Every lead you collect at a European trade show is personal data, which means GDPR applies the moment someone hands you a card or scans a badge. Getting it right protects both your prospects and your follow-up. This is a practical, plain-English perspective for exhibitors — general information, not legal advice, so confirm specifics with a data-protection professional.
Lead capture is data collection
A business card in a bowl, a badge scan, a sign-up sheet — all of it is collecting personal data, and GDPR expects you to have a lawful basis and to be transparent about what you’ll do with it. The practical habit: be clear at the point of capture what you’re collecting and why, and only collect what you’ll actually use.
Consent has to be genuine
If you’re relying on consent — say, to add someone to a marketing list — it has to be freely given and informed, not buried or assumed. “We scanned your badge so now you’re on our newsletter” isn’t sound. Asking clearly, and recording that you asked, is the safer footing.
Handle the data carefully after the show
The data you gather has to be stored securely, kept only as long as you need it, and accessible only to those who should see it. A spreadsheet of leads emailed around and left on laptops is exactly the casual handling GDPR is meant to prevent. Decide before the show where lead data goes and who can access it.
Respect people’s rights
Under GDPR, individuals can ask what data you hold, correct it, or have it deleted. Your follow-up process should make those requests easy to honour — an unsubscribe that works, a way to handle a deletion request. Building that in is straightforward if planned, painful if retrofitted.
Make compliance part of the plan
The exhibitors who handle GDPR well treat it as part of the lead process, not an afterthought — clear capture, genuine consent, secure handling, easy opt-out. It’s not a barrier to a good follow-up; done properly, it builds the trust that makes follow-up work. For your specific obligations, take advice from a data-protection specialist.
En rapport
- GDPR and its impact on exhibition events
- How to maximise ROI from exhibitions
- Expo consultancy
- About SOL Germany
Foire aux questions
Does GDPR apply to leads collected at a trade show?
Yes. Every business card, badge scan or sign-up is personal data, so GDPR applies from the moment you collect it. You need a lawful basis, transparency about what you’ll do with the data, and secure handling afterward. This is general guidance — confirm specifics with a data-protection professional.
Can I add everyone whose badge I scanned to my newsletter?
Not automatically. If you’re relying on consent for marketing, it has to be freely given and informed, not assumed from a badge scan. Asking clearly and recording that you asked is the safer footing — take professional advice on your specific situation.
