GDPR Compliance Notice

Fingoh.ai is designed with data protection by design and by default. As a data processor under GDPR Article 28, we support our customers (data controllers) in meeting their obligations under the General Data Protection Regulation (EU) 2016/679 and equivalent national laws.

Lawful basis for processing

Exhibitors using Fingoh.ai are responsible for establishing a lawful basis for processing visitor personal data. Common lawful bases include legitimate interest (Article 6(1)(f)) for B2B trade fair contexts, or consent (Article 6(1)(a)) where obtained through registration forms.

Data subject rights we support

Right of access (Art. 15) — Exhibitors can export all data for a visitor via CSV export
Right to erasure (Art. 17) — Exhibitors can permanently delete all data for a visitor via Profile Settings → GDPR / Data Erasure
Right to rectification (Art. 16) — Contact records can be edited via the visitor list
Right to data portability (Art. 20) — All contact data is exportable as CSV at any time

International transfers

Data is currently stored in AWS Seoul (ap-northeast-2). For EU-based data subjects, transfers are conducted in accordance with applicable transfer mechanisms. Please contact us if you require Standard Contractual Clauses (SCCs) to be executed.

Data retention

Personal data is retained for up to 24 months after the event end date. This retention period supports historical scoring models that improve lead quality for future editions. Exhibitors may delete specific visitor records at any time using the erasure feature.

Data Protection Officer

For GDPR-related enquiries or to request SCCs, contact us at hello@fingoh.ai