Privacy
Privacy Policy
Last updated: 24 October 2026
This policy explains how Expoguy s.r.o. handles personal data through imexpoguy.com, the ExpoGuy client portal and related communications.
Controller
Expoguy s.r.o. (brand: ExpoGuy), registered office at Soukenická 877/9, Moravská Ostrava, 702 00 Ostrava, Czech Republic, Company ID 23284200, VAT ID CZ23284200, is the controller. Privacy requests can be sent to im.expoguy@gmail.com.
Public project enquiries
The public project enquiry form collects the information you enter, including name, company, email address, event, location, date, requested service, stand size, design status, approximate budget and project requirements. Required fields are marked in the form. Without them, ExpoGuy cannot receive or answer the enquiry. The form sends the enquiry by transactional email and does not create an enquiry record in Supabase.
Client accounts and authentication
If you create or use a client account, ExpoGuy and Supabase process your email address, account profile information, authentication credentials, session identifiers and necessary authentication cookies. Supabase Auth handles credentials and sessions; ExpoGuy does not store a readable copy of your password.
Client project briefs
The client portal stores draft and submitted project briefs in Supabase. These may include event and location details, event date, requested service, stand size, design status, requirements, approximate budget, project status and submission timestamps. Account and project information is separated from ExpoGuy’s confidential internal operational records by access controls.
Purposes and legal bases
ExpoGuy processes enquiries, accounts and project briefs to take steps at your request before entering a contract and to provide requested services (Article 6(1)(b) GDPR). Data may also be processed to comply with legal obligations (Article 6(1)(c)) and, where necessary, for legitimate interests in secure website operation, preventing misuse, maintaining records and handling business communications (Article 6(1)(f)). Transactional messages are service communications, not marketing subscriptions.
Email notifications
Resend processes transactional email delivery for ExpoGuy. A public enquiry sends a confirmation to the address supplied and a notification to ExpoGuy. Submitting a client project similarly sends a client confirmation and an internal notification. Supabase may send account confirmation or authentication messages when those functions are enabled. Email delivery includes the relevant contact and project details and technical delivery metadata.
Recipients and service providers
Access is limited to authorised ExpoGuy personnel and providers needed to operate the service. Supabase provides authentication and database services; Resend provides transactional email delivery; and the production hosting provider processes the technical requests needed to serve the website. Project details may be shared with prospective stand builders or project partners where necessary to handle the service you request. ExpoGuy does not sell personal data.
International transfers
The location of processing and any transfer outside the European Economic Area depend on the production regions and account settings used for hosting, Supabase and Resend. Where such a transfer applies, ExpoGuy must use a lawful transfer mechanism and provide information about the relevant safeguard on request.
Retention
Enquiry emails and related correspondence are kept only while needed to answer the enquiry, manage a potential or active business relationship, meet legal obligations or establish, exercise or defend legal claims. Account and project data is kept while the account or project remains active and afterwards only while one of those purposes continues to apply. ExpoGuy must periodically review and delete or anonymise data that is no longer needed.
Your rights and requests
Subject to the GDPR, you may request access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. Send a request to im.expoguy@gmail.com from the email address connected with the data and describe your request. ExpoGuy may ask for information needed to verify your identity. You may also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ) or another competent supervisory authority.
Cookies and analytics
The public landing page does not currently use advertising or analytics cookies. Authentication cookies are used only for sign-in, session security and access to the private dashboard or client portal. No consent banner is displayed for the current essential-only implementation; this must be reviewed before adding analytics, advertising or other non-essential tracking.