Privacy Policy

X24SEVEN - FZCO, Silicon Oasis IFZA A2, 342001 Dubai, United Arab Emirates, is responsible for processing personal data in connection with this website and inquiries. Company Manager: Angelo Franke. Contact for privacy requests: info@x24seven.com.

This notice covers website visits and initial communication. Additional information may be necessary for a subsequent project or a new service.

The website is hosted by Hostinger. When you visit, technical data is transmitted to the hosting infrastructure, including your IP address, date and time, requested address, browser and operating system information, response status and, where transmitted, the referring page. Hostinger may record access and security logs to deliver the website, diagnose errors and prevent abuse.

Where the GDPR applies, the legal basis is Article 6(1)(f): our legitimate interest in secure, reliable website operation. Technical data is retained only as necessary for these purposes; security incidents or legal obligations may require longer retention. Hosting providers and their technical service providers may receive this data.

Provider information: Hostinger privacy policy and data processing addendum.

If you email us, we process your address, name, business contact details, message and attachments to answer your inquiry, prepare an offer and communicate about your project. Email is provided through Titan Business, obtained via Hostinger. Titan identifies its provider as Titan Solution Ltd SEZC, Cayman Islands. Messages are also accessible on the devices we use for business correspondence.

Where the GDPR applies, processing is based on Article 6(1)(b) for pre-contractual requests or contracts with you, and Article 6(1)(f) for other business correspondence, including communication with company representatives. Article 6(1)(c) applies where retention is legally required. Providing inquiry details is voluntary, but we need sufficient contact and project information to respond.

Correspondence is retained while needed to handle the inquiry or project, comply with applicable record-keeping duties or establish, exercise or defend legal claims, and is then deleted when no further ground for retention remains.

Titan privacy policy.

We do not embed advertising pixels, maps or video players. The optional newsletter form uses Hostinger Reach and is loaded only after you choose “Open signup form”. Until then, our page does not load the Reach script or form. Opening it transfers technical data, including your network address and browser information, to Hostinger and its technical and security providers. Reach counts form views and submissions. Its embed script stores a form-specific view timestamp in local browser storage to avoid counting repeat views within 30 minutes; it is not a copy of your form entries. Cloudflare spam protection may process technical signals.

You can leave the form unopened and continue using the website. A direct form link is also available; following it loads the provider’s form in a separate page. Newsletter subscription is a separate action requiring the form’s consent checkbox and email confirmation. Email inquiry links open your own email application. The optional AI chat is described below.

The controller is established in the United Arab Emirates. Our authorised management may access inquiries while working internationally. Hostinger, Titan and their service providers may process data in other countries. The UAE and the Cayman Islands do not have a general EU adequacy decision. Where a transfer falls under Chapter V GDPR, an applicable transfer mechanism is required, such as appropriate contractual safeguards where available; sending an inquiry is not treated as blanket consent to international transfers.

You can contact us for details of the providers, processing locations and safeguards relevant to your inquiry. We do not sell inquiry data. We disclose it to other parties only where necessary for an agreed service, legally required or otherwise lawfully authorised.

Subject to the applicable law and its conditions, you may request access, correction, erasure, restriction and data portability. Where processing relies on consent, you may withdraw it for the future. Where we rely on legitimate interests, you may object on grounds relating to your particular situation; you may object to direct marketing at any time.

Contact info@x24seven.com to exercise your rights. Where the GDPR applies, you may complain to a supervisory authority, particularly in the EU country of your habitual residence, workplace or the alleged infringement. Rights under applicable UAE data protection law remain unaffected.

The website supports encrypted HTTPS connections. Ordinary email is not guaranteed to provide end-to-end confidentiality; please avoid sending unnecessary sensitive information. We do not use this website to make solely automated decisions with legal or similarly significant effects about visitors.

Livia is an AI assistant, not a human live agent. When you submit a chat message, its text and a limited recent conversation history are sent through our hosting server to the OpenAI API to generate a reply. For exhibition dates, Livia may use OpenAI’s web search, which can pass search queries to search providers. Queries should contain only the public event name, city and edition, not your contact details or project brief. Results include source links and are subject to your confirmation. Please do not include sensitive personal data or confidential documents. The chat helps explain our services and prepare a voluntary inquiry; it does not issue binding offers.

