Privacy and personal data

Updated: January 2026

Personal Data Protection Information Notice

QUINZE MAI (a French single-shareholder simplified joint-stock company with share capital of EUR 3,370,884.00, registered with the Nanterre Trade and Companies Register under number 302 382 858, at 88 Bd de la Villette, 75019 Paris, hereinafter “QUINZE MAI”).

QUINZE MAI is particularly committed to respecting individuals’ privacy and processes personal data in accordance with good confidentiality practices and applicable personal data protection legislation, notably the General Data Protection Regulation No. 2016/679 (the “GDPR”) and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended (the “French Data Protection Act”). This Personal Data Processing Information Notice (the “Notice”) sets out QUINZE MAI’s commitments to protecting the personal data it processes and informs people registering for SSN (hereinafter “you”) about the processing carried out by QUINZE MAI and their rights in this respect.

WHAT IS QUINZE MAI’S ROLE?

The GDPR and the French Data Protection Act define:

• A controller as the person who determines the means and purposes of processing.
• A processor as the person who processes personal data on behalf of the controller.
• Joint controllers as two or more controllers who jointly determine the purposes and means of processing.

QUINZE MAI acts as controller for the personal data collected.

WHAT PERSONAL DATA DOES QUINZE MAI PROCESS, AND FOR WHAT PURPOSES?

QUINZE MAI processes or may process the following categories of personal data:

• Identification data: title, surname, first name, email address and telephone number.
• Professional data: employer’s registered name, business postal address, organisation type, business sector, job title, department, city, postcode, country, involvement in purchasing decisions, purpose of attending the event, and any data requested on the registration form.
• Event-related data: date and time of attendance and information collected when the organiser or an exhibitor scans a visitor badge, particularly at stands, activity areas or speaking sessions visited.
• Reviews and contributions concerning the event.

QUINZE MAI processes these personal data for the following purposes:

• Managing and monitoring the visitor relationship during the event (legal basis: pre-contractual steps or performance of a contract – Terms of Use).
• Business-to-business marketing, communicating content tailored to professional activities or profiles through newsletters, and satisfaction surveys (legal basis: legitimate interest).
• Fraud prevention and ensuring the network and information security of our IT systems (legal basis: legitimate interest).
• Compiling statistics and improving event services (legal basis: legitimate interest).

WHAT IS THE LEGAL BASIS FOR QUINZE MAI’S COLLECTION OF PERSONAL DATA?

Processing is necessary to perform a contract with you (acceptance of the Terms of Use to access SSN; management of the customer relationship).

Processing is based on our legitimate interests (marketing, fraud prevention, ensuring the network and information security of our IT systems, and statistical studies).

DOES QUINZE MAI SHARE YOUR PERSONAL DATA?

Internal recipients: your personal data may be processed by QUINZE MAI employees bound by a confidentiality commitment.

External recipients: QUINZE MAI may also disclose your personal data to the following categories of external recipients.

(*) The list of exhibitors is available on the event website.

QUINZE MAI draws your attention to the following: when visiting an exhibitor’s stand, speaking session or activity at SSN, you may present your badge to be scanned by the exhibitor. By doing so, you consent to your personal data (title, surname, first name, company, city, postcode, country, job title, email and telephone number) being transferred to the exhibitor so that it can send you its news.

QUINZE MAI may record your image and/or voice in photographs, audio or video during the event. Recordings may be made and published, including on social media, on the basis of our legitimate interest. If you do not wish to appear, you may turn off your camera for a remote event or, for an in-person event, sit at the back of the room, avoid group photographs, refrain from signalling to the photographer or camera operator, etc., or ask the photographer to delete the photograph before it is sent to QUINZE MAI. If a photograph is published, you may object at any time by exercising your rights as described in this Notice, and QUINZE MAI will remove or blur the photograph.

You may object at any time to the transfer of your data to exhibitors or partners by exercising your rights as described in this Notice.

To provide its products and services, QUINZE MAI may use service providers located outside the European Union (processors). If data are transferred to a third country whose legislation has not been recognised as providing an adequate level of personal data protection, QUINZE MAI ensures that the necessary safeguards are implemented in accordance with the French Data Protection Act and the GDPR.

