Privacy Policy

The protection of your personal data is an integral part of the CTN group's values. By using our website (the "Site"), or by visiting our stores, you acknowledge having read this privacy policy ("Privacy Policy") which governs the use and protection of your personal data collected when using our Site, i.e. any information identifying you directly or indirectly ("Data" or "Personal Data"), such as your name, first name, postal address, email, customer number.

1. WHO ARE THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER?

In the context of protecting your Data, the regulations define two key roles:

the data controller who determines the purposes for collecting your Data. This is the company CTN EXHIBITIONS LTD, Private limited Company registered at company number 03379700, whose head office is located at Unit G3a, Halesfield 19, Telford, Shropshire, TF7 4QT (“CTN”, “we”) reachable by telephone at  01952 680 423 and by email by filling out the contact form, reason “Personal Data” located on the contact page of the Site;

the Data Protection Officer who advises and supports our company in our approach to compliance with personal data regulations. The latter can be contacted for any questions relating to your Personal Data by email at the following address: sales@ctn-uk.com or CTN, Unit G3a, Halesfield 19, Telford, Shropshire, TF7 4QT.

2. WHAT PERSONAL DATA DO WE COLLECT?

Your Personal Data is collected, for example, when you enter it in the dedicated forms on the Site or when creating your customer account, when you place an order on the Site, during your exchanges with customer service and more generally when you browse our Site. This concerns the following Personal Data:

The information collected when creating your account such as your last name, first name, postal address, email, and telephone number, your contact preferences regarding subscription to our newsletter;

The information collected when creating your account on the Site such as your last name, first name, email address, password, your contact preferences regarding subscription to our newsletter, your telephone number.

The information necessary for the management and tracking of your orders such as your credit card data for the completion of the transaction, your order history (for example purchase amount, references of the products ordered), your written or telephone exchanges with our customer service;

Information collected during your browsing on the Site such as your browsing history (for example the date, time of connection and/or browsing, pages visited), the type of terminal and browser, your location, browser language, access provider, IP address.

3. WHY DO WE USE YOUR PERSONAL DATA?

We use your Personal Data for several reasons.

Our first objective is of course to always satisfy you as a customer. As such, we collect the majority of your Data as part of your purchasing actions, in particular to deliver your orders and support you in monitoring our relationship.

Furthermore, we may collect your Data when you give us your consent for purposes that will optimize your experience with our brand.

Finally, other Data is collected because it arises from a need for legitimate interest (for example, to allow you to access and use our Site).

Below are further examples of the purposes for which Data is collected:

Legal basis

Purposes of processing

Your act of purchase

Ensure delivery of your ordered products

Manage customer relations and any complaints you may have

Manage requests relating to the exercise of your rights regarding personal data

Your consent

Receive our newsletters and personalized offers via any electronic communication service

Enjoy a personalized browsing experience based on your purchase history and your browsing on the Site

Enjoy our personalized advertising offers on third-party media

Our legitimate interest

Access the Site and its use

Analyze and improve the quality and performance of services

Monitor use of the Site and improve your experience

Preserve our rights

Manage transactions and combat fraud

Develop statistics and segmentations, studies and analyses in order to improve knowledge of our customers

Share data within the CTN group at customer knowledge purposes

4. WHAT RIGHTS DO YOU HAVE REGARDING YOUR DATA?

In accordance with the applicable regulations on personal data, you have and can exercise the following rights with us:

Right of access: you have the right to access the Personal Data that we process;

Right of rectification: you have the right to ask us to rectify your Data if it is inaccurate or incomplete;

Right to erasure: you have the right to ask us to delete your Data (subject to the terms set out in Article 8 below);

Right to object: you have the right to request to no longer receive communications from us by using our online forms, our links at the bottom of our emails.

Right to portability: you have the right to request the portability of your Data, if the conditions for exercising this right are met;

Right to information: you have the right to obtain information on how we process your Data.

In order to exercise your right, you can send us an email by filling out the contact form, under the heading "Personal Data" located on the contact page of the Site or a letter to the following address: Unit G3a, Halesfield 19, Telford, Shropshire, TF7 4QT. We may ask you to provide us with proof of identity.

