise the rights mentioned in paragraph 10, you may contact our Privacy Officer either by post to C/Edgar Neville, 27 (ant. General Moscardó) -28020 Madrid, or by e-mail to privacyES@easyfairs.com, following the procedure described in paragraph 10. 2.3 You may also contact the group Data Protection Officer by e-mail to dpo@easyfairs.com.

3 WHAT IS THE PURPOSE AND LEGAL BASIS OF THE DATA PROCESSING?

- Functional cookies, strictly necessary for the operation of this website 3.1. We process functional cookies for the realisation of our legitimate interests (Article 6 (1) (f) GDPR), in particular for the following purposes: (a) to measure and optimise the performance of our website; (b) to provide a high-performance and tailored interface for visitors to our digital platforms; (c) to use your Personal Data within aggregated or anonymised models to establish market analysis, for financial management, marketing or reporting purposes or to perform big data or any other type of analysis; In the cases mentioned above, we always strive to maintain a fair balance between the need to process your Personal Data and the preservation of your rights and freedoms, including respect for your privacy. - Non-functional Cookies 3.2. We process non-functional Cookies with your consent (Article 6 (1) (a) (a) GDPR), in particular for the following purposes: (a) to evaluate and optimise the quality of our online services and the usability of our digital platforms to provide you with the best possible experience; (b) to establish customer or prospect segments or marketing profiles, e.g. for targeted marketing;

4 RIGHTS IN RELATION TO YOUR PERSONAL DATA

As a data subject, you may exercise the rights set out below in relation to your Personal Data. To exercise these rights, please contact the local Privacy Officer by post or email to the addresses set out in section 2.2, enclosing a copy of your identity card, passport or other valid means of identification and stating your exact request. 4.1. Right of access. If permitted by applicable law, you may obtain information about whether we process your Personal Data and, where applicable, access your Personal Data. 4.2. Right of rectification. You may rectify any inaccuracies and/or complete any of your Personal Data free of charge. 4.3. Right to withdraw consent. You may, if permitted by applicable law, withdraw your consent to the processing of your Personal Data at any time. Such withdrawal will not affect the lawfulness of the processing carried out on the basis of your prior consent. Please note that if you withdraw your consent you may not be able to benefit from certain services for which the processing of your Personal Data is essential. 4.4. Right of erasure. You may request that we delete your Personal Data and we will do so unless there is a legal reason not to do so. For example, there may be a legal obligation that we have to comply with or the retention may be necessary for us to comply with our legal obligations. 4.5. Right to lodge a complaint with the supervisory authority. You have the right to contact the relevant supervisory authority in the event that you believe that we are unlawfully processing your Personal Data.

5 LINK TO OTHER WEBSITES

We are not responsible for the privacy policies and practices of other websites even if you have accessed them through links on our Website. We recommend that you check the policy of each website you visit and contact the owner or operator of that website if you are in any doubt.

6 CHANGES IN OUR POLICY

We reserve the right to change this Policy without prior notice. If we do so, we will indicate the changes on this page. It is your responsibility to check the Policy each time you submit information to us or place an order.