HOW DOES QUINZE MAI PROTECT YOUR PERSONAL DATA?

QUINZE MAI uses appropriate technical and organisational measures designed to protect the personal data it processes. As controller, QUINZE MAI takes the necessary steps to ensure the confidentiality and security of personal data in accordance with good confidentiality practices and applicable personal data legislation.

If an incident results in alteration, loss or unauthorised access to your data, QUINZE MAI undertakes to:

• Investigate the causes of the incident.
• Take the necessary measures to limit any adverse effects and harm arising from the incident.
• Notify the competent authority and/or affected individuals as soon as possible where legally required.

Under no circumstances may these commitments be construed as an acknowledgement of fault or liability for the occurrence of the incident.

HOW LONG DOES QUINZE MAI RETAIN YOUR PERSONAL DATA?

Effective data deletion procedures are implemented once the retention or archiving period necessary to fulfil the specified or mandatory purposes has expired. In all cases, data are not retained beyond the period necessary to fulfil the obligations defined when the contract was concluded or imposed by applicable law.

After that period, data may be anonymised and retained for statistical purposes, particularly in aggregated form.

All data necessary to demonstrate compliance with our legal and contractual obligations are retained for five years after the event in an archive database dedicated to managing disputes.

Accounting and invoicing data may be retained for ten years in accordance with applicable statutory retention periods. For marketing purposes, your personal data are retained for three years from collection or your last contact with us, for example attending an event, requesting documentation or clicking a hyperlink in an email sent by QUINZE MAI. Simply opening an email is not considered by QUINZE MAI to be contact initiated by you.

DOES QUINZE MAI USE PROFILING TECHNIQUES?

When sending personalised content, QUINZE MAI may use techniques known as “profiling”, defined as any form of automated processing of personal data that uses those data to evaluate personal aspects relating to an individual, particularly to analyse or predict their personal preferences, interests, financial situation, behaviour, location, health, reliability or movements. We bring together certain personal data about you and analyse them to assess and predict your personal preferences and/or interests. Based on this analysis, we send or display communications and/or content tailored to your interests and needs. You have the right to object to the use of your data for profiling purposes (see below).

WHAT RIGHTS DO YOU HAVE REGARDING YOUR PERSONAL DATA?

Under the French Data Protection Act and the GDPR, you may exercise the following rights at any time:

• Right of access: you may ask QUINZE MAI for information about the processing of your data and a copy of those data.
• Right to rectification: you may request correction of inaccurate data about you where the data held by QUINZE MAI are incorrect or incomplete.
• Right to erasure: you may obtain deletion of your data from QUINZE MAI where one of the grounds provided by law applies (the data are no longer necessary, you withdraw consent for processing based on consent, etc.).
• Right to object: you may object at any time, on grounds relating to your particular situation, to the processing of your data, including for marketing. You may unsubscribe or object to receiving QUINZE MAI’s marketing messages at any time by clicking the “unsubscribe” link in any email or communication it sends you, or emailing data@15-mai.com, particularly if you refuse the transfer of your data to third parties (see recipient categories).
• Right to data portability: you may receive your data in a usable format. This right applies only to data you have provided to QUINZE MAI yourself or that result from your use of its services, where processing is based on your consent or performance of a contract.
• Right to restriction: you may ask QUINZE MAI to suspend processing of your data where one of the grounds provided by law applies (for example, you contest the accuracy of the data).
• Right to object to profiling: you may object to profiling by contacting QUINZE MAI using the details below.

You may send any request concerning your rights and personal data, and decide what happens to your personal data after your death, by contacting the Data Protection Officer at data@15-mai.com.

Finally, you have the right to raise any concerns about the way your personal data are processed with a competent supervisory authority, particularly in the Member State of your habitual residence, workplace or the place where you believe an infringement of your rights has occurred.

In France, the personal data protection authority is the Commission Nationale de l’Informatique et des Libertés (“CNIL”) – 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07.