PRIVACY AND PERSONAL DATA PROCESSING POLICY
of MOKKA Expo Group LLC

1. Definitions
For the purposes of this Policy:
• "Personal Data" means any information relating to an identified or identifiable individual.
• "User" means an individual, sole proprietor / individual entrepreneur, or representative of a legal entity who uses the Website for its intended purpose, visits the Website, intends to visit an event, registers for an event, or attends an event organized by the Company or with the involvement of the Company, including exhibitions, congress and exhibition events, business programmes, forums, and other related events.
• "Company" means MOKKA Expo Group LLC, located at: 10 Letnikovskaya Street, Building 4, Floor 3, Premises/Room I/80A, Municipal District Zamoskvorechye, Moscow, 115114. The Company determines the purposes of Personal Data processing, the categories of Personal Data processed, and the operations performed with Personal Data.
• "Website" means the websites operated by or for the Company, including: https://www.hhexpo.ru, https://big-horeca.ru/, https://justhoreca.ru/, https://www.zooexpoplace.ru, https://outdoordacha.ru/, https://styhome.ru/ and https://housetechexpo.ru/.
• "Processing" means any operation or set of operations performed with Personal Data, whether by automated means or otherwise, including collection, recording, organization, structuring, storage, updating, retrieval, use, transfer, disclosure, access, anonymization, restriction, deletion, or destruction.
• "Transfer" means disclosure of Personal Data to a specified person or to a specified group of persons.
• "Restriction" means the temporary suspension of Processing, except where Processing is necessary to clarify or update Personal Data.
• "Deletion" or "Destruction" means actions after which the content of Personal Data can no longer be restored in the relevant information system or material media containing Personal Data are destroyed.
2. Scope and Purpose of this Policy
This Policy sets out the principles and conditions under which the Company processes Personal Data, the measures applied to protect Personal Data, and the rights and obligations of the Company and Users in relation to such Processing.
This Policy applies to Personal Data of Users processed by the Company for the provision of services, the organization and administration of events, and other interaction with Users.
This Policy does not apply to the processing of Personal Data of employees, job applicants, or individual counterparties of the Company where such processing is governed by separate internal documents or agreements.
The purpose of this Policy is to protect Users' Personal Data against unauthorized access, disclosure, alteration, loss, or destruction. Personal Data is treated as confidential information.
3. Principles of Personal Data Processing
The Company processes Personal Data on the basis of the following principles:
• Processing is carried out lawfully, fairly, and transparently;
• Processing is limited to specific, explicit, and legitimate purposes;
• Personal Data is not processed in a manner incompatible with the purposes for which it was collected;
• Personal Data processed by the Company must be relevant to the purposes of Processing;
• The content and volume of Personal Data processed must correspond to the stated purposes of Processing and must not be excessive;
• The Company takes reasonable steps to ensure that Personal Data is accurate, sufficient, and, where necessary, kept up to date in relation to the purposes of Processing;
• Personal Data is stored in a form that allows identification of the User for no longer than is necessary for the purposes of Processing, unless a longer retention period is required or permitted by applicable law or by an agreement with the User;
• Personal Data is deleted, destroyed, or anonymized once the purposes of Processing have been achieved or when there is no further need to achieve those purposes, unless otherwise required or permitted by applicable law.
4. Purposes of Processing and Categories of Personal Data
The Company processes Personal Data only for specific, predetermined, and lawful purposes. Depending on the relevant purpose, Processing may include collection, recording, organization, storage, updating, retrieval, use, transfer, anonymization, restriction, deletion, and destruction of Personal Data.
The Company may process Personal Data for the following purposes:
• conclusion and performance of civil law contracts and other agreements;
• organization, administration, and conduct of exhibitions, congress and exhibition events, business programmes, forums, and other related events;
• registration of Users for exhibitions, events, business programmes, and related activities;
• issuance of badges, passes, access documents, and other event materials;
• press accreditation and communication with media representatives;
• ensuring the safety and security of persons participating in or attending events;
• providing Users with information about exhibitions, events, and related services;
• sending advertising, marketing, and informational materials, where the User has given consent or where such communication is otherwise permitted by applicable law;
• receiving and processing feedback after exhibitions and events;
• responding to enquiries, applications, and requests submitted by Users through the Website, by email, at an event, or by other communication channels;
• controlling and improving the quality of services and the operation of the Website;
• collecting and analysing anonymized information about Users' actions on the Website to improve the Website and its content;
• other purposes that are compatible with the purposes listed above and are not prohibited by applicable law.
The categories of Personal Data that may be processed include:
• surname / family name, first name, and middle name or patronymic, where applicable;
• contact telephone number;
• email address and/or corporate email address;
• position / job title;
• place of work, company name, or sole proprietor / individual entrepreneur name;
• company details or business identification details provided by the User;
• city;
