Privacy Policy

1. Who processes your data

Data controller: [[full legal entity name]], registration number [[number]], address: [[legal address]].

Data protection contact: [[email for personal data requests]].

2. What data we collect

• your full name, phone number and email address that you provide when registering;
• the interface language you selected;
• a record of your consent (what, when, under which policy version). For the consent log we store only an irreversible hash of your IP address, not the address itself;
• a record of your arrival at the event (time and the staff member who recorded it);
• photo and video images if you appear in the footage during the event (see section 6).

3. What we use it for

• registering you for the presentation and issuing a personal ticket (QR code);
• organising the event and access control at the entrance;
• contacting you about the event (including if you sign up for a test drive);
• sending XPENG news and offers only if you have separately agreed to it.

4. Legal basis

Processing is based on your consent, which you give by ticking the relevant box in the registration form. Consent to marketing is separate and optional: declining it does not affect your ability to attend. [[Legal: confirm the bases, including for access control.]]

5. Who we share data with

We do not sell personal data.

• the organiser's staff who handle registration at the entrance;
• the hosting provider where this site runs ([[hosting provider and country]]);
• the email delivery provider ([[service name]]);
• other parties only where required by law.

6. Photo and video recording

Photos and video may be taken during the event to report on it. By being on the premises you may appear in the footage. If you object, please tell the staff at the entrance. [[Legal: review wording and basis.]]

7. How long we keep data

Registration data is kept for up to [[N]] days after the event, after which it is deleted or anonymised. Data we must keep to comply with the law is kept for as long as the law requires.

8. Your rights

To exercise your rights, write to [[email]]. We will reply within [[period]].

• to obtain information about the data we process about you;
• to request correction or deletion of your data;
• to withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal);
• to restrict or object to processing in cases provided by law;
• to lodge a complaint with the competent data protection authority or a court.

9. Security

We apply technical and organisational safeguards: encrypted connections (HTTPS), role-based staff access, an action log in the admin area, and backups. No system can guarantee absolute security, but we keep improving ours.

10. Cookies

See our separate Cookie Policy for details on cookies.

11. Changes to this policy

We may update this policy. The current version is always available on this page.