1. Introduction

This Privacy Notice ("Notice") establishes how Expo Mundo SA protects the privacy of the personal data of our employees, customers, partners or any other entity with which Expo Mundo SA relates in the context of its activity (interested parties) .

As a building and dismantling of Stands, Expo Mundo S.A needs to collect, use and disclose personal data to carry out functions and business activities, including making and managing travel reservations on behalf of our clients. At Expo Mundo S.A we are committed to protecting the privacy and confidentiality of personal data and to maintaining various physical, electronic and procedural controls to protect personal data in our care.

In the context of the General Data Protection Regulation 2016/679 ("RGPD") Expo Mundo S.A is a "data controller" of any personal information provided to us in the context of our relationship with our customers or other interested parties.

By providing us with personal information, the Parties agree that this Notice will apply to the way we handle your personal data and consent to the collection, use and disclosure of your personal data as detailed in this Notice. If you do not agree to any part of this Notice, you should not provide us with your personal information. Failure to provide us with your personal information or to withdraw the Consent you provided in accordance with this Notice may impair our ability to provide you with services or adversely affect the quality of the services we may provide. For example, most travel bookings must be made under the traveler's full name and must include contact details and appropriate identification (eg passport details). We can not make reservations without this information. There may be cases where local data protection laws impose more restrictive information handling practices than the practices set forth in this Notice. When this occurs, we will adjust our data handling practices to comply with these local data protection laws.

2. What personal data we collect?

Personal data have the meaning given by the local data protection laws and, where the RGPD applies, the meaning given under the RGPD. Personal data usually means data related to a living individual that can be identified from these data; or identifiable from the combination of such data with other available data.
Generally, the type of personal data we collect is what is necessary to facilitate the preparation of the Stands in the communication with the client in order to formalize the existing agreement.
In this regard, we typically process the following types of personal data about our customers:

• • Contact information (such as name, home / mailing address, phone number, email address);
  • Payment data;

When our customers contact us for other purposes, personal data related to those purposes may also be collected. For example, we may collect personal information so that we may contact our customers about a contest / campaign that has signed up or to respond to a question or comment they have sent us. We also collect data necessary for use in the commercial activities of Expo Mundo SA and our related entities, including, for example, the financial details required to process various transactions, video surveillance images used for security purposes or other relevant personal data that you may choose provide us.

We will only collect sensitive data in accordance with local data protection laws with the explicit consent of the data subject and where the data is reasonably necessary or directly related to one or more of our functions or operational activities unless required or authorized do it by law. To the extent permitted or required by local data protection laws, our customers consent that we use and disclose your sensitive data solely for the purpose for which it was collected, unless we subsequently receive your consent for another purpose. We will not use sensitive data for purposes other than those for which it was collected, unless we receive consent for another purpose.

3. How we collect personal data?

We will only collect personal data in accordance with local data protection laws. We generally collect personal data in the context of contacts with our customers. We will collect this data directly from you and you, unless it is unreasonable or impractical to do so.

Generally, this collection will occur when:

• • contact us in person, by phone, letter, e-mail;
  • visit us through our website; or
  • contact us through social networks.

We may also collect personal data when:

• • adjudicate our services;
  • enter contests or register in campaigns / promotions;
  • sign up to receive marketing communications (for example, e-newsletters);
  • request leaflets or other information

Unless you choose to do so under a pseudonym or anonymously, we may also collect personal data from our clients in the context of surveys or when they provide feedback.

In some circumstances, it may be necessary to collect personal data from our customers from third parties. This includes cases where the award is made through one agency and the end customer is another company. When this happens, we have the authority of the person (s) making the award to act on behalf of any other person (s), as well as with the consent of that person to collect, use and disclose personal data of accordance with this Notice. Our clients should inform us immediately if they know that their personal information has been provided to us by another person without their consent or if they have not obtained the consent before providing us with the personal data of another person.

