Version 2026-08-26.1 — applies to the Fashion AI Expo member and partner platform (app.fashionaiexpo.com).
FAIE SASU, operating as Fashion AI Expo, registered at 66 Avenue des Champs-Élysées, 75008 Paris, France (RCS Paris, SIREN 103 313 300), is the data controller for the personal data processed through this platform. Fashion AI Expo operates from France and applies the EU General Data Protection Regulation (GDPR) and the guidance of the Commission Nationale de l'Informatique et des Libertés (CNIL).
Contact for any privacy question or request: partners@fashionaiexpo.com
We collect personal data you provide directly, including:
Dietary requirements are event-specific: they are used only to arrange catering for the event in question, are visible only to the staff who operate that event (not to partner users managing a guest list, even their own), and are not linked to your wider profile beyond that event. See Section 5 for retention.
| Purpose | Legal basis |
|---|---|
| Reviewing your Apply for Access application | Steps taken at your request, prior to entering an arrangement (Art. 6(1)(b)) |
| Creating and managing your platform account | Performance of the platform's terms of use (Art. 6(1)(b)) |
| Registering and confirming your event participation | Performance of a contract (Art. 6(1)(b)) |
| Managing guest lists you are invited on, or that you manage as a partner | Performance of a contract, for the partner managing the list; legitimate interest in running the event safely and smoothly, for the guest (Art. 6(1)(b) / Art. 6(1)(f)) |
| Accommodating dietary requirements you choose to share for an event | Performance of a contract — arranging the event you registered for (Art. 6(1)(b)) |
| Providing documents and resources relevant to your participation | Performance of a contract (Art. 6(1)(b)) |
| Sending you application status updates, invitations and required-material reminders | Performance of a contract (Art. 6(1)(b)) |
| Sending account and security notices (e.g. password resets, suspicious activity) | Legitimate interest in keeping your account secure (Art. 6(1)(f)) |
| Sending news, event announcements and industry updates by email | Consent (Art. 6(1)(a)) — only if you opt in; withdrawable at any time |
| Preventing abuse of the Apply for Access form and detecting fraud | Legitimate interest in the security of the platform (Art. 6(1)(f)) |
Each purpose above is assessed on its own legal basis rather than one basis covering everything we do. Operational communication and event/account processing are never conditional on the marketing consent row above — you will always receive messages needed to review your application, manage your participation, or secure your account, whether or not you opt into marketing emails.
We do not sell personal data. It may be shared with:
Dietary requirements are an exception to the staff-wide access above: they are only accessible to staff with an operational event/guest-list role, and are never shared with a partner organization managing a guest list — including their own.
Once a retention period expires, data is deleted or anonymized (see Section 8). These periods are Fashion AI Expo's current policy and may be revised; any change will update the version number at the top of this page.
The platform is built on Supabase, which provides our database, authentication and file storage, and sends account-related emails (invitations, password resets) on our behalf. Supabase acts as a processor under a data processing agreement. Our database is hosted in Supabase's Central EU region (Frankfurt, Germany), within the EU/EEA — no international transfer safeguard is required for this hosting.
No other processor (a dedicated email service, analytics, or payment provider) is currently integrated into the platform — Supabase is the only one. If any such processor is introduced before or after launch, it will be named here, along with its own hosting location and any transfer safeguard needed, before it goes live.
Under GDPR, you have the right to:
To exercise any of these rights, contact partners@fashionaiexpo.com. We will respond within one month, as required by GDPR. You can also change your marketing preference at any time from your account's Profile page.
Where data must be retained for legal, accounting or legitimate operational reasons (for example, records of a past event you participated in), we anonymize rather than delete: your directly identifying details are removed while the underlying record is kept for as long as it must be. Where nothing requires retention, your data is deleted.
When you opt in or out of marketing emails, we record the date, the source (e.g. the Apply for Access form or your account settings), and the version of this notice in effect at the time. This record is kept as evidence of your choice, including after a withdrawal, so that we can demonstrate we honored it.
The platform uses only strictly necessary cookies: authentication/session cookies (to keep you signed in) and a small functional cookie that remembers which event edition you last viewed in the admin interface. Neither is used for advertising or analytics, and no consent banner is shown for them, in line with CNIL guidance on cookies strictly necessary for a service the user has requested. If that changes and non-essential cookies are introduced, this section and a consent mechanism will be updated first.
If you believe your data protection rights have not been respected, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority, at www.cnil.fr, or with the supervisory authority in your own EU/EEA country of residence.
We may update this policy as the platform evolves. Material changes will update the version number at the top of this page, and where relevant, we will ask for fresh consent rather than relying on an earlier version.