Trade Fair Follow-up

Terms

The service

Processing terms (GDPR Art. 28)

You accept these in your account before you upload any lead.

  1. You (the exhibitor) are the controller of your leads' personal data. We are your processor under Article 28 GDPR: we process the leads you upload only to prepare the follow-up e-mails and exports you ask for in this tool, on your documented instructions — the settings and buttons you use here.
  2. Subject matter: the contacts your team collected at the trade fair you name in your order. Types of data: name, e-mail address, company, job title, country, language, the consent record and your notes. Data subjects: visitors to your stand. Duration: until you delete them, and at the latest 90 days after the fair ends; the uploaded original file is deleted 30 days after upload.
  3. You confirm that you collected these contacts lawfully and that the consent column or note you give us is a true record of what each person agreed to. We do not check consent beyond what your file says; we refuse to prepare an e-mail for any lead without a consent record.
  4. Only the person who runs this service has access to your leads, and only to fix a problem you report; that person is bound to confidentiality. We do not use your leads for anything else, do not contact them and do not sell or share them.
  5. Sub-processors: Cloudflare (hosting), Supabase (database and file storage, EU region Frankfurt), Sendinblue SAS / Brevo (our e-mails to you only — never to your leads). Your e-mail texts, but no lead data, go to OpenRouter, Inc. (USA) and the model provider it routes to, only providers that retain nothing, when you ask for a translation. We tell you before adding or replacing one, and you may object.
  6. Measures (Article 32): encrypted connections, a private database reachable only by our server, files in private storage, sign-in by one-time e-mail link, every request scoped to your company, rate limits.
  7. We help you answer a lead's request (access, correction, deletion): you can correct or delete any lead yourself in the tool at any time; deleting your account deletes everything at once. We tell you without undue delay if we learn of a breach affecting your leads.
  8. At the end of the service we delete all leads and files (see above); nothing is returned except the exports you downloaded. You may ask us for the information needed to show these terms are kept.
  9. These terms were written by us, not drafted by a lawyer. They are meant to cover what Article 28(3) GDPR requires; if your company needs its own data processing agreement, send it to us before uploading leads. This is not legal advice.

Version 2026-10-03. These terms were not drafted by a lawyer. Questions: tradefair@vitersoft.com.