We make every effort to maintain the accuracy and completeness of the personal data we store and to ensure that all personal data is up-to-date. However, any interested party may contact us immediately if there is any change to their personal data or if they are aware that we have inaccurate personal data (see section 13 below). We will not be liable for any losses arising from any inaccurate, inaccurate, defective or incomplete personal information that the Interested Parties, or anyone acting on your behalf, provide to us

4. How do we use personal data?

We will only process personal data when:

• • Consent has been given for such processing (which may be withdrawn at any time, as detailed in section 8 below);
  • Processing is necessary to provide our services;
  • Processing is necessary for compliance with legal obligations; and / or
  • Processing is necessary for our legitimate interests or for any third party receiving personal data (as detailed in sections 5 and 6 below).

When you contact us regarding an inquiry, the purpose for which we collect your personal information is generally to provide you with projects and proposals as requested. However, the purpose of the collection may be different depending on the specific circumstances disclosed in this Notice (eg collection of personal data for participation in a contest, provision of feedback, etc.).

We may share data with our service providers, such as the fairgrounds, and suppliers required for all extra services awarded that may complement a stand in your action, eg computer vendors, furniture suppliers, translators, food products etc. These service providers may also use the personal data as described in their respective privacy policies for additional information that facilitates the provision of the requested services. We recommend that our Customers review the privacy policies of any service providers that are purchased through Expo Mundo S.A. We will provide copies of all relevant terms, conditions and privacy policies of service providers upon request.

For more information about disclosing personal data to service providers located outside the RGPD context, see section 6 below.

If there is any concern regarding the transfer of personal data to a service provider, or if more information is needed, see section 13 of this Notice.

The purposes for which we collect personal data also include:

• identification of fraud or errors;
• legal or regulatory compliance;
• develop and improve our products and services;
• maintaining or improving the relationship with our Clients, namely by creating and maintaining a customer profile that allows the delivery of a service aligned with their preferences;
• market research, customer satisfaction assessment and feedback on the services we provide;
• facilitate the participation of our Clients in loyalty programs;
• internal organization and accounting;
• other purposes as authorized or required by law (eg to prevent a life threatening, health or safety protection, or to enforce the legal rights of Expo Mundo SA).

Where permitted by local data protection laws, we may use personal data to perform marketing activities related to our (and third party) products and services that we believe may be of interest to our Customers, unless they have requested to not receive such data. information. These campaigns may include, but are not limited to, email submissions, digital marketing, and other electronic notifications. Personal data will be used to send digital marketing material (including e-newsletters, e-mail, SMS, MMS and IM) if the Customers have chosen to receive it. Customers can sign up to receive e-newsletters and other promotional / digital marketing materials by following the relevant links on our website or requesting that one of our collaborators do so.

Any individual who does not wish to receive promotional / marketing material from us, participate in market consultations or receive other types of communication should refer to sections 8 and 13 of this Notice.

5. What personal information is disclosed to third parties?

At Expo Mundo S.A we do not sell, rent or exchange personal data. Personal data will only be disclosed to third parties in accordance with the provisions of this Notice and in accordance with local data protection laws (note: in this Notice the reference to "disclosing" includes transferring, verbal or written sharing, sending or making available data to another person or entity).

• Personal data may be disclosed to the following types of third parties:

• contracted entities, suppliers and service providers, including:
• • in each of the circumstances described in section 4 ("How do we use personal data?");
• providers of ICT solutions that support us in delivering products and services (such as any external data-hosting providers we can use);
• publishers, printers and distributors of marketing material;
• organizers of events and exhibitions;
• marketing or market consulting agencies;
• courier services or courier services; and
• external consultants (such as lawyers, accountants, auditors or recruitment consultants);
• any third party to whom we assign or transfer any of our rights or obligations;
• as required or authorized by applicable law, and to comply with the legal obligations of Expo Mundo SA;
• government agencies or public authorities to comply with valid and authorized requests, including court orders or other valid legal process;
• regulatory authorities or law enforcement authorities, including for fraud protection and related security purposes; and
• supervisory agencies where there is suspicion of illegal activity and that the personal data are a necessary part for investigation or denunciation of the subject.

