Privacy Policy

This policy explains how the data collected while you use the Expomatik services (the “Platform”) is processed. For the legal details of how personal data is processed, see the Privacy Notice.

Provided by you: account details (name, company, email address, telephone), invoicing details, your support requests, the lists you upload to the platform and the email content you write.

Generated during use: session and sign-in records, IP address, transaction history (balance movements, lists opened) and sending results (delivered, bounced, replied).

Compiled from public sources: corporate contact details gathered from trade fair organisers’ exhibitor catalogues and from companies’ own websites. The source is shown on every record.

We use the data to provide the service, manage your account, charge for usage, keep the service secure, protect deliverability, improve the service and meet our legal obligations.

We do not sell your data to third parties for marketing, and we never show one member’s list to another member.

No open-tracking pixel is placed in any email sent through the Platform. As a result, neither you nor we can see whether an email was opened; the product simply does not measure it. This is a deliberate choice: we do not think recipients should be tracked without their knowledge, and pixels also lower deliverability. What we do measure: sent, delivered, bounced and replied.

Cookies are used only to keep your session open, for security and to remember your preferences; there are no advertising or profiling cookies. See the Cookie Policy for details.

We use external service providers for sending, email verification, data enrichment and legal-entity checks. These providers process only the data the service requires. Who they are, which data they receive and in which region they process it is set out in a table in the Privacy Notice.

Data in transit is encrypted with TLS. Passwords are stored in an irreversible form; the password of the email account you connect and any service keys are encrypted with AES-256-GCM and decrypted only at the moment of sending; the decrypted value is never written to any log or error message. Access rights are role-based. Even so, we remind you that no transmission over the internet is absolutely secure.

Account data is kept for the duration of your membership; commercial and financial records for the period required by law. Unsubscribe records are kept indefinitely to prevent further sending to the same address. Once the purpose no longer applies, data is deleted, destroyed or anonymised.

Audit records of security-critical operations (who, when, from which IP address) are kept for security and evidential purposes, generally for 1 year and for 3 years in the case of financial, approval and deletion records; to preserve integrity they cannot be altered afterwards, and on a deletion request their personal identifiers are anonymised. See the Privacy Notice for details.

You have the right to access, correct and delete your data and to object to its processing. Send your requests to info@expomatik.com; requests are answered within 30 days at the latest. The full list of rights is in the Privacy Notice. If you are located in the European Union, you may exercise your GDPR rights (access, rectification, erasure, restriction, data portability) through the same address.

This policy may be updated from time to time. The current version is always published on this page and the date at the top is changed. In the event of a material change we inform our members separately.