Who are the recipients of your Personal Data?

Your Personal Data is processed by authorised persons and is not transferred to unauthorised third parties within the meaning of the Applicable Regulations on the protection of personal data. We may share your Data with the following entities:

• Within the relevant Eventeam entity: authorised persons in the sales and marketing department and the support service are required to process your Personal Data and only have access to the Data that is necessary for them to perform their duties. Our employees have signed a specific confidentiality agreement to ensure the security of your Personal Data.
• Our affiliated companies: we may share your Personal Data with our affiliated companies operating in the travel and leisure sector, in particular Eventeam Live and Eventeam Creativ. We may use your Data to send you information about products and services related to leisure and travel that may be of interest to you. In the event that our affiliated companies have access to this Data, they will follow practices that are at least as restrictive as those described in this privacy policy.
• Third-party suppliers: third-party suppliers such as hotels, airlines, car rental companies, venue rental companies and activity providers involved in your travel bookings may process some of your Personal Data. These third-party providers may, subject to your prior consent, contact you to obtain additional information about you, to facilitate your travel booking, or to respond to any feedback you may have provided. These providers are not our processors within the meaning of the applicable data protection regulations.
• Sponsors: sponsors with whom we may jointly offer products or services may need to process some of your Personal Data in order to provide you with optional products and services. When you subscribe to a relevant product or service, you will be informed when one of our sponsors is involved. If you choose to access these optional services, we may, subject to your prior consent, share your Data with these third parties so that they can contact you directly by email or post about their products and services.

In general, we recommend that you consult the privacy policies of third-party providers and sponsors whose products and services you purchase through us.

• Subcontractors: your Data may also be disclosed to third-party service providers (auditors, consultants, lawyers, accountants, etc.) and trusted subcontractors (IT service providers, payment service providers, customer service and marketing providers, polling organisations, etc.) who may access, host and/or process your Personal Data on our behalf, in accordance with our instructions.
• Official Event organisers: official Event organisers (including Olympic committees, national and international sports federations, agencies offering hospitality services) are required to process some of your Personal Data so that we can provide you with our Services. These organisers, as independent data controllers, may use your Data or transfer it between themselves and their affiliates, in accordance with their privacy policies and if necessary and justified by a legal basis. In all cases, you will be informed and must give your consent to the transfer of your data if these organisers are located outside the European Union.
• Third-party websites: if you have been redirected to one of our Sites from a third-party website, we may share Data about you with these referring websites so that they may, subject to your prior consent, contact you directly by email or post about their products and services. We encourage you to review the privacy policies of any website that redirects you to our Sites.

We may also share your Data in response to requests from courts or tribunals, government or law enforcement agencies, or when necessary to comply with applicable laws and procedures.

Finally, we may share anonymous or aggregated data with third parties, including advertisers and investors. For example, we may share with advertisers the number of Visitors to our Sites or the names of the most popular hotels and holiday destinations. This data does not contain any Personal Data and is used to develop our content and Services.

What are your rights regarding your Personal Data?

In accordance with the provisions of the Applicable Regulations on the protection of Personal Data, you have the following rights over your Personal Data, in particular to ensure that we comply with our commitments:

• A right of access: you may submit a request for access and obtain a copy of your Data;
• A right to rectification: you have the option of correcting your Data if it is incorrect or incomplete;
• A right to erasure of your Data, subject to compliance with our legal obligations;
• A right to obtain a copy of the Personal Data we hold in a structured electronic format (right to portability).

You also have the right to object, on legitimate grounds, to the processing of your Data and to the use of this Data for commercial prospecting purposes.

If you have any questions, require further information or wish to make a complaint, please contact us by email at the following address:

Data Protection Officer: dpo@eventeam-group.com

We may ask you to provide proof of identity if your request concerns the exercise of one of the rights granted to you by the Applicable Regulations on the protection of personal data. The exercise of your rights (in particular your rights to object to or delete Data) must also be reconciled with the legal obligations and legitimate interests pursued by Eventeam.

We will respond to your requests within one (1) month of receipt, it being understood that this period may be extended by two (2) months depending on the complexity of your request or in the event of a large number of requests at the same time, provided that we inform you of this.

If you do not receive a response from us within a maximum of three (3) months of your initial request or in the event of a dispute regarding the exercise of your rights, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (French Data Protection Authority).

Security

As Data Controller, we implement reasonable technical and organisational measures in line with the state of the art to ensure the security, integrity and confidentiality of your Personal Data, including to prevent the alteration or damage of your Personal Data or access by unauthorised third parties.

Transfer of your Data to third countries

We do not transfer Personal Data to countries that do not provide an adequate level of protection without first implementing one of the appropriate safeguards provided for by the Applicable Regulations to govern such transfer, in particular by using standard contractual clauses approved by the European Commission.

By way of exception, in the absence of an adequacy decision or appropriate safeguards in accordance with Article 46 of the GDPR, a transfer or set of transfers of personal data to a third country may only take place if one of the conditions set out in Article 49 of the GDPR is met, namely:

• the data subject has given explicit consent to the proposed transfer, after having been informed of the risks that the transfer may entail for them due to the absence of an adequacy decision and appropriate safeguards;
• the transfer is necessary for the performance of a contract between the data subject and the Data Controller or for the implementation of pre-contractual measures taken at the request of the data subject;
• the transfer is necessary for the conclusion or performance of a contract between the Data Controller and another natural or legal person in the interests of the data subject;
• the transfer is necessary for important reasons of public interest;
• the transfer is necessary for the establishment, exercise or defence of legal claims;
• the transfer is necessary to protect the vital interests of the data subject or other persons, where the data subject is physically or legally incapable of giving consent (…).

Links to third-party websites

Our commercial communications may contain links to websites belonging to third parties, including our partners, advertisers and affiliates. If you click on one of these links, please note that these sites have their own privacy policies and that Eventeam cannot be held liable for the terms of these privacy policies.

Processing carried out by Eventeam, as a Processor (within the meaning of the GDPR), on behalf of its Clients

Eventeam may be entrusted by its Clients with the access and/or processing of Personal Data in the context of a given assignment, such as the organisation and management of hospitality events. In this context, Eventeam acts as a ‘Processor’ within the meaning of the GDPR and the Customer as the ‘Controller’. The Customer then determines the means and purposes of the processing(s) it carries out and for which it has requested our Services, and we comply with its instructions.

Changes to this privacy policy

This version of the privacy policy was updated on 01/01/2025.

We may update or adapt this privacy policy in the future. If we do so, we will inform you of any changes to this privacy policy through the usual means of communication.