PRIVACY

POLICY

The Singapore Association of Convention & Exhibition Organizers & Suppliers (“SACEOS ”,
” we ”, “ our ” or “ us ”) is committed to respecting your privacy.

We collect Personal Data about our members, customers, partners and other interest groups of SACEOS (where
they are natural persons, or, of their employees, agents and representatives), about the users of our website, and
about the individuals that attend any events (including any training, courses and programmes) organized by us (and
these individuals about whom we collect Personal Data shall herein be referred to as “ you ” in this Privacy Policy).

This Privacy Policy (“Policy”) sets out the essential details relating to your personal data relationship with SACEOS
and applies to all SACEOS services and any associated Services (“Services”).

In this Policy, we set out how we collect your Personal Data, what Personal Data we collect, how we use it, and what
rights you have concerning our processing of your Personal Data.

For this Policy, “Personal Data” refers to any information, whether true or not, relating to an identified or
identifiable natural person. Kindly note that, from time to time, we may develop new or offer additional services. If the introduction of these
new or additional services results in any change to the way we collect or process your personal data, we will provide
you with more information and additional terms or policies. Unless stated otherwise, when we introduce these new
or other services, they will be subject to this Policy.

The identity of the data controller of the personal information we hold about you will depend on whether you are
engaging us directly or if we are processing your Personal Data in the course of our engagement with a third party.

Depending on the nature of your interaction with us, we use different methods to collect Personal Data from and
about you, including without limitation through:

a. Direct Interactions

We may collect your Personal Data through our direct interactions with you, including Personal Data you may
provide when you:

i. register, request and/or engage us for and in relation to any of our Services, whether in writing, orally or through
our website;

ii. use any of our Services;

iii. interact with us in relation to our Services (including any queries, surveys, questionnaires, feedback, etc.)

iv. request or register for marketing being sent to you (including news, information, promotions, updates, etc.);
and/or

v. submit your Personal Data to us for any other reason, whether voluntarily or otherwise.

b. Automated Interactions

We may collect your Personal Data automatically in the following situations:

i. when you access our website, submit information through our website and/or your browser loads our internet
cookies; and/or

ii. when your image is captured by us through CCTV recordings while you are within our premises, or through
photographs, videos and/or audio recordings taken by us or our representatives when you participate in any of our
events or activities.

c. Third Parties

We may collect your Personal Data from third parties that we work with (e.g. vendors and partners) for the provision
of our Services, including when:

i. we receive references from business partners and third parties, including where you have been referred by them;

ii. we seek information from third parties about you in connection with the Services you have applied for or have
engaged us for; and/or

iii. your Personal Data is in publicly available sources.

Where your Personal Data is collected from third parties, we will only use such Personal Data either where you have
provided your consent to the third party or SACEOS to the sharing of your Personal Data or where SACEOS has a
legitimate interest to use the Personal Data to provide you with our Services.

Generally, we may collect, use, process, store and transfer different kinds of Personal Data about you, including the
following:

Registration Data
We collect Personal Data when you register, request and/or engage us for and in relation to any of our Services,
including:
• Identification information;
• Contact information;
• Business information; and/or
• Employment information.

Service Usage Data
While some of the Personal Data we ask for may be mandatory to register or engage us for our Services, you will
also have the option to provide us with additional Personal Data to allow us to provide you with more personalized
Services.

We collect Personal Data through your use of our Services to operate, maintain and provide you with these Services,
including:
• Identification information;
• Contact information;
• Business information;
• Employment information;
• Information relating to the use of our website; and/or
• Information about how you use our Services.

Third Party Data
We may receive or collect Personal Data about you from third parties (e.g. customers, clients, publicly available
sources, service providers) from time to time.

We collect payment information when you register or engage us in for or concerning any of our Services to facilitate
any transactions made in connection with the provision of the Services.

Payment Data
While the exact Personal Data we may collect may vary depending on the service being provided or the payment
method, such payment information will include:
• Name;
• Date of Birth;
• Credit card or debit card details;
• Bank account details;
• Address;
• Contact number; and/or
• Transaction details and history.

Marketing Data
We may collect Personal Data in relation to our marketing efforts (e.g. promotions, updates, newsletters), including:
• Identification information;
• Contact information; and/or
• Any information that enables us to personalize our marketing material.

We may process your Personal Data for more than one legal basis, depending on the specific purpose for which we
are using your Personal Data.

For ease of reference, we have set out below a brief, non-exhaustive description of our processing purpose, the
categories of Personal Data that will be processed and the legal bases we rely on. Where applicable, we have also
identified our specific legitimate interests.

