Privacy notice — company research data (Art. 14 GDPR)

What we collect. To decide which companies to research, we take company information published in public trade-fair and industry directories: the company's name, website, product categories, stand or hall, and the contact email address printed there. That address may be a named employee's business address.

What we use it for. Only inside Clacta, to find and identify companies, with one exception: company names, which may appear as typing suggestions in the request form on our site. The facts in our reports come from official registers and records, not from these directories. We never use these addresses to contact anyone.

Legal basis. Our legitimate interest in researching suppliers for our customers (Art. 6(1)(f) GDPR). We publish this notice instead of writing to each person, because we never contact them (Art. 14(5)(b) GDPR).

How long. We delete a directory-sourced address when we no longer need it for our research, and at the latest 24 months after it was added to our research list.

Your rights. You can object at any time at the contact address in our main privacy policy, and we will delete your address. Your other rights and the supervisory authority: see our main privacy policy.

Version research-data-notice-2026-10-19-e · Main privacy policy.