This personal data protection policy (hereinafter the “Policy”) sets out the practices and conditions under which W.S.N DÉVELOPPEMENT (a simplified joint-stock company (SAS) with share capital of €1,799,073, registered with the Paris Trade and Companies Register under number 410 589 337, whose registered office is located at 12 rue Philippe de Girard – 75010 Paris) (hereinafter the “Company”), acting as data controller, uses your personal data in connection with the management and organisation of its trade shows and the operation of the website saloninternationaldelalingerie.com (hereinafter the “Site”).

W.S.N DEVELOPPEMENT is a subsidiary of the COMEXPOSIUM Group. The COMEXPOSIUM Group pays particular attention to the protection of personal data. This is an essential condition for the relationship of trust that the COMEXPOSIUM Group seeks to establish with all those who entrust their personal data to it.

Personal data (hereinafter referred to as “Data”) means any information relating to an identified or identifiable natural person; an “identifiable natural person” is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific elements relating to their physical, physiological, genetic, mental, economic, cultural or social identity, as this term is defined by the applicable regulations.

 

1 – WHAT DATA IS COLLECTED?

Depending on how you interact with the Company and the purpose of this interaction, the Company may collect the following Data:

– Data relating to your identity: this Data includes, in particular, your surname, first name, professional email address, postal address, telephone number, company, position, business sector and profile (buyer, exhibitor, brand, service provider, speaker, applicant, etc.).

 

– Data relating to your information requests submitted via the contact form: we process your personal data in order to respond to requests submitted via the contact form available on the Site. This data includes your surname, company, email address, telephone number and profile (visitor, exhibitor, applicant, supplier, journalist, other), as well as the information contained in the message you write.

 

– Data relating to partnership requests: in connection with partnership requests submitted via the dedicated form available on the Site and on the trade show websites, we collect information relating to your identity through your surname and first name, position, company (corporate name), postal address, email address and telephone number.
– Data relating to your registration and access badge management: in connection with your registration for one of our trade shows as a professional visitor, buyer or accredited person (press, VIP buyer), we process your surname, first name, email address, company, position, city, country, as well as any information required to issue your access badge.

 

– Data relating to your participation as an exhibitor or brand: in connection with your participation as an exhibitor, listed brand or agency representing a brand, we process information relating to your company (corporate name, legal form, SIRET number, address, website), your identity, your participation agreement, the management of your exhibitor area, your placement preferences and your participation history.
– Data relating to your orders and invoicing: this Data refers to all information required to complete your order and issue the corresponding accounting documents, including information relating to the payment method used, the details and date of the order, as well as exchanges with the sales relations department.

 

– Data relating to the connection to and use of your personal account: when you have an exhibitor personal account or a visitor account on one of our platforms (in particular wsn.community or register.premiere-classe.com), this Data refers to all information required for your connection (username, password), your choices and preferences, as well as the history of the events you have attended.

– Data relating to your registration for the professional newsletter: when you wish to receive our communications and news relating to the trade shows, we collect your email address.

– Data relating to professional appointment scheduling between buyers and brands: as part of the professional networking tools available during our trade shows, we process the information required for the planning and management of B2B appointments (identity of participants, company, position, available time slots, history of networking activities).

– Data relating to accreditation requests (press and VIP buyers): as part of the processing of accreditation requests, we collect your surname, first name, title, organisation or affiliated media outlet, email address, telephone number, and any document proving your professional status.
– Data relating to browsing on the Site: this Data concerns the way in which the user browses the Site. It may include the IP address, screen resolution, browser used, browsing time, search history, operating system used, language and pages viewed.

– Data relating to the use of social networks: when you interact with social media features integrated into the Site or WSN Développement platforms, these interactions are governed by the personal data protection policies of these social networks, which we invite you to consult.
– Data relating to the measurement of our email audience: when we send you communications by email, a measurement tag (“tracking pixel”) may enable us to determine whether the message has been opened, when it was opened and on which device, as well as the content with which you interact (opening, reading, engagement, device data and date of the last opened email).

 

Certain processing activities are based on your consent. When these tags are used to measure and analyse the performance of our communications, adapt their content, frequency, timing or sending channel, personalise the messages and invitations we send you, create profiles for targeting purposes on other media, or detect and analyse potential fraudulent uses, they are based on your consent, which you may withdraw at any time.

Other processing activities do not require your consent. Some tags are strictly necessary and do not require your consent: those used for the security and authentication of our communications; those measuring email openings solely for deliverability purposes, limited to the management of inactive recipients on our mailing lists, for transactional emails or emails requested by you; and the retention of an opening record when it helps demonstrate compliance with a legal information obligation.

