1. Data Controller
The controller of personal data processed via the website www.neoexpo.pl is:
Neo Expo Poland Sp. z o.o.
ul. Romana Maya 1
61-371 Poznań
Poland
Registered in the National Court Register (KRS)
District Court Poznań – Nowe Miasto i Wilda
VIII Commercial Division of the National Court Register
KRS: 0000534059
NIP: 7773244239
Contact email: europe@neoexpo.pl
2. Scope of Data Collection
We may collect the following personal data:
-
Full name
-
Email address
-
Phone number (optional)
-
Company name (if provided)
-
IP address
-
Browser and device data
-
Website usage data (cookies / analytics)
3. Legal Basis for Processing (Art. 6 GDPR)
We process personal data based on:
-
Consent (Art. 6(1)(a))
-
Contract performance (Art. 6(1)(b))
-
Legal obligation (Art. 6(1)(c))
-
Legitimate interest (Art. 6(1)(f)) – marketing, security, service improvement
4. Purposes of Processing
Personal data may be processed for:
-
Providing services available via the Website
-
Handling inquiries via forms or email
-
Newsletter distribution
-
Marketing communication
-
Website analytics and optimization
-
Legal compliance and security
5. Data Retention
Data is stored only as long as necessary for:
-
Contract performance
-
Legal obligations
-
Legitimate business interests
-
Until consent withdrawal (for marketing/newsletter)
6. Data Recipients
Data may be shared with:
-
IT and hosting providers
-
Marketing and analytics providers
-
CRM and email systems
-
Legal authorities if legally required
All partners operate under GDPR-compliant agreements.
7. International Data Transfers
If data is transferred outside the EEA, we ensure protection via:
-
EU Standard Contractual Clauses
-
Adequacy decisions
-
Other GDPR-approved safeguards
8. Data Subject Rights
You have the right to:
-
Access personal data
-
Rectify inaccurate data
-
Request deletion (“right to be forgotten”)
-
Restrict processing
-
Data portability
-
Object to processing
-
Withdraw consent at any time
Contact: europe@neoexpo.pl
You may also file a complaint with the Polish Data Protection Authority (UODO).
9. Data Security
We implement:
-
Encryption
-
Secure hosting infrastructure
-
Access control
-
Monitoring and security audits
10. Automated Decision Making
We do not perform automated decision-making or profiling producing legal effects.
11. Policy Updates
We may update this policy periodically. Updates will be published on the Website
.png)