Privacy notice — ExpoEye foot-traffic analytics
This notice explains how visitor data is processed on this exhibition stand. It applies to anyone within the field of view of the ceiling-mounted camera on the Auto Partner S.A. stand (Hall 3.0, Stand C50) during Automechanika Frankfurt, 8–12 September 2026.
Who is responsible
The controller is Auto Partner S.A., ul. Ekonomiczna 20, 43-150 Bieruń, Poland. You can reach the data protection officer at (contact to be confirmed).
What the system does
A single camera mounted on the stand's truss, about 6.2 metres above the floor, looks down at the stand. Software running on a computer located on the stand detects the presence of people within five defined zones of the stand and measures how long each presence lasts. From this it calculates aggregate figures per zone: number of visits, number of visitors, average and longest dwell time, and peak occupancy. These figures are the only output of the system.
What the system does not do
No photographs or video are recorded, stored or transmitted. No faces are recognised and no biometric data is created. Nobody is identified, and no one is recognised as a returning visitor later in the day or on another day. No profiles are built and no decision about any person is taken on the basis of this processing.
How images are handled
Each video frame is analysed on the computer on the stand and then immediately discarded from memory. To count one person once and measure how long they stay, the software links detections between consecutive frames using only the position of the detected figure — never facial or other biometric features. This link exists only in the computer's working memory and is deleted the moment the person leaves the camera's view. Detections outside the defined zones — for example in the aisles next to the stand — are discarded and not counted.
Why and on what legal basis
The purpose is to understand, in aggregate, how visitors use the stand — which zones attract people and for how long — in order to improve the layout and exhibits at future trade fairs. The legal basis is the controller's legitimate interest in evaluating its exhibition stand (Article 6(1)(f) GDPR). A balancing test has been carried out and concluded that this interest is not overridden by visitors' rights, because no images are kept, no one is identified, and no consequences follow for any individual.
Who receives data
The system is operated on behalf of the controller by Bogusław Dąbek trading as Event Logistica Bogusław Dąbek, ul. Lipowa 3D, 30-702 Kraków, Poland (biuro@eventlogistica.pl), under a data processing agreement. Only the aggregate figures described above leave the stand; they are stored in a database hosted in Frankfurt am Main, Germany. No personal data is transferred outside the European Economic Area.
How long data is kept
Video frames are not kept at all — they are discarded immediately after analysis. The temporary link between frames is deleted when the person leaves the camera's view. The aggregate figures, which do not relate to any identifiable person, are kept for 12 months after the fair. Technical logs of the computer on the stand, which contain no images, are kept for 30 days.
Your rights
Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict its processing, and to object to processing based on legitimate interest (Article 21 GDPR). Because the system does not keep any image or any other data that could be linked to you, there is nothing that can be retrieved, corrected or deleted after the fact: your data has already been discarded. If you do not wish to be counted, you can avoid the stand area without any disadvantage. To exercise your rights or ask questions, contact the data protection officer at (contact to be confirmed).
Complaints
You have the right to lodge a complaint with a supervisory authority. The authority responsible for the controller is the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. You may also contact the authority for the place of processing, the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden, datenschutz.hessen.de.
Further information
Providing data is not required by law or contract; entering the stand is voluntary. No automated decision-making within the meaning of Article 22 GDPR takes place. This notice was last updated on 7 September 2026.