2 – HOW IS YOUR DATA COLLECTED?

2.1. Depending on how you interact with the Company, the latter may collect your Data according to the methods described below.

2.2. The Company collects your Data directly from you when, in particular, you complete a registration or contact form, place an order, submit an accreditation or participation request, or contact the Company directly (for example, by sending an email).

2.3. The Company collects your Data indirectly when you browse the Site through the use of cookies and tags under the conditions described below. The Company also collects your Data through third parties, including social networks, when you use an account held with such third parties to connect to or register for an event.

The Company uses tags (“tracking pixels”) integrated into its emails, enabling it to measure and analyse your interactions with these communications. The purposes pursued, the data processed and the applicable legal basis for each purpose are specified below.

2.4. When you provide Data to the Company, you are responsible for ensuring that it is accurate and complete. Where applicable, you must update it.

2.5. Data identified as mandatory is necessary for the management of your request and to enable the Company to provide you with the requested services. The mandatory or optional nature of the Data is indicated on the relevant forms, as well as any potential consequences in the event of failure to provide such information.

3 – WHY IS YOUR DATA COLLECTED?

3.1. Your Data is subject to processing activities carried out by the Company for the various purposes described below, both in connection with your use of the Site and your participation in events organised by the Company or entrusted to it for organisation.

To facilitate understanding of the processing activities carried out, the table below provides a summary of the purposes pursued, the categories of Data concerned and the associated legal bases.

Purpose	Data category	Legal basis
Management of requests you submit	Data relating to your identity (surname, first name, email address, telephone number), content of the request.	The Company’s legitimate interest in responding to your request or for pre-contractual reasons.
Management of your participation in events (visitors, exhibitors) and creation of your account	Data relating to your identity (surname, first name, email address, telephone number, position, company).	The performance of pre-contractual and/or contractual measures relating to the participation and registration of the data subject in the event organised by the Company.
Improvement of the quality and organisation of events	Data relating to your identity (position, company, email address, telephone number), data relating to account connection and use.	The Company’s legitimate interest in improving the quality of the events organised.
Sending information and commercial communications – professional prospects	Identity data (surname, first name), professional data (position, company), contact data (email address, telephone number).	The Company’s legitimate interest in promoting its events to a professional audience.
Sending information and commercial communications – individual prospects	Identity data (surname, first name), contact data (email address, telephone number).	Your consent.
Sending communications regarding other Group entities or partners	Data relating to your identity (surname, first name, position, company, email address, telephone number).	Your consent and/or legitimate interest.
Personalisation and optimisation of your experience and the performance of statistical analyses	Data relating to browsing, data relating to account connection and use (preferences, etc.).	Your consent and/or legitimate interest.

Pixels exempt from consent

Some tags integrated into our emails do not require your consent, provided that they are strictly necessary for the provision of a service you have requested or for compliance with our obligations.

These include pixels used for security and authentication purposes (for example, to confirm the opening of an email containing a one-time code), pixels related to our transactional communications (order confirmation, sending of badges/tickets/invitations), those required to comply with a legal obligation or to establish evidence (update of our terms and conditions, notification of a security incident), as well as pixels used solely to measure the deliverability of our communications and identify inactive recipients.

For this last purpose, only the date of the last day of opening is retained, excluding the time, and it is overwritten each time a new opening occurs.

These tags are not used for any other purpose, in particular audience measurement, personalisation or targeting, which require your prior consent.

 

4 – WHO ARE YOUR DATA DISCLOSED TO?

4.1. Your Data is processed by the Company’s internal teams. In addition, only service providers and their duly authorised personnel are permitted to access your Data, in view of the specific services entrusted to them, which they perform exclusively on behalf of the Company, in strict compliance with obligations relating in particular to security and confidentiality. 

4.2. Where your consent is required, your Data may be shared with entities of the Comexposium Group, to which the Company belongs, as well as with partners, in particular so that they may send you information and updates regarding the services and products they offer.

4.3. Where required by applicable regulations, the Company may disclose your Data to organisations and authorities legally authorised to access it (in particular judicial and administrative authorities).

 

5 – HOW IS YOUR DATA PROTECTED?

 

The Company takes all appropriate precautions to preserve the security, integrity and confidentiality of your Data, in particular to prevent it from being altered, damaged, disclosed, or accessed by unauthorised third parties.

The Company also implements internal procedures to ensure the security of your Data when it is used, transferred or stored. It also ensures that these procedures are maintained in order to guarantee their compliance with applicable regulations.

