Privacy Policy

PRIVACY POLICY

Last updated: 5 May 2026

This Privacy Policy describes how Verticom (hereinafter "we", "us", "the company", "the organizer"), as the organizer of the ECDM Expo, collects, uses and protects your personal data through the website ecdmexpo.com and the B2B Meetings platform.

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR – Regulation EU 2016/679) and Greek law (Law 4624/2019).

1. DATA CONTROLLER

Company name: Verticom

Address: Evmolpidon 23, 118 54, Athens, Greece

Phone: +30 210 924 55 77

Email: info@verticom.gr

2. WHAT DATA WE COLLECT

When you register for the B2B Meetings platform, we collect the following data:

Required information:

- Full name

- Email address

- Contact phone number

- Company and job title

- Participant type (visitor, exhibitor, speaker, sponsor, etc.)

Optional information:

- Profile photo

- Short biography (bio)

- Industry and company size

- Country and company website

- LinkedIn profile

- Interests and matchmaking preferences

Data from Google Sign-In:

If you choose to sign in via Google, we receive from Google only the following information: name, email address, and (optionally) profile picture. We do not access your Gmail, contacts, Drive, or any other personal data on Google.

Technical data:

- IP address

- Device type and browser

- Cookies and similar technologies

- Platform usage data (logs, login times)

3. PURPOSES OF DATA PROCESSING

We process your data for the following purposes:

a) Providing the B2B Meetings service:

- Creating and managing your account

- Displaying your profile in the participants directory (if you allow it)

- Managing meeting requests (B2B meetings)

- Operating the smart matchmaking system based on interests

- Enabling communication between participants (messages, marketplace)

b) Communication:

- Sending updates regarding your meetings

- Sending email/SMS messages for confirmations, reminders, schedule changes

- Responding to inquiries and providing user support

c) Security and platform improvement:

- Identity verification via email verification and 4-digit PIN

- Fraud prevention and protection against malicious activities

- Usage analysis to improve user experience

d) Compliance with legal obligations:

- Maintaining tax and accounting records

- Responding to public authority requests (when required by law)

4. LEGAL BASIS FOR PROCESSING

The processing of your data is based on the following GDPR legal bases:

- Article 6(1)(b) – Contract performance: for providing the B2B Meetings service you requested upon registration.

- Article 6(1)(a) – Consent: for displaying your profile in the directory and for any marketing communications.

- Article 6(1)(f) – Legitimate interests: for platform security and fraud prevention.

- Article 6(1)(c) – Legal obligation: for record-keeping where required by law.

5. DATA SHARING WITH THIRD PARTIES

We do not sell your data. Your data may be shared on a limited basis with:

- Other event participants: only profile information that you have chosen to display publicly in the directory. When you accept a meeting, the other participant will also see your email and phone number.

- Service providers (data processors): hosting (Plesk hosting), email/SMS providers, authentication services (Google OAuth for those who choose Google sign-in). All are contractually committed to GDPR compliance.

- Public authorities: only when required by law.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers (e.g., Google) may process data outside the European Union. In such cases, transfers are made with the necessary safeguards (Standard Contractual Clauses, EU-US Data Privacy Framework).

7. RETENTION PERIOD

Your data is retained as follows:

- User account: for as long as your account is active.

- Meeting data: up to 2 years after the end of the exhibition for statistical and historical purposes.

- Accounting/tax records: 5 years as required by Greek law.

- Accounts without email verification: automatically deleted after 24 hours.

You can request deletion of your account at any time.

8. YOUR RIGHTS

Under GDPR, you have the following rights:

- Right of access: to receive a copy of your data.

- Right to rectification: to request correction of inaccurate data.

- Right to erasure ("right to be forgotten"): to request deletion of your data.

- Right to restriction: to request restriction of processing.

- Right to data portability: to receive your data in a structured format.

- Right to object: to object to specific processing activities.

- Right to withdraw consent: where processing is based on consent.

Most of these rights can be exercised directly through your account in the "Account" section. Alternatively, send an email to info@verticom.gr.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. COOKIES

Our website uses cookies for:

- Functional cookies: essential for login and platform usage.

- Performance cookies: to understand platform usage.

- Preference cookies: to store your choices (language, default tab).

You can manage cookies through your browser settings.

10. SECURITY

We implement technical and organizational measures to protect your data:

- Encrypted data transmission (HTTPS/SSL)

- Identity verification via email and 4-digit PIN

- Magic link tokens with limited time validity (1 day)

- Restricted data access only for authorized personnel

- Regular security system updates and Web Application Firewall

11. CHANGES TO THIS POLICY

This Privacy Policy may be updated periodically. Significant changes will be announced on our website and (where required) via email.

12. CONTACT

For any questions regarding this Policy or the processing of your data:

Verticom

Evmolpidon 23, 118 54, Athens, Greece

Phone: +30 210 924 55 77

Email: info@verticom.gr