Besides all technical measures to ensure a proper data protection, the visitor is informed by the organizer (data protection and terms and conditions) about the possibility to be scanned by exhibitors and the transmission of his personal contact information.
By showing his badge to be scanned, the visitor is declaring his consent by implication in every single case. This process design and legal interpretation was confirmed by our lawyers.
If the visitor disagrees during the registration or even later, his record is blocked in our system and you will see the message "no data available". The visitor can deny data forwarding during the registration process as well as lateron. So you will receive all visitor data fully compliant to the GDPR.
To add the scanned visitor data to a newsletter distribution list, we recommend either to ask for consent before capturing the data or lateron when sending a follow up email.