These security procedures include, in particular:

– the commitment by service providers and processors used by the Company, in particular to make the Site and its platforms available or to process your requests, to comply with their contractual obligations in order to ensure adequate protection of the Data to which they have access;

– limiting access to your Data to employees who are subject to confidentiality obligations, whose access is necessary to provide the services requested and/or justified by the performance of their duties;

– storing your Personal Data on servers providing all necessary security guarantees. Data is retained, in accordance with Applicable Regulations, for the periods specified in Article 7.

6 – WHAT ARE YOUR RIGHTS?

 

6.1. In accordance with applicable regulations and under the conditions defined therein, you may exercise the following rights at any time:

– Right of access: you may request information from the Company regarding the processing activities carried out on your Data and obtain a copy of such Data.

– Right to rectification: you may request the correction of inaccurate Data relating to you where the Data held by the Company is incorrect or incomplete.

– Right to erasure (right to be forgotten): you have the right to request the deletion of your Data by the Company where one of the grounds provided for by applicable regulations applies (Data no longer necessary, withdrawal of your consent for processing activities based on consent, etc.).

– Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your Data, including for direct marketing purposes.

– With regard to the measurement of our email audience, which is based on your consent, you may withdraw your consent at any time, in accordance with the procedures indicated in our emails or by contacting us using the contact details provided in this article.

– Right to data portability: you have the right to receive your Data in a structured, commonly used, machine-readable and usable format. This right only applies to Data that you have provided to the Company or that results from your use of its services, where such Data is processed based on your consent or the performance of a contract.

– Right to restriction of processing: you may request that the Company suspend the processing of your Data where one of the grounds provided for by applicable regulations applies (dispute regarding the accuracy of the Data, unlawful processing, etc.).

Right not to be subject to automated decision-making: You may refuse a decision made solely by a machine, without human intervention.

Right to define post-mortem directives: Under the conditions defined by applicable regulations, you also have the right to define general or specific instructions regarding the handling of your Personal Data after your death.

6.2. When your Data is processed based on your consent, you may withdraw your consent at any time. However, you are informed that processing activities carried out prior to such withdrawal shall remain valid.

6.3. Your data protection rights

You may exercise your rights by contacting the Company:
– Via our online form

– By email at the following address: [email protected] or by post at the following address: WSN Développement – Personal Data Department, 12 rue Philippe de Girard – 75010 Paris.

You are also informed that, in certain cases, the features of the Sites enable you to view and modify the Data you have provided to the Company.

 

You are informed that the Company will respond to your request as soon as possible and within one month (except in the event of a complex request, which may extend the processing period) from receipt of your request.

The Company pays the utmost attention to your Data. However, if you consider that the processing of your Data infringes your rights, you have the right to lodge a complaint with the French Data Protection Authority (Commission nationale de l’informatique et des libertés – CNIL) at the following address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

7 – HOW LONG DO WE RETAIN YOUR DATA?

7.1. The Company retains your Data for a period that does not exceed the time necessary for the purposes set out in this Policy. After this period, your Data may be archived in order to comply with the legal obligations to which the Company is subject, or deleted.

7.2. Data used to establish proof of a right or contract, or retained by the Company to comply with a legal obligation, is archived in accordance with applicable provisions.

7.3. The Company takes into account the seasonal nature of the events it organises. Accordingly, you will find below the retention periods defined according to the type of processing and the category of data subject concerned.

 

Data category	Retention period
Prospect Data	3 years after the last contact
Customer Data	For the entire duration of the service agreement, as well as 5 years following its termination.
Data relating to your orders and invoicing	Invoicing data is retained for 10 years in accordance with the provisions of the French Commercial Code.
Data relating to requests you submit when contacting us	The period required to process and close the request.
Data relating to your registration for the professional newsletter	3 years from the date of the last active contact or until withdrawal of consent or exercise of the right to object.
Data relating to browsing on the Site (cookies and trackers subject to consent)	A maximum of 13 months from the date the tracker is placed.
Data relating to the use of social networks	Data processed via social networks is subject to the retention policies of these platforms.
Banking data (card number and validity date)	13 months following the debit date (15 months for deferred debit cards).

 

 

8 – DATA TRANSFERS

For the hosting and processing of your Data, the Company favours means located within the territory of the European Union. If a transfer of Data to a country outside the European Union were nevertheless to be envisaged, the Company undertakes to ensure that appropriate technical and organisational measures are implemented.

9 – AMENDMENT OF THE DATA PROTECTION POLICY

9.1. Any amendment to this Policy made by the Company will be updated on the Site.

9.2. Users are invited to consult this Policy regularly in order to stay informed of any updates or changes.

9.3. If any provision of this Policy is declared null and void or contrary to applicable regulations, it shall be deemed unwritten but shall not affect the validity of the other provisions of the Policy.