• other information provided by the User when registering for an event, submitting an application, contacting the Company, entering into an agreement, or communicating with Company representatives.
5. Sources and Methods of Processing
Personal Data may be obtained directly from the User or from third parties that are counterparties, partners, or service providers of the Company in connection with the organization and administration of events or related services.
The Company may process Personal Data by automated means, without automated means, or by a combination of both. Processing may include collection, recording, organization, storage, updating, retrieval, use, transfer, anonymization, restriction, deletion, and destruction.
Automated Processing may be carried out using information systems and computing equipment used by the Company or by processors acting on behalf of the Company.
Access to information systems containing Personal Data is granted only to authorized personnel and only to the extent necessary for the performance of their duties.
Processing of Personal Data for the purpose of promoting the Company's services, events, and related activities through direct communications is carried out only where the User has given prior consent or where such communications are otherwise permitted by applicable law. The Company will stop such Processing upon the User's request or withdrawal of consent.
By using the Website, registering on the Website, registering for an exhibition or event, submitting an application through the Website, providing information to Company personnel at an exhibition or event, sending Personal Data by email, providing a business card, or entering into an agreement with the Company, the User provides Personal Data for the purposes described in this Policy.
Where consent is required, the User may provide consent by clicking buttons such as "Submit", "Register", "Sign Up", "Apply", "Accredit", "Agree", or by ticking the relevant checkbox on the Website or during event registration.
Consent to receive advertising, marketing, and informational materials may be given through the relevant checkbox, consent form, online registration form, application form, email communication, contract, or other clear action by the User. Such communications may be sent by email, SMS, messenger services, push notifications, social media, telephone calls, or other communication channels indicated by the User.
The User may withdraw consent to the Processing of Personal Data or opt out of advertising, marketing, and informational communications at any time by contacting the Company at marketing@mayer.ru or by using the unsubscribe link included in the relevant message, where available.
6. Rights and Obligations of the Company and the User
6.1. The Company may:
• verify the accuracy of Personal Data provided by the User and request information or documents confirming such accuracy where reasonably necessary;
• use Personal Data for the purposes set out in this Policy;
• engage third parties to process Personal Data on behalf of the Company under appropriate contractual arrangements;
• determine internal procedures for Personal Data Processing and adopt internal documents governing the protection of Personal Data;
• send advertising, marketing, and informational materials about exhibitions, congress and exhibition events, business programmes, forums, and related activities organized by the Company, where the User has consented to such communications or where they are otherwise permitted by applicable law;
• exercise other rights permitted by applicable law.
6.2. The Company must:
• process Personal Data only for the purposes specified in this Policy or otherwise communicated to the User;
• provide the User, upon request, with information concerning the Processing of their Personal Data, unless there is a lawful basis to refuse such request;
• correct, update, restrict, delete, or destroy Personal Data at the User's request where the data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of Processing;
• inform the User about Processing where required and where Personal Data has not been obtained directly from the User;
• explain the consequences of failing to provide Personal Data or providing inaccurate Personal Data where such consequences are relevant;
• delete or ensure the deletion of Personal Data once the purposes of Processing have been achieved, unless further retention is required or permitted by applicable law;
• take reasonable legal, organizational, and technical measures to protect Personal Data against unauthorized access, alteration, disclosure, loss, or destruction.
6.3. The User should:
• provide accurate and complete Personal Data necessary for the purposes described in this Policy;
• inform the Company of changes to Personal Data where such changes may affect the Company's ability to provide services, organize access to events, communicate with the User, or perform an agreement;
• avoid providing Personal Data of another individual without proper authorization or lawful basis.
6.4. The User has the right to:
• receive information about the Personal Data processed by the Company;
• access their Personal Data, including receiving a copy of records containing their Personal Data, subject to applicable restrictions;
• request correction, updating, restriction, deletion, or destruction of their Personal Data where the data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of Processing;
• withdraw consent to the Processing of Personal Data;
• opt out of receiving advertising, marketing, and informational communications;
• take lawful measures to protect their rights and interests in relation to Personal Data Processing;
• contact the Company regarding Personal Data Processing at marketing@mayer.ru.
7. Retention of Personal Data
The Company keeps records of Personal Data processed in information systems and, where applicable, on material media, including paper documents.
Personal Data is stored in conditions designed to ensure its security and to protect it against unauthorized access, alteration, copying, disclosure, restriction, deletion, destruction, and other unauthorized actions.