Processing Purpose

Categories of Personal Data
for the Processing Purpose

Legal Basis for Processing

To manage our relationship with
you and facilitate the provision of
our Services

•  Registration Data
•  Service Usage Data
•  Third-Party Data
•  Marketing Data

•  Necessary for the
performance of a
contract and/or to take
steps at your request
before entering into a
contract

•  Necessary for our
legitimate interest
(administering the Services)

To communicate with you for any
purposes related to our provision
of the Services

•  Registration Data
•  Service Usage Data

•  Necessary for the
performance of a contract
and/or to take steps at your
request before entering into
a contract

•  Necessary for our
legitimate interest
(administering the Services
and communicating with
individuals in connection with
the provision of the Services)

•  Necessary to comply with a
legal obligation

To provide, personalize and
improve the Services we provide
to you

•  Registration Data
•  Service Usage Data
•  Third-Party Data
•  Marketing Data

•  Necessary for the
performance of a contract
and/or to take steps at your
request before entering into
a contract.

•  Necessary for our
legitimate interest (tailor our
Services to our customers
and improve in the provision
of our Services)

•  Consent

To provide, personalize and
improve the Services we provide
to you

•  Registration Data
•  Service Usage Data
•  Third-Party Data

•  Necessary for our
legitimate interest (for
running our business and
provision of any services,
including to prevent cyber
risks or fraud)

•  Necessary to comply with a
legal obligation

To process your payment

•  Payment Data

•  Necessary for the
performance of a contract
and/or to take steps at your
request prior to entering into
a contract

•  Necessary for our
legitimate interest
(administering the Services
and preventing fraud)

To provide suggestions and
recommendations to you based
on your preferences.

•  Marketing Data

•  Necessary for our
legitimate interest (to
develop our business and
improve on our Services)

•  Consent

To verify the identification of
individuals who may contact us
from time to time.

•  Registration Data

•  Necessary to comply with a
legal obligation

•  Necessary for our
legitimate interest (to
prevent fraud)

To manage our administrative and
business operations and
complying with internal policies
and procedures.

•  Registration Data
•  Service Usage Data
•  Third-Party Data

•  Necessary for our
legitimate interest (to
prevent fraud, and to ensure
compliance with regulations,
laws, standards and
professional obligations)

The purposes listed in the above may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).

Please note that if you choose not to provide us with your Personal Data or choose not to consent to our processing
of your Personal Data, we may not be able to provide some or all of our Services to you or respond to your other
requests.

If you wish to seek further clarification concerning our legal bases for processing your Personal Data, do feel free to
contact [email protected]

We may disclose your Personal Data to third party service providers, agents, and other organisations where such disclosure is

  • required for performing obligations in the course of or in connection our Services, or to for this purpose; or
  • required by law

We may share your Personal Data with the following non-exhaustive list of parties:

Parties

Reason for Sharing

Service Providers

We may engage third party vendors or service providers, that we
need to provide our Services, including:
•  Hosting services
•  Mailing services
•  Accounting services
•  Payment processing services
•  Fraud prevention
•  IT services
•  Data analytics
•  Marketing services
•  Research services

Our Affiliates or Partners

We may share your Personal Data with SACEOS affiliates or
partners in order to facilitate our business operations and the
provision of our Services to you.

Regulatory or Supervisory
Authorities

We may share your Personal Data if we, in good faith, reasonably
believe that such action is necessary to comply with the law,
respond to requests from a regulatory or supervisory authority,
uphold national security, protect the safety of any person, and/or
facilitate any litigation or criminal investigation.

a. Protection and Security

As part of our commitment to protecting your privacy, we implement appropriate technical and organization measures to protect your Personal Data against accidental, unauthorized or unlawful use, disclosure, access, destruction, loss, change or damage. Some of the measures we have taken include pseudonymization, encryption, limited access and robust retention policies.

Nevertheless, do note that while we will endeavour to take all reasonable measure to protect your Personal Data, you should similarly take all necessary precautions, such as implementing strong passwords, limiting access to your computer and avoiding misplacing any documents or access passes.

b. Retention

We keep your Personal Data only for as long as necessary to provide you with the Services, to fulfil our processing purposes, in accordance with our legal obligations and for legitimate business purposes.

We will cease to retain your Personal Data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the Personal Data was collected, and is no longer necessary for legal or business purposes.

