How we found you, and what we do with your data

Version 1.1 · Effective 2026-10-13

How we found you, and what we do with your data

Effective date: 2026-10-13 Version: 1.1

This page is for people we contact about Convenio who have never been in touch with us before — by email or on LinkedIn. If you use Convenio, or your employer does, the Privacy Policy at https://convenio.faccilis.com/privacy is the page that concerns you.

1. Who we are

FACCILIS Enterprise Solutions L.L.C-FZ, a limited liability company formed under the regulations of the Meydan Free Zone, Dubai, United Arab Emirates (formation no. 2653583, licence no. 2653583.01), registered at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. ("Faccilis", "we", "us").

We operate Convenio, a platform for companies that send employees to business and professional events. Our first emails come from an address on tryconvenio.com, a domain we use only for this purpose.

General enquiries: info@faccilis.com. For anything about your data, including asking us to stop: privacy@faccilis.com.

For this processing we are the controller.

2. What we hold about you

What	Always or sometimes
Your name, job title and employer	Always
Your company's size, sector and country	Always
The address of your public professional profile (for example LinkedIn)	Usually
Your country, and your city when the source gives it	Usually
Your work email address, where it came from and when we obtained it	Only if we write to you by email
The fact we mention in our message — a trade fair your company exhibits at, or the events listed on your company's website	Always
The dates of our messages, and whether you replied	Always
Whether you asked us not to contact you again	If you asked

We do not hold your phone number, your private contact details, or any special category of data about you. We do not track whether you open our emails or click their links. We do not build profiles of you, and we do not use automated decision-making.

3. Where it came from

We did not get your data from you, which is why we are telling you here. It comes from these sources:

the exhibitor list published by a trade fair your company takes part in, on the fair's own website;
your company's own website — for example a page listing the events it attends, or a contact address the company publishes;
business contact data providers — currently Lusha and Instantly — which supply the name, role and work email address of the person responsible for marketing at a company. We use them in two ways: to find that person at a company we already identified from a trade fair, and to search directly for companies and roles that match our criteria (sector, company size, country and job function).

4. Why we hold it, and on what legal basis

To tell you about Convenio and to ask whether managing employee attendance at events is a problem at your company.

We rely on our legitimate interest (Article 6(1)(f) GDPR, and the equivalent provision of the UK GDPR) in reaching the person responsible for marketing at a company that invests in trade fairs and events. We weighed that interest against your rights before starting, and we keep the processing narrow on purpose: one email and at most one short follow-up, a professional address, a subject connected to your job, no tracking, and an opt-out that works at the first attempt. If you do not reply, we do not keep writing.

Where we contact you by email, we only do so in countries whose rules allow business-to-business email without prior consent. Elsewhere we use LinkedIn instead.

5. Who else sees it

Nobody buys it, and we do not share it for anyone else's marketing. It is handled by the service providers we use to run our own operations, each under contract and only to provide those services to us:

Provider	What it does for us	Where
Instantly	Sends our emails and records unsubscribes	United States
Google Workspace	The mailbox our emails are sent from and replies arrive in	Google data centres, including the United States
Supabase	Hosts the database where we keep our list of contacts	European Union
Microsoft 365	Our office email, including privacy@faccilis.com	European Union and United States

Lusha and Instantly, as data providers, are separate controllers of the data they supply; their own privacy notices explain how they collect it.

We are established in the United Arab Emirates, outside the European Economic Area, and the UAE is not the subject of an EU adequacy decision. Your data is therefore processed outside the EEA and the UK, by us and by the providers described above.

6. How long we keep it

Until you ask us to stop, or twelve months after our last contact with you, whichever comes first. If you ask us not to contact you again, we keep the minimum needed to honour that — your email address on a suppression list — so that a later campaign does not reach you by accident.

7. What you can do

Stop hearing from us: click the unsubscribe link in any email, or reply with one line. We act within one working day and we do not write again.
See what we hold, correct it, or have it deleted, and object to the processing altogether: write to privacy@faccilis.com.
You can also ask us to restrict the processing, or to send you your data in a portable form.

We answer within one month. We do not ask you to prove anything beyond what we need to find your record.

8. Complaints

If you are in the European Economic Area or the United Kingdom, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EU it is the authority of the country where you live or work.

9. Changes

If we change how any of this works, we update this page and the effective date above.