We undertake to respond to you as soon as possible after our services receive your request.

If you no longer wish to receive our newsletters, you can click on the unsubscribe link at the bottom of our emails, or configure the sending of newsletters in your account, if you have one.

Please note that you can register on a Bloctel telephone canvassing opposition list, and that in this case, we will not contact you on the contact details transmitted to Bloctel.

5. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

Your Data is mainly intended to be used by our services. It may sometimes be communicated to external recipients or to our partners for the reasons described below. In any event, the recipients of your Data are selected by us based on their expertise in terms of Data security and confidentiality. We sign contracts with these recipients to ensure the high level of security of their systems. These are our service providers responsible for optimizing the operation of our sites, ensuring your transactions and payment security, our service providers in charge of logistics (storage, preparation and delivery of your products), or our customer service, our service providers in charge of marketing and commercial studies, or advertising service providers.

Your Data may also be transferred to third parties, (1) subject to your prior consent, for processing in accordance with the purpose or purposes for which your Data was collected or (2) in cases where we are required to do so by law, in the context of legal proceedings, or if it is a mandatory request from a public authority or (3) if we are involved in a merger, acquisition, or asset transfer operation.

6. TRANSFERS OF YOUR PERSONAL DATA OUTSIDE THE EUROPEAN UNION

In the event that Personal Data is transferred to a country outside the European Union, we undertake to take the necessary technical and organizational measures to guarantee the adequate level of security of your Data as if it had remained within the European Union.

We require these recipients of the Data to implement the measures required to ensure the same level of protection as that required by European regulations on personal data, for example by using the European Commission's standard contractual clauses, the binding corporate rules (BCR).

7. SECURITY AND CONFIDENTIALITY OF YOUR PERSONAL DATA

We implement technical and organizational measures to ensure the security, integrity, authenticity and confidentiality of Personal Data. We ensure that our partners maintain a level of protection similar to ours with regard to your Personal Data. We also ensure that your transactions are secure by implementing appropriate measures and combating fraud.

8. FOR HOW LONG IS YOUR PERSONAL DATA KEPT?

We keep your Personal Data for the period strictly necessary to achieve the purposes for which it was collected. Thus, we keep:

your Personal Data, with the exception of your banking data which are collected and processed through our service providers in charge of payment management, for 3 years from the date of the last interaction between us (i.e. your last purchase, the last contact (call, email, chat or social networks) with our customer service, the opening of our newsletter, or failing that the date of creation of the customer profile);

the connection logs which are collected, provided that you consent, using cookies and other trackers used as part of the service, for a period which may not exceed thirteen (13) months. For more details, refer to the "Cookie Policy"

Your banking data is kept by our payment partner, Stripe. When you make online purchases, you will need to enter your bank details in the fields provided for this purpose. If you agree, and in order to facilitate your payments, you may prefer that our payment service provider securely stores your bank details so that they can be used for future purchases. You can then check the box "Save your payment details" when paying for your order. At any time, you can ask us to delete the saved bank card by going to your account, "My payment options" section, or by writing to us via our contact form.

Once your Data has been deleted from our database, some of your Data may be kept in the form of an archive with restricted and strictly limited access for the purposes of meeting our legal, accounting and tax obligations, but also to manage your possible complaints and requests for guarantees within the limits of the applicable limitation periods.

Once your Personal Data is no longer necessary for the purposes or for archiving purposes to meet our legal obligations or for the purposes of the applicable prescription, your Data will be irreversibly anonymized.

At any time, you have the possibility to ask us to delete all or part of your Data, to object to their processing or to request its limitation, in accordance with Article 4 above. In the event of a request to delete your Data, it will be deleted from our database and kept in the form of an archive as indicated above.

9. MISCELLANEOUS

In the event of a change in the terms of processing of your Data, we will update our Privacy Policy, of which you will be informed.

Finally, we inform you that in the event of a complaint relating to the protection of your Personal Data, you can also contact the French supervisory authority, the National Commission for Information Technology and Civil Liberties, whose website is accessible at the following address: https://www.cnil.fr/