In addition to the above, we will not disclose personal information without consent, unless we believe disclosure is necessary to reduce or prevent a threat to life, health or safety of an individual, public health or safety, or for a particular action (eg prevention, detection, investigation or punishment of criminal offenses), or where such disclosure is authorized or required by law (including applicable data protection / privacy laws).

On websites or social networks of Expo Mundo S.A users may choose to use certain features of third parties with which we associate. These features, which may include social networking tools and geo-localization, are operated by third parties and are clearly identified as such. These third parties may use or share personal data in accordance with their own privacy policies. We recommend consulting third-party privacy policies if you consider these relevant tools.

6. What personal data are transferred abroad?

We may disclose personal information to certain recipients abroad as described below. We will ensure that such international transfers are necessary for the execution of a contract between our Customers and third parties abroad or that are subject to appropriate or adequate safeguards as required by local data protection laws (eg RGPD). We will provide copies of the relevant safeguards documents upon request (see section 13 below).

Personal data may be transferred to an outside entity located in a jurisdiction where it is not possible to ensure a level of data protection equal to that in the RGPD. In such cases, Expo Mundo S.A can not be responsible for how these recipients handle, store and process personal data.

(a) Related entities abroad

Expo Mundo S.A operates a global business, including operations in . Personal data may be disclosed with our related entities abroad for support in performing administrative, consultative or technical services, including the storage and processing of such data.

b) Service providers located abroad

In order to provide our services, it may be necessary for us to disclose personal data to relevant service providers. We deal with many different service providers around the world, so the location of a relevant service provider will depend on the services provided. Relevant service providers will in most cases receive personal data in the country in which they will provide the services or on which their business is based.

(c) Our service providers located abroad

We may also have to disclose personal data to service providers located abroad for the purpose of supporting the provision of services, including the storage and processing of such data. Generally, we will only disclose personal information to such recipients abroad in the context of allowing the provision of administrative and technical services provided on our behalf.

If there is any specific doubt as to where or for whom personal data can be sent, please refer to section 13 of this Notice.

7. Information security

At Expo Mundo S.A we are committed to protecting personal data by implementing and maintaining appropriate technical and organizational control measures to ensure a level of security aligned with the risks related to: accidental or illegal destruction; loss; unauthorized alteration or disclosure; or improper access to personal data transmitted, stored or processed. Expo Mundo S.A regularly monitors and reviews security controls and strives to protect personal data in the same way that it protects sensitive business information.

Expo Mundo S.A destroys or de-characterizes personal data whenever they are no longer relevant to the business or as required by law.

8. Rights to personal data we collect

If any interested party that Expo Mundo S.A has personal data intends to:

• update, modify, delete or obtain a copy of personal data; or
• restrict or prevent Expo Mundo SA from using any personal information, including by withdrawing any consent you have previously given for the processing of such information; or
• obtain a copy of personal information that has been processed on the basis of your consent or as required to perform a contract to which you are party.

you must formally submit the request to Expo Mundo S.A through the contacts identified in section 13 of the Notice. After the request will be given an acknowledgment of the same and information will be given on the deadline within which the information will be made available.

Expo Mundo S.A will make every effort to respond to such requests within a month or less, although it may be necessary to extend this period for complex requests.

In addition, Expo Mundo SA reserves the right to deny access to the Information for any reason permitted by applicable laws. If the request for access or correction of the Information is denied, the reasons for such refusal will always be communicated in writing, unless it is unreasonable to do so or when required by local data protection laws.

All communications related to requests for access to personal data must be made formally in writing to the Data Protection Officer through the contacts indicated in section 13 of the Notice.

Should Expo Mundo S.A be required to restrict or stop using personal data, by withdrawing the consent previously provided for the processing of personal data, the ability to provide services or the quality of services may negatively impact the services.

