Legal

Privacy & Cookie Policy

How EcomExpo handles your personal data, which cookies we use, and how to change your mind. Last updated 1 September 2026.

In short. We only collect what we need to run the conference: your details when you buy a ticket, apply to speak, enter the Awards or join the newsletter, and anonymous-by-default website statistics. Analytics and marketing cookies are set only after you click Accept in the cookie banner. You can withdraw that consent at any time with the button below.

1. Who is responsible

The data controller for ecomexpo.eu and for EcomExpo events is UAB APG MEDIA, Žalgirio g. 94, LT-09300 Vilnius, Lithuania, trading as APG Media, the organizer of EcomExpo since 2013.

Privacy questions and requests: [email protected]. Awards-specific requests: [email protected].

This policy covers ecomexpo.eu and its language versions (/lt/, /lv/, /ee/, /pl/) and the EcomExpo conference itself. Ticket purchases happen on Fienta and hotel bookings with the hotels directly; those services have their own privacy notices.

2. What we collect and why

WhenDataPurposeLegal basis
You buy a ticketName, email, company, invoice details, ticket type, order number (received from Fienta)Registration, badge, check-in, event communications, invoicing, InvoHub trial accessContract
You apply to speakName, email, company, role, LinkedIn, talk proposal, headshot if suppliedReviewing proposals, programme planning, contacting you about this or the next editionSteps before a contract; legitimate interest
You enter the AwardsContact and company details, VAT ID, Fienta order number, entry content and linksJudging, shortlist and winner announcements, ceremonyContract (see the Awards Terms)
You join the newsletterEmail address, optional name, opens and clicksSending EcomExpo news; every email has an unsubscribe linkConsent
You email us or ask about sponsoringWhatever you include, typically name, company, role, emailReplying, preparing a proposalLegitimate interest; contract
You visit the siteIP address, browser, pages viewed, referrer (server and CDN logs); analytics and ad cookies only after consentSecurity, keeping the site up, measuring what content works, measuring ad campaignsLegitimate interest (logs); consent (cookies)
You attend the eventPhotos and video recorded in public areas and on stageDocumenting the conference, promoting future editions, publishing talks on YouTubeLegitimate interest; tell staff on the day or email us if you prefer not to appear

3. Cookies and similar technologies

The site works without any marketing or analytics cookies. When you first visit, a banner asks for your choice. Nothing from the list below is loaded until you click Accept. If you click Decline or ignore the banner, only the strictly necessary storage is used.

CategoryProvider and typical cookiesPurposeLifetime
Strictly necessaryecomexpo.eu: cookie_consent (browser local storage)Remembers whether you accepted or declinedUntil you clear it or click Manage cookie preferences
AnalyticsGoogle Analytics 4 via Google Tag Manager: _ga, _ga_*Aggregate statistics on visits, pages and traffic sources. IP addresses are not stored by GA4.Up to 2 years
MarketingGoogle Ads: _gcl_au; Meta Pixel: _fbp, _fbc; LinkedIn Insight Tag: li_fat_id, bcookie, lidcMeasuring whether our ads led to ticket sales and showing EcomExpo ads to people who visited the site1 day to 1 year, set by each provider

We also use Google Consent Mode, which tells Google tags whether you consented. When consent is declined, no Google cookies are set and no identifiable data is sent.

4. Who else sees your data

We do not sell personal data. We share it only with service providers who process it for us under contract, and with partners where you would expect it:

  • Fienta (Estonia): ticket sales, payments and attendee list.
  • MailerLite (Lithuania): newsletter delivery.
  • Make.com (Celonis, EU hosting): routes website form submissions to our tools.
  • Google (Ireland): Tag Manager, Analytics, Ads. Meta (Ireland) and LinkedIn (Ireland): advertising measurement, only after consent.
  • Cloudflare and our web hosting provider: serving and protecting the site; server logs.
  • InvoHub: activating the 90-day trial included with every ticket, if you choose to use it.
  • Awards jury members: see entry content, not personal contact details beyond company and entrant name.
  • Sponsors: receive your details only if you hand them your badge, scan a code at their stand, or opt in to a sponsor session that says so.

Some providers process data outside the European Economic Area, mainly in the United States. Those transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. How long we keep it

  • Ticket and invoice records: 10 years, as required by Lithuanian accounting law.
  • Speaker applications: until the next edition's programme is closed, then deleted or anonymised unless you spoke.
  • Awards entries: as set out in the Awards Terms.
  • Newsletter subscription: until you unsubscribe.
  • Server logs: up to 30 days. Analytics data: as configured in GA4, 14 months.
  • Event photos and recordings: indefinitely as part of the EcomExpo archive, unless you ask us to remove one you appear in.

6. Your rights

Under the GDPR you can ask us for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interest or withdraw consent at any time. Email [email protected]; we answer within one month. You can also complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

7. Changes

We update this page when our tools or practices change and show the date at the top. Substantive changes are announced in the newsletter.