Privacy Policy

Last updated: 2026-09-23

1. Introduction

China Workshop ("the Expo", "we", "us", "our") is an annual offline trade exhibition combining online registration with in-person, offline attendance, serving European and global travel suppliers, buyers, and travel-industry professionals. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you register for an account, log in, register for, or attend the Expo, and describes the rights you may exercise. This website's servers are located in Hong Kong and Singapore. We are committed to complying with the EU General Data Protection Regulation (GDPR), Singapore's Personal Data Protection Act (PDPA), and, for users in mainland China, the relevant requirements of the Personal Information Protection Law (PIPL). Please read this Policy carefully before using this website; your continued use indicates that you have understood and agree to it.

2. Information We Collect

We collect the following categories of information: ・Account information: email address, password (stored encrypted; we cannot view it in plain text), nickname, and language preference ・Registration information: your selected attendee identity (e.g. exhibitor, buyer representative, media, guest, visitor, etc.), your survey/questionnaire answers, and the price items and add-on services you select ・On-site contact details: name, job title, phone number, and email of the on-site contact(s) you select from your saved contacts, used to generate your registrant details and to send you on-site notices ・Company profile: where your selected identity is linked to a company role (exhibitor / buyer representative), the company name, place of registration, business licence or trade registration documents (such as a French KBIS extract), and trade qualifications you provide ・Handwritten signature: for certain identities (such as exhibitors), a handwritten signature captured at the time of registration and submitted together with that registration ・Badge and on-site verification data: your contact's photo, job title, and company name, used to generate your electronic badge for on-site check-in and identity verification ・Accommodation and itinerary data: where your selected price item includes hotel accommodation, we may collect your room type, roommate information, and check-in remarks ・Uploaded files: business licence, qualification documents, and materials required for add-on services (private files are only accessible via temporary signed links and are never exposed as raw, permanent URLs) ・Usage data: login time, login IP address, and registration/in-platform message records ・Data collected via cookies and similar technologies — see Section 6

3. How We Use Your Information and Legal Basis

We process your personal information based on the following purposes and legal bases: ・Processing your Expo registration, verifying your eligibility to attend, generating your electronic badge, and arranging on-site check-in and related on-site services — necessary for performance of your registration contract with us ・Sending registration-related notification emails (verification codes, registration confirmation, itinerary and on-site notices) — necessary for contract performance and our legitimate interests ・Where you choose, at registration, to also apply for a CW Club platform membership role (Supplier or Buyer), using the company information you submitted to process that application — based on your explicit choice ・Sending Expo-related marketing or bulk emails, only after obtaining your explicit consent — based on your consent ・Preventing fraud and safeguarding the Expo and account security — based on our legitimate interests ・Complying with applicable laws and regulations — necessary for compliance with a legal obligation For processing based on consent, you may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Sharing and Third-Party Providers

We do not sell your personal information. To complete your Expo registration and on-site organization, we share necessary information with the following types of third-party providers and partners, and require them to protect your information to a standard no lower than this Policy: ・Cloud hosting and object storage providers (for data hosting and file storage) ・Email delivery providers (for verification codes, system notices, and Expo bulk emails you have authorized) ・Translation service providers (to generate multilingual content) ・Where your selected price item includes hotel accommodation, the necessary guest information with our partner hotel, to arrange your stay ・Where an add-on service you purchase involves on-site materials or inclusion in an event directory/guidebook, the relevant information as described for that service Before sending you targeted marketing or bulk emails, we ensure that we have obtained your explicit authorization; you may withdraw this authorization at any time via account settings or by contacting us. Outside the above, we share your information only where required by law or necessary to protect the Expo's or others' lawful rights.

5. Cross-Border Data Transfer

This website's servers are located in Hong Kong and Singapore, and your personal information may be transferred to and processed in these locations. As the Expo is held in person at an offline venue, your name, company information, and badge information may be used on-site at the venue for check-in and identity verification; the specific date and location of the Expo are as published on this website. If you are located in the EU/European Economic Area: when your personal information is transferred outside the EEA, we will rely on [Safeguard mechanism to be confirmed by the legal team, e.g. EU Standard Contractual Clauses (SCCs)] or another GDPR-recognized transfer mechanism. If you are located in mainland China: cross-border transfer of your personal information will follow the requirements of the Personal Information Protection Law via [Compliance route to be confirmed by the legal team, e.g. filing of the Standard Contract for cross-border transfer of personal information, or a security assessment, depending on the scale of processing]. To learn more about our cross-border transfer safeguards or request a copy, please contact us using the details in Section 12.

6. Cookies and Similar Technologies

We use cookies and similar technologies for purposes necessary to this website's core functions, such as keeping you logged in and remembering your language preference. Non-essential cookies (e.g., analytics or personalized recommendations) are only enabled with your consent. Our dedicated cookie preference center is under development; until it launches, this website uses only essential cookies (for example, to maintain your login session and language preference) and does not use non-essential cookies. Once the preference center is live, you will be able to manage your preferences at any time, and declining non-essential cookies will not affect core functionality.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Policy, for a specific retention period of [To be confirmed by the business/legal team, e.g. deletion or anonymization within X days of account closure]. Where laws or regulations require a longer retention period (e.g., for financial or audit-related records), we retain the relevant data for that statutory period. After account closure, we delete or anonymize your personal information within a reasonable timeframe, except where the law requires otherwise.

8. Your Rights

Under the GDPR, PDPA, and other applicable data protection laws, you may have the following rights: ・Right of access: request a copy of the personal information we hold about you ・Right to rectification: request correction of inaccurate or incomplete information ・Right to erasure: request deletion of your personal information where the legal conditions are met ・Right to withdraw consent: withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal ・Right to data portability: receive the data you provided to us in a structured, commonly used, machine-readable format ・Right to object / restrict processing: object to our processing of your information, or request that we restrict processing, in certain circumstances ・Right to lodge a complaint: lodge a complaint with the competent data protection supervisory authority in your jurisdiction To exercise any of these rights, please contact us using the details in Section 12. We will respond within the timeframe required by applicable law, and for account security we may need to verify your identity first.

9. Children's Privacy

The Expo provides registration and attendance services to company representatives, media professionals, and industry guests engaged in the travel trade and related industries, and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information without a guardian's consent, please notify us using the details in Section 12 and we will promptly delete the relevant information.

10. Data Security

We use industry-standard technical and organizational measures to protect your personal information, including: encrypted password storage, access to private files such as company documents and handwritten signatures only via temporary signed links, role-based access controls, and encryption in transit. Despite these measures, please understand that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data security incident that may affect your rights, we will notify you and the relevant regulatory authorities as required by applicable law.

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in the Expo's arrangements or applicable law. Updated versions will be posted with a revised "Last updated" date on this page. Where a change is material — for example, to our processing purposes or the scope of information sharing — we will give reasonable additional notice (such as an in-app or email notification) and, where necessary, seek your renewed consent.

12. Contact Us

If you have any questions about this Policy, or wish to exercise the rights described herein, please contact us as follows: Data protection contact email: contact@idtravelpro.com Company name and registered address: ID TRAVEL PRO, SAS, 179, rue de Courcelles, 75017 Paris, France EU/UK representative (if applicable): [To be confirmed by the legal team whether such a representative must be appointed; contact details to be added if so] We will respond to your request within the timeframe required by applicable law.