Personal data shared with Expo Mundo S.A should be accurate and individuals agree to update them whenever necessary. In addition, they agree that in the absence of any update, Expo Mundo SA may assume that the data submitted is correct.

Any individual may at any time request World Expo SA to stop sending marketing communications, and may use the cancellation links provided in the marketing emails or through the contacts indicated in section 13 Notice.

In any of the situations listed above, it may be requested to provide a valid identification means that the applicant proves its identity and thus ensure that Expo Mundo S.A fulfills its security obligations and prevents the unauthorized disclosure of personal data.

Expo Mundo S.A reserves the right to charge a reasonable administrative fee following any anifestly unfounded or excessive requests regarding access to personal data or for any additional copies of personal data requested.

9. Integrações com Redes sociais

Expo Mundo S.A's mobile websites and applications can use social networking features and tools (like "Like" and "Share" buttons), ("RS Resources"). These features are provided and operated by outside companies (for example, Facebook) and also hosted by outside companies or directly on our website or mobile application. RS Resources may collect data related to the page visited on the website / mobile application, the IP address and may set cookies to allow the RS Feature to function properly.

In the event that the user has activated social networking accounts, then they may be able to share data about visiting and using our website or mobile application with social network accounts. Likewise, interactions with RS resource can be registered by third parties. In addition, the external company may share personal data with Expo Mundo SA in accordance with its policies, such as your name, profile picture, friend lists or any other information you have chosen to make available, and we may share data with the outsourced company for the purpose of promoting the marketing directed through the platform of social networks. Users can manage data sharing and turn off targeted marketing in the privacy settings of their social networks.

All interactions with RS Resources are governed by the privacy policy of the external company that provides them. More information on the data protection practices of these companies should be consulted directly in the privacy policy of these companies.

 IP Addresses

When a user accesses the website, uses any mobile device or opens digital matches of Expo Mundo S.A servers can record data regarding the device or the network that the user uses, including the IP address. An IP address is a series of numbers that identify a computer and are usually assigned when you access the Internet.

IP addresses can be used by Expo Mundo S.A to administer systems, investigate security issues and compile anonymous data about the use of the website and / or mobile applications. IP addresses may also be associated with other personal data available about individuals for the purposes described above (for example, to better tailor marketing and advertising materials, provided the user has chosen to receive digital marketing).

10. Tecnologias de rastreamento / Cookies

Expo Mundo S.A may use third party web analytics services on its websites and mobile applications, such as those listed in the "Cookies Policy". Providers of these services may use technologies such as cookies and web beacons to help analyze visitors using websites and applications.

For information on the use of cookies and tracking technologies, please consult the Cookies Policy of Expo Mundo S.A.

11. Websites associados

The websites of Expo Mundo S.A may contain links to third party websites over which Expo Mundo S.A has no control. Expo Mundo S.A is not responsible for the privacy practices or the content of any associated websites. Expo Mundo S.A recommends reading the privacy policies of any associated websites that are visited, as their privacy policies and practices may differ from Expo Mundo S.A.

Feedback / Complaints / Contact

Any questions, comments or complaints about this Notice or about the processing of personal data; if you wish to inform Expo Mundo S.A about a change or correction of personal data; if you wish to receive information about the personal data that are handled by Expo Mundo S.A; or for any claim or comment related to data protection; should be addressed to the Data Protection Officer of Expo Mundo S.A through the contacts below:

Contact name: Noemia Andrade

Email: geral@expomundo.pt

Adress: Variante Industrial da Arrudas dos Vinhos

Nº6 Corredouras, 2630-355

Arrudas dos Vinhos | Portugal

Expo Mundo S.A will respond to any queries or complaints received as soon as possible.

12. Changes to Notice

This Notice may be changed from time to time. If a change to the Notice is made, the revised version will be published and dated on the Expo Mundo S.A website. If it is justified, in addition to updating the Notice, consent may be requested for certain types of treatment.

This Privacy Notice was last updated June 1, 2018

13. Document Control

Revision History / Changes

Distribution List