The retention period for your Personal Data may vary based on specific circumstances. Nevertheless, in determining the appropriate period to lawfully retain your Personal Data, we will consider inter alia, the following factors:

i. Amount of Personal Data;
ii. Nature and sensitivity of the Personal Data;
iii. Risks from accidental, unauthorized or unlawful use or disclosure; and
iv. Necessity of the Personal Data for the processing purposes.

If you withdraw your consent (where we rely on consent as our legal basis) or object to our processing of your Personal Data, you may at any time request in writing or via email that we erase or delete your Personal Data. Upon receipt of such request, we shall, within a reasonable time, delete or anonymize your Personal Data unless we are legally permitted or required to retain such Personal Data (e.g. ongoing dispute, tax or obligations, accounting purposes, compliance with any legal obligations).

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose Personal Data where such collection, use and disclose without consent is permitted or required under applicable laws.

If you wish to seek further clarification in relation to the retention of your Personal Data, do feel free to contact [email protected].

In the provision of our Services, the Personal Data we collect may be transferred to and processed by third parties in
other countries. In all such instances, SACEOS shall ensure that the transfer of your Personal Data is carried out in
accordance with any applicable laws and that appropriate safeguards (e.g. contractual, technical and organizational
measures) are put in place before such transfer takes place.

If you wish to seek further clarification in relation to the safeguards being implemented for the transfer of your
Personal Data, do feel free to contact [email protected]

a. Cookies

Our website uses cookies in order to facilitate your experience when browsing our website and accessing any of our
online pages.

For the purposes of this Policy, a “ cookie ” is a small piece of information sent by a web server to a web browser,which enables the server to collect information from the browser.

SACEOS uses cookies which are necessary for the functioning and operation of our website. In addition, we may
also use cookies that allow us to track, record and analyze data in relation to the activity on our website, or that
allow us to recognize you whenever you return to our website for us to customize your browsing experience based
on our preferences.

If you wish not to receive cookies, kindly change your cookie setting in your browser under the “options” or
“preferences” tool selection.

Please note that if you choose not to receive cookies, we may not be able to provide you with the full functionality
of our website.

b. Website

On our website, we may, from time to time, display advertisements from third parties or provide links to third party
websites.

In these instances, kindly note that SACEOS cannot be held responsible or liable for the privacy practices and
policies of the third party. As such, please read the privacy policies of such third parties to find out how they process
and collect your Personal Data.

Individuals are given rights in relation to their Personal Data pursuant to the applicable law. In general, the rights
afforded to individuals are:

Right to Access

The right to be informed of and request access to the Personal Data that we process about you. This will enable you
to check what Personal Data we are processing and whether the processing is lawful.

Right of Correction/Rectification

The right to request that we amend or update your Personal Data where it is inaccurate or incomplete. If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to our [email protected].

Kindly note that while we shall make a reasonable effort to ensure that the Personal Data we collect is accurate and complete, you are responsible for ensuring the accuracy of the Personal Data that you provide to us directly.

For individuals who are covered by the GDPR, they will also be afforded the following rights (as available and subject to any applicable law):

Right to Erasure

The right to request that we temporarily or permanently stop processing all or some of your Personal Data.

Right to Object

The right to object to your Personal Data being processed by us for direct marketing purposes, or to, at any time,
object to us processing your Personal Data on grounds relating to your particular situation

Right to Data Portability

The right to request a copy of your Personal Data in electronic format and the right to transmit that Personal Data
for use in another party’s service.

Right not to be subject to Automated Decision-making

The right to not be subject to a decision based solely on automated decision-making where the decision would have
a legal effect on you or produce a similarly significant effect.

If we send you electronic marketing messages based on your consent or as otherwise permitted by applicable law,
you may, at any time, respectively withdraw such consent or declare your objection at no cost. The electronic
marketing messages you receive from SACEOS (e.g. email updates) will also include an “unsubscribe” option within
the message itself to enable you to manage your Personal Data.

Additionally, you have the right at any time to lodge a complaint with your local Data Protection Authority if you are
unhappy with the way in which we are using your Personal Data.

In order to enable you to exercise these rights with ease and to record your preferences in relation to how SACEOS
uses your Personal Data, you may manage your privacy preferences at any time by contacting
[email protected].

We may update this Policy from time to time.

When we make any material changes to the Policy, we will provide you with notice as appropriate under the
circumstances of such change, including by displaying the notice within our website or by sending you an email.
Additionally, you may also wish to refer to the “last modified” date at the end of this Policy.

If you have any questions about your privacy, your privacy rights, or how to exercise them, please feel free to
contact Bita Seow at [email protected]

We will respond to your request within a reasonable period upon verification of your identity.