Where the GDPR applies, processing is based on Article 6(1)(b) for your pre-contractual inquiry or Article 6(1)(f) for other business inquiries and preventing abuse. OpenAI and its service providers may process data internationally, including in the United States; the international-processing information above applies. Details of the applicable contracting entity and safeguards can be requested from info@x24seven.com. See OpenAI’s privacy information.

Our chat application does not persist conversation transcripts on our server or in browser cookies or local storage. Conversation state is held in the open page and cleared on reload, navigation or using “Clear chat”. We request that API responses are not stored as retrievable response objects; provider security and abuse-monitoring retention may still apply. Ordinary hosting access logs may also be generated. For abuse prevention, a daily server counter stores a keyed hash derived from the network address and request counts, without message text. These counters reset on the next request after the UTC date changes.

The email handoff opens your email application with a draft for you to review and send. It does not automatically send a message, forward a chat to a person or subscribe you to marketing. Email retention then follows section 3.

For the free X24seven Stand Design Collection 2027, you can register for the launch email and occasional exhibition tips and stand design updates. We use Hostinger Reach to collect and manage subscriptions and send these emails. The form requests first name, last name, company, job title and email address, plus consent. These details help us address subscribers and understand their business context. Subscription is voluntary; the current form requires these fields. The collection is in preparation and is not available for immediate download.

Double opt-in requires you to confirm your address through an email link before becoming a subscribed recipient. Reach processes the contact details, consent and confirmation status, form/segment labels, and technical submission and delivery information. Where GDPR applies, sending the newsletter relies on consent under Article 6(1)(a). You may withdraw consent at any time using the unsubscribe link or by contacting info@x24seven.com, without affecting earlier lawful processing. Opening the embedded form also enables the technical processing and form measurement described in section 4.

We retain subscription data while the subscription remains active, unless earlier deletion is appropriate. After withdrawal, we stop marketing and delete data no longer needed, subject to limited consent records, suppression information to prevent further sends, and applicable legal obligations. Hostinger and its service providers may process data internationally; section 5 applies. Provider information and contractual processing terms are linked in section 2. Depending on campaign settings, Reach may provide delivery, opening and link-click statistics. This notice will be updated if additional newsletter processing is introduced.

When you like a stand concept, a first-party cookie (x24seven_voter) remembers your browser for up to one year to prevent duplicate votes. Our server stores a keyed hash of this random identifier per concept, with the shared vote count, until the voting record is removed. We do not ask for your name or email. Clearing cookies or using another browser can permit another vote. To limit abuse, keyed network address hashes and daily request counts are retained until the next voting day. Raw network addresses are not stored in the voting records. Ordinary hosting logs may still apply. No third-party voting provider receives these votes. Likes help inform editorial selection; inclusion in the Collection is not guaranteed. For deletion questions, contact info@x24seven.com.

Last updated: 1 November 2026. We revise this notice when our services or data processing change.

Only after you select Accept in our privacy banner do we load Umami Cloud from cloud.umami.is and send analytics requests to gateway.umami.is. Analytics includes page addresses (excluding query strings and fragments), referrers, page titles, screen dimensions and browser language. Umami also processes IP addresses and browser information to derive visitor/session identifiers; cookieless does not mean no personal data is processed.

Where GDPR applies, optional analytics relies on your consent under Article 6(1)(a); consent also covers applicable non-essential device access. Rejecting leaves analytics disabled. We store your choice and its timestamp in your browser's local storage for up to 180 days solely to remember that choice. You can change or withdraw consent at any time through Privacy settings in the footer. Withdrawal stops future analytics after a page reload and does not affect previous lawful processing.

Umami Cloud is an external provider. Processing locations, retention and transfer safeguards depend on the account and applicable provider terms; this banner does not itself establish those safeguards. Provider information: Umami privacy policy.