Last updated: 03.08.2026
This Privacy Policy explains how GES Event Intelligence SRL (“Visit”, “we”, “us”, “our”) collects and uses personal data when you visit visitcloud.com (the “Site”), request a demo, contact us, or receive our marketing communications.
This policy covers our activities as a data controller for our website and marketing. When we process personal data of event attendees, registrants, or visitors through the Visit platform on behalf of our clients (event organisers), we act as a data processor. That processing is governed by the data processing terms in our contract with each client, not by this policy.
1. Who we are
The controller responsible for your personal data is:
GES Event Intelligence SRL
Registered office: Str. George Coșbuc nr. 17 A, Et. 1, 550013 Sibiu, Jud. Sibiu, Romania
Trade Register no.: J2010000710320
Tax identification code (CUI): 27636221 (VAT: RO27636221)
Visit is part of the wider GES group. Where the GES group shares services or infrastructure with us, group entities may process your personal data as described in Section 6.
Contact for privacy matters:Â our contact form
Data Protection Officer:Â Privacy matters are overseen by Visit’s management, and you can reach us using the contact above.
2. The personal data we collect
Depending on how you interact with us, we may collect:
- Contact and professional details you provide through demo requests, contact forms, or emails, such as your name, work email, telephone number, job title, and company.
- Communications between you and us, including enquiries, support requests, and your responses to our emails.
- Marketing data, such as your preferences, areas of interest, and whether you open or click our messages.
- Technical and usage data collected automatically through cookies and similar technologies, such as your IP address, device and browser information, pages viewed, and how you navigate the Site. See our Cookie Policy for detail.
- Business identification data where a visitor-identification tool associates your visit with a company or professional profile (see Apollo in Section 6).
We do not seek to collect special categories of data through the Site, and we ask that you do not send them to us.
3. How we collect personal data
- Directly from you, when you complete a form, request a demo, contact us, or subscribe.
- Automatically, through cookies and similar technologies when you use the Site, subject to your consent for non-essential categories.
- From third parties, including business-data and visitor-identification providers, our GES group affiliates, and partners who refer you to us.
4. Why we use your personal data, and our legal bases
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Responding to your enquiries and demo requests, and taking steps before entering a contract | Performance of a contract, or taking steps at your request before a contract; and our legitimate interests in responding to business enquiries |
| Providing and improving the Site | Our legitimate interests in operating and improving our website |
| Sending marketing communications about Visit’s products and services | Your consent; or our legitimate interests where you are an existing or prospective business contact, subject to your right to opt out at any time |
| Analytics cookies and similar technologies | Your consent |
| Advertising, remarketing, and campaign measurement cookies and similar technologies | Your consent |
| Keeping records, ensuring security, and meeting legal and regulatory obligations | Our legitimate interests, and compliance with a legal obligation |
Where we rely on legitimate interests, we have considered your rights and interests and can provide details of our assessment on request.
You can withdraw consent, or object to processing based on legitimate interests, at any time (see Section 9).
5. Cookies and similar technologies
We use cookies and similar technologies for necessary, analytics, and marketing purposes. Where consent applies in your region, we do not load analytics or marketing technologies until you accept the relevant category through our consent banner. You can change or withdraw your choices at any time through Cookie Settings. Full detail is in our Cookie Policy.
6. Who we share personal data with
We share personal data only as needed for the purposes above, with:
- GES group affiliates, for reasonable internal management, shared services, and the purposes described in this policy.
- Service providers acting as our processors, under contract and only on our instructions, including:
- Amazon Web Services (hosting, EU (Ireland) region).
- Google Ireland Limited (Google Analytics 4 and Google Ads).
- LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag).
- Apollo.io, Inc. (business analytics and visitor identification, United States).
- InnoCraft Ltd (Matomo Cloud analytics; data hosted in the EU).
- Zendesk, Inc. (customer support).
- Pipedrive (customer relationship management, used to store and manage enquiries).
- Professional advisers, auditors, and authorities, where required for legal, regulatory, or security reasons, or to establish, exercise, or defend legal claims.
- A successor entity, in connection with a merger, acquisition, or reorganisation.
7. International transfers
Some of our providers are located outside the European Economic Area, or may transfer data to such countries, including the United States. Where they do, we rely on appropriate safeguards. For providers in the United States, this is typically their certification under the EU-U.S. Data Privacy Framework (and its UK extension), or, where that does not apply, the European Commission’s Standard Contractual Clauses together with additional measures. You can request more information about the safeguards for a specific transfer using the contact details in Section 1.
8. How long we keep personal data
We keep personal data only as long as necessary for the purposes for which we collected it:
- Enquiry and demo data:Â for the duration of our discussions and for up to 24 months after our last contact with you.
- Marketing data:Â until you opt out or withdraw consent, and for a short period afterwards to record your preference.
- Analytics and advertising data:Â for the retention periods set by the relevant tools, as described in our Cookie Policy.
- Records we must keep for legal reasons:Â for the period required by applicable law.
9. Your rights
Under the GDPR and Romanian data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing;
- receive certain data in a portable format;
- withdraw consent at any time, without affecting processing already carried out; and
- opt out of marketing at any time, using the unsubscribe link in our emails or by contacting us.
To exercise any of these rights, contact us using the details in Section 1. We may need to verify your identity before responding.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, https://www.dataprotection.ro. You may also complain to the authority in your own country of residence within the EEA or the UK.
10. How we protect your data
We apply technical and organisational measures appropriate to the risk. Our platform is hosted on AWS in the EU (Ireland) region, and we hold ISO 27001 and PCI SAQ-A certifications. More detail is on our Compliance page.
11. Children
The Site and our services are intended for business users. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy from time to time. The “last updated” date shows when it last changed. Where changes are significant, we will take reasonable steps to bring them to your attention.
13. Contact us
For any question about this policy or your personal data, use our contact form, or write to GES Event Intelligence SRL at the registered office above.