The General Data Protection Regulation (GDPR) of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Act CXII of 2011 on the Right to Information Self-Determination and Freedom of Information (hereinafter:"Infotv.")

The name of the data controller is Cecz Közép-európai Kft. Represented by Zheng Shaomin and Wang Dongxia

Company's registered office: 1152 Bp., Szentmihályi út 171. Tax number: 23462098-2-42

Email: info@cecz.eu - (blocked from spam) Telephone (not fixed line): 06 1 414 7288

Website: www.chinabrandfair.eu (not accessible for the blind and partially sighted)

The Company does not employ a Data Protection Officer.

The Company processes the personal data referred to in point (a), the categories of data subjects concerned, the purposes and the duration of the processing

Profiling: the Company does not use profiling data processing The Company uses cookies on its website.

During visits to the Website, one or more cookies - small files containing a series of characters - are sent to the visitor's computer, which will allow the visitor's browser(s) to be uniquely identified. These cookies are provided by Google and are used through the Google Adwords system. These cookies are only used when you visit certain sub-sites

to the visitor's computer, so they only store the fact and time of the visit to the sub-page in question and no other information.

The use of the cookies sent in this way is as follows: third-party service providers, including Google, use these cookies to store if the user has previously visited the advertiser's website and, on this basis, to display advertisements to the user on the websites of partners of third-party service providers, including Google. Users can opt out of Google cookies by going to the Google ads opt-out page. (You can also indicate to users that you can opt out of cookies from third-party service providers by going to the Network Advertising Initiative opt-out page.)

Applied cookies:

- Analytics, tracking cookie

- Tracking through the site

- Log-in, user ID session cookie

The "Help" function in the menu bar of most browsers provides information about whether the browser is running

Most browsers in the browser will provide a tool to help you find out how to disable cookies, accept new cookies, or

how to instruct your browser to set a new cookie, or

how to turn off other cookies.

The Company collects personal data on its website. For the purposes of marketing enquiries, the Company reserves the right to provide personal data to third parties, our partners, which it has engaged. However, such data may only and exclusively be used to perform the services indicated by the Company.

1. Legal basis for processing

The provision of the data is voluntary, the data subject is not obliged to give his/her consent to the processing of the data, however, he/she acknowledges that without the provision of the data the Company cannot register, initiate or continue the business relationship with the event.

Withdrawal of consent to data processing shall not affect the lawfulness of the previous processing.

1. Scope, purpose and duration of data processing

The data processing covers all customers, visitors, exhibitors, guests, partners,

data (data subjects).

The Company shall process personal data solely for the purpose of providing the services necessary for the organisation and management of the event to the data subjects.

Principles and methods of data processing

1. The Company shall process only the data specified by law or provided by the data subjects for the purposes set out below. The scope of the personal data processed shall be proportionate to the purposes of the processing and shall not go beyond those purposes.

2.In all cases where the Company intends to use the personal data for a purpose other than that for which they were originally collected, the Company shall inform the data subject and obtain his or her prior explicit consent or give him or her the opportunity to oppose such use.

The Company does not control the personal data provided to it. The correctness of the personal data provided shall be the sole responsibility of the person providing it.

4. The personal data of a person under the age of 16 may be processed only with the consent of the person who has parental authority over him or her. The Company is not in a position to verify the eligibility of the person giving consent or the content of his or her declaration, and the person concerned or the person who has parental authority over him or her guarantees that the consent is in accordance with the law. In the absence of a consent, the Company shall process the data of natural persons under the age of 16 only on the basis of a legal provision and where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company and where the Company has a legitimate interest.
5. An exception to this provision is the use of data in aggregate statistical form, which shall not include any other form of data that can identify the data subject and shall therefore not constitute processing or transfer of data.

In the event of unlawful or fraudulent use of personal data or in the event of a criminal offence or system attack committed by the user, the data controller is entitled to delete the data immediately upon termination of the user's registration, but is also entitled to retain the data for the duration of the proceedings in the event of suspected criminal offences or civil liability.

In certain cases, the Company may make available to third parties the personal data of the data subject that is accessible to third parties, in response to a formal judicial or police request, legal proceedings, or due to a reasonable suspicion of infringement of copyright, property rights or other rights, or due to a threat to the interests of the Company, the provision of the service, etc.

The Company shall notify the data subject and all those to whom it has previously disclosed the personal data for processing purposes of the rectification, restriction or deletion of the personal data processed by it. The notification may be omitted if this does not harm the legitimate interests of the data subject in relation to the purposes of the processing.

The Company shall process personal data only for specified purposes, for the exercise of a right and for the performance of an obligation. At all stages of the processing, the purpose of the processing shall be fulfilled. Data is collected and processed fairly and lawfully. The Company shall endeavour to process only personal data that is necessary for the purposes for which it is processed and is adequate for the purposes for which it is processed. Personal data shall only be processed to the extent and for the duration necessary to achieve the purpose.