Unless a shorter or longer period is required or permitted by applicable law, contract, or the purposes of Processing, the Company stores information about the User for seven (7) years from the date on which such information is received.
Where the Company receives a request to withdraw consent, the Company ceases Processing based on that consent from the date specified in the request, but not earlier than the date following actual receipt of the request, unless continued Processing is required or permitted by applicable law.
Personal Data is deleted, destroyed, or anonymized where the purposes of Processing have been achieved or where there is no longer any need to process the data, unless retention is required or permitted by applicable law.
8. Accuracy and Updating of Personal Data
The Company takes reasonable steps to maintain the accuracy and relevance of Personal Data processed in relation to Users.
The User should promptly notify the Company of any change in Personal Data that may affect the relationship between the User and the Company, including changes to name, contact details, place of work, company name, or job title.
Updates or changes to Personal Data are made on the basis of the User's request and, where necessary, supporting information or documents confirming such changes.
If the Company identifies inaccurate or incomplete Personal Data, it may make the necessary corrections or additions on the basis of information available to it.
To ensure the accuracy of Personal Data, the Company may periodically verify Personal Data against available records and documents.
9. Processing by Employees and Third Parties
Personal Data may be processed by authorized employees of the Company and by third parties processing Personal Data on behalf of the Company under contractual arrangements.
Where Personal Data is transferred or access is provided to a third party, the Company takes reasonable steps to ensure that such transfer or access is limited to the relevant purpose and that the third party is subject to confidentiality and security obligations.
Contracts with processors or other third parties may define the categories of Personal Data processed, the operations to be performed, the purposes of Processing, confidentiality obligations, security requirements, and the obligation to process Personal Data only in accordance with the Company's instructions.
Where Personal Data is transferred across borders, the Company will take measures required by applicable law to protect the Personal Data during such transfer.
10. Requests and Communications from Users
Users may send requests or communications relating to Personal Data Processing to the Company in writing or electronically, including by email to marketing@mayer.ru.
The Company will review requests and provide information or take other measures within the scope and time limits required by applicable law.
Where the Company receives a valid request, it will provide information in the form in which the request was submitted, unless the User requests another form and such form is reasonably available.
Information provided by the Company in response to a request must not disclose Personal Data of other Users or third parties, unless there is a lawful basis for such disclosure.
The Company may refuse to satisfy a request, in whole or in part, where it has a lawful basis to do so. In such case, the Company will provide a reasoned response where required by applicable law.
11. Security of Personal Data
When processing Personal Data, the Company applies legal, organizational, and technical measures designed to protect Personal Data against unauthorized or accidental access, destruction, alteration, restriction, copying, disclosure, distribution, and other unauthorized actions.
Security of Personal Data may be ensured, in particular, by:
• appointing a person responsible for organizing Personal Data Processing;
• adopting documents that define the Company's approach to Personal Data Processing and protection;
• applying organizational and technical measures appropriate to the nature and scope of Personal Data Processing;
• detecting unauthorized access to Personal Data and taking measures to prevent, detect, and respond to computer incidents affecting information systems containing Personal Data;
• establishing access rules for Personal Data and maintaining records of actions performed with Personal Data in information systems where appropriate;
• conducting internal controls relating to Personal Data Processing and protection;
• informing and training employees involved in Personal Data Processing on confidentiality, security, and internal requirements.
The Company does not process biometric Personal Data of Users.
Protection of Personal Data processed without automated means is ensured through organizational measures applicable to documents and other material media containing Personal Data.
12. Confidentiality
Personal Data received by the Company is confidential information.
The Company maintains the confidentiality of Personal Data processed in the course of its activities.
Employees of the Company and other persons involved in Personal Data Processing are informed of the need to maintain confidentiality of Personal Data.
Where the User has made their Personal Data, or part of it, publicly available, the Company is not responsible for further processing of such publicly available data by third parties outside the Company's control.
13. Responsibility
The Company and its employees may be responsible for breaches of Personal Data protection requirements and this Policy to the extent provided by applicable law.
Employees who process Personal Data are responsible for maintaining the confidentiality of Personal Data that becomes known to them in connection with the performance of their duties.
14. Changes to this Policy
The Company may amend or supplement this Policy from time to time.
The current version of this Policy is published on the Website and becomes effective upon publication, unless another effective date is specified in the updated version.
Matters not addressed in this Policy will be resolved in accordance with applicable law.

ИНН 7705783547
ОГРН 5077746336058
ОКВЭД 82.30

info@hhexpo.ru
+7 (495) 363-50-32

Россия, 115114, г. Москва, Летниковская ул., д. 10, стр. 4, БЦ «Святогор 4»

ООО "МОККА Экспо Групп"