Privacy Policy

Last updated: 29 October 2026.

This policy explains how 2A ORGANISATION collects and uses your personal data when you visit the website xmaschampselysees.com (the “Site”), in compliance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act.

Data controller

2A ORGANISATION
66 Boulevard de Berlin
44000 Nantes
Tel.: 02 40 84 32 32

Data collected

Depending on how you use the Site, we may collect:
• identification data : last name, first name, company, email address, phone number, which you enter in our forms;
• browsing data : IP address, browser and device type, pages viewed, visit duration, referrer;
• technical data : session identifiers, cookies and browsing preferences.

Purposes and legal bases

Your data is used to:
• respond to requests sent via the contact form (pre-contractual measures, legitimate interest);
• review exhibitor and partner applications (pre-contractual measures);
• ensure the operation and security of the Site (legitimate interest);
• measure audience and improve the user experience (consent, where required);
• send you, where applicable, information about the Christmas market (consent).

No automated decision producing legal effects is made on the basis of your data.

Forms

Only the information necessary to process your request is requested. It is sent to 2A ORGANISATION by email, is never resold and is never transferred to third parties for commercial purposes.

Cookies and audience measurement

The Site uses different categories of cookies:
• strictly necessary for the operation of the Site;
• statistics, set only with your consent;
• preference, which remember your choices.

On your first visit, a banner allows you to accept or refuse their use. To change your choice, delete the Site’s cookies in your browser settings: the banner will then appear again on your next visit. Cookies currently used: pll_language (display language) and a cookie that remembers your choice on the banner.

Retention period

• Contact requests and applications: up to 3 years after the last exchange.
• Audience measurement data: according to the retention period configured in the tool used.
• Technical logs: for a limited period, necessary for the security of the Site.

Recipients

Your data is intended for 2A ORGANISATION and its technical service providers (host, email delivery services, audience measurement tool), who act on its instructions. The map on the “Access & map” page is provided by OpenStreetMap: displaying it sends your IP address to OpenStreetMap’s servers, which may set their own cookies in accordance with their privacy policy. Links to social networks (Instagram, TikTok, Facebook) send no data unless you click them.

Security

We implement appropriate technical and organisational measures to protect the confidentiality, integrity and availability of your data.

Transfers outside the European Union

Some services used (for example an audience measurement tool) may involve transferring data outside the European Union. These transfers are covered by appropriate safeguards, in accordance with the GDPR.

Your rights

You have the following rights:
• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent at any time.

To exercise them, write to us via the contact form or by post to: 2A ORGANISATION, 66 Boulevard de Berlin, 44000 Nantes. We reply within one month at most.

If you have any difficulty, you may lodge a complaint with the French data protection authority (CNIL – Commission Nationale de l’Informatique et des Libertés) : https://www.cnil.fr

Changes

This policy may be updated. The date of the last change appears at the top of this page.