The Company processes the following data:

Type of data: the first and last name, email address, telephone number of the individual registered for the event

Purpose, reason for processing: the efficient management of guest registration for the exhibition, the pre-registration of guest-exhibitor meetings at the event

Duration of processing: 3 months after the end of the event

Type of data:the name and surname, email address, telephone number of the individual representing the partner-entrepreneur registered for the event

Purpose, reason for processing: the efficient management of guest registration for the exhibition, the pre-registration of guest-exhibitor meetings at the event

Duration of processing: 3 months after the end of the event

Type of data: registered individual entrepreneur's name and surname, email address, telephone number

Purpose, reason for processing: efficient registration, pre-registration of guest-exhibitor meetings at the event

Duration of processing: 3 months after the end of the event

Type of data: surveillance of public spaces - security camera

Purpose, reason for processing: on the basis of voluntary consent and legitimate interest of the enterprise, protection of persons and property

Duration of processing: 3 days

Type of data: photographs and videos of customers and guests on the company's website (full photos without permission, close-ups with permission)

Purpose, reason for processing: on the basis of voluntary consent, documentation, presentation of the activity to interested parties,

Duration of processing: until individual consent of clients is withdrawn

Type of data: name, email address, date of subscription to the newsletter, providing information

Purpose, reason for processing: on the basis of voluntary consent, maintaining contact from the date of subscription until cancellation or, if the email sent for data accuracy purposes remains without an active response, until 3 months after the date of sending the data accuracy email

Type of data: personal data of the users of the Company's social networking site (not a closed group) Facebook/Google+/Twitter/Pinterest/Youtube/Instagram/Linkedin etc., and the names of all data subjects who voluntarily registered on Facebook/Google+/Twitter/Pinterest/Youtube/Instagram/Linkedin etc. social networking sites and "liked" the Company's website, the provision of information and contact details on the source of the data, the processing thereof and the method and legal basis of the transfer can be obtained from the social networking site concerned.

Type of data: the public profile of the user is carried out on social networking sites, so the duration of the processing, the way in which the data are processed, and the possibilities for deleting and modifying the data are governed by the rules of the social networking site concerned

Type of data: personal data of the users of the Company's social networking sites (closed group) Facebook/Google+/ Twitter/Pinterest/ Youtube/Instagram/ Linkedin etc., the name of the user who voluntarily registered on the social networking sites Facebook/Google+/ Twitter/Pinterest/Youtube/Instagram/L linkedin etc., and the public profile picture of the user for all data subjects who voluntarily registered on the Company's social networking sites Facebook/Google+/ Twitter/ Pinterest/Youtube/Instagram/L linkedin etc. and requested to be included in the closed group, to provide them with additional information, to keep in touch with them : from the acceptance of the registration to the exit or exclusion.

Purpose, reason for processing: The processing of data takes place in a closed group on the social networking site, so the duration of the processing, the way it is carried out and the possibility of deleting and modifying the data are governed by the rules of the first fixed post of the group concerned

Type of data: personal data of proxies: name, address of a person acting for and on behalf of the data subject in relation to an event, the management of the data subject's affairs on the basis of voluntary consent for a period of 5 years from the date of the management of the affairs

Type of data: name and number of identification cards

Type of data: name, address, identification and number of the person lodging the liability claim/complaint, name and number of his/her identification cards legal proceedings based on the assessment of the claim/complaint

Duration of processing: 5 years from the date of sending the reply

Type of data: press representatives - name, telephone number, e-mail address on the basis of voluntary consent, contact 1 year from the end of the professional relationship

Type of data: personal data provided in the guestbook - name, address, telephone number, email address no data management, only storage of data on the basis of voluntary consent, possibility to express opinions

Duration of processing: until the guestbook is discarded

The provision of the data required for registration is a condition of participation in the event, and the service cannot be used if the data is not provided or if the data is subsequently requested to be deleted. The provision of the other data is voluntary, and the withdrawal of consent to data processing does not affect the lawfulness of previous data processing.

III. Scope of data controllers

Persons entitled to process data are employees/agents of the COMPANY who are entitled to do so.

1. Transmission and processing of data

The COMPANY is entitled to use a data processor for the performance of its activities. Processors shall not take decisions on their own and shall be entitled to act only in accordance with the contract concluded with the controller and the instructions received. The Company, as controller, shall monitor the work of the processors.

Data processing subcontarctors:

Gemeric Consulting Korlátolt Felelősségű Társaság (2636 Tésa. Petőfi utca 16.)

Tárhely.Eu Kft. 1144, Budapest Ormánság u. 4.

The Company forwards no data.

The concerned can request the deletion of data at any time.

The right to restriction of processing: in certain cases, the data subject may request the restriction of the processing of his or her personal data - for example, in an unclear, contentious situation or if the processing is no longer necessary but the data subject wishes to have it restricted.

Right to data portability: the data subject may request to receive data processed about him or her in a structured, commonly used, machine-readable format (e.g. .doc, .pdf, etc.) and has the right to have these data transferred to another controller without hindrance from the original controller. In other words, it makes it easier for the data subject to transfer his or her personal data from one controller to another.

The right to object: the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data for a specified reason. This typically occurs where the data subject has not given consent to the processing of his or her personal data.

Right to withdraw consent: the data subject has the right to withdraw his or her consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to its withdrawal.

The data subject may request the exercise of his or her rights in relation to his or her data by means of a statement addressed to the controller orally, in writing, by postal address, e-mail address, website, preferably in the forum through which the data were lawfully received by the controller. In the case of an oral request, a record shall be kept and a copy shall be given to the data subject.

If the data subject has a complaint about the processing, it is recommended that it is first made to the controller (i.e. the Company). The controller has 25 calendar days to investigate and respond to the complaint. If you still have a complaint, you can take it to court (the competent court in your place of residence) or to the National Authority for Data Protection and Freedom of Information at the following contact details:

postal address: 1530 Budapest, Pf.: 5.

address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

E-mail: ugyfelszolgalat@naih.hu URL http://naih.hu coordinates: N 47°30'56''; E 18°59'57''

The Company may amend this Information, the current version of which is available on the Company's website.

Budapest, 16 March 2023.

Cecz Central European Ltd.