The person responsible for the purpose of the General Data Protection Regulation and other national data protection laws of the member states as well as other provisions of data protection law is:
MESSE ESSEN GmbH
Oliver P. Kuhrt
Chairman of the Supervisory Board
Thomas Kufen (Oberbürgermeister)
Contact details of the data protection officer
I. General information about visiting the website
1. Scope of the processing of personal data
We only collect and process personal data of our users to the extent necessary to provide a functional website as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases in which prior consent cannot be obtained for real reasons, the data are publicly accessible or the user makes them available directly when making contact or the processing of the data is permitted by legal regulations.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
3. Data erasure and storage time
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
4. Rights of the data subject
The data subject has the right to request confirmation from the data controller as to whether personal data concerning him or her are being processed; if this is the case, he or she has a right of access to such personal data and to the following information:
a. processing purposes;
b. the categories of personal data being processed;
c. the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
d. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
e. the existence of a right of rectification or deletion of personal data concerning him or of a restriction on processing by the controller or of a right of opposition to such processing;
f. the existence of a right of appeal to a supervisory authority;
g. if the personal data are not collected from the data subject, all available information on the origin of the data;
You also have a right to restrict the processing of these data and a right to data transferability. If you have given us your consent, you can revoke it for the future. If you have any questions on the subject of data protection, you can contact the data protection officer at any time. You also have the right of appeal to the competent supervisory authority.
Responsible regulatory agency:
To exercise your rights under data protection law, please contact email@example.com.
5. Disclosure of data to third parties
To enable us to process your data for the purposes mentioned above, we may forward your data to selected partner companies. If necessary, we have concluded a contract with the recipients for order processing. These services include in particular ticketing, mailings, stand construction services and catalogue entries.
In addition, we may pass on your data to third parties if this is necessary to fulfil our range of services. These may include the following partners in particular: Transport companies (for orders), credit institutions and payment service providers, credit assessments. A passing on can also take place, if we are obligated to the passing on to public places, and/or on judicial order. We do not transfer any personal data to third parties outside the European Economic Area (EEA).
In the event of a credit risk (name, address, e-mail address, information on the company and, if applicable, contractual and receivables data), we will transfer your data to coface Debitorenmanagement GmbH, Isaac-Fulda-Allee 1, 55124 Mainz, and, if applicable, to other cooperating business information agencies for the purpose of checking the creditworthiness and checking the deliverability of the stated address and for the purpose of debt collection processing. The legal basis for this transmission are Art 6 I b GDPR and Art 6 I f GDPR. Transmissions on the basis of Art 6 I f GDPR may only take place if this is necessary to safeguard the legitimate interests of our company and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. Detailed information on our contractual partner, coface, within the meaning of Art 14 GDPR, i.e. the business purpose, the purpose of data storage there, the legal basis, the data recipients of coface, the right to self-disclosure and the right to deletion and correction as well as to profiling can be found at http://www.coface.de/Home/Allgemeine-Informationen/Datenschutz
II. Provision of the website and creation of log files
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
1. information about the browser type and version used
2. the user's operating system
3. the IP address of the user
4. date and time of access
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR also lies in these purposes. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
Our website uses session cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again. Cookies are not used to create personal user profiles.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of our websites may be limited.
We work together with Aumago GmbH ("Aumago"), Berlin, a target group marketer. Aumago collects pseudonymous usage data in the form of cookie IDs and advertising IDs without IP addresses. The cookie ID and advertising IDs without IP address are not sufficient to identify a natural person behind a browser / user.
Aumago assumes an interest in a specific B2B industry based on the user's surfing behaviour (website visited, categories, product pages) and uses this information to direct more targeted, usage-based online advertising. Cookies can be synchronized with other platforms via a so-called cookie matching. Matching can take place, for example, for: Google, Doubleclick, Adition, Appnexus, Mediamath, The Trade Desk, Adform, Active Agent, yieldlab.
The cookies are either Aumago cookies or cookies from service providers that Aumago uses, such as krux digital Inc. the user can either delete the cookies directly in the browser or manage his cookie preferences at http://www.youronlinechoices.com/de/praferenzmanagement/ or switch off the cookies from Aumago at http://www.krux.com/krux_privacy/consumer_choice/
2. Adform Conversion-Tracking
This website may use Adform's conversion tracking. The conversion tracking cookie is set when a user contacts an ad placed by Adform. These cookies do not contain any information with which users can be personally identified. Users who do not wish to participate in tracking can deactivate the Adform cookie via their Internet browser. Users who do not wish to participate in conversion tracking can deactivate the Adform cookie via their browser at https://site.adform.com/datenschutz-opt-out/. Data processing is carried out on the legal basis of Art. 6 para.1 lit f (legitimate interest) of the EU Basic Regulation on Data Protection (EU GDPR). Our legitimate interest lies in the implementation and optimization of our online marketing measures.
3. Google AdWords
Our websites can use Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
In the context of Google AdWords we use the so-called conversion tracking. When you click on an ad served by Google, a cookie is set for conversion tracking. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of our websites and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and has been redirected to this page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under User Settings. They are then not included in the conversion tracking statistics.
If necessary, you can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us (e-mail address and optionally title, first name, surname). In addition, the following data is collected upon registration: Date and time of registration.
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration.In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter. The data records are used for statistical evaluations to analyze the system performance. The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter.
V. Contact form
If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal message by E-Mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
VI. My Trade Fair
When using the "My Trade Fair" online portal, we collect, process and use the e-mail address provided at registration, the IP address of the terminal device used and the requests made by the user to exhibitors via "My Trade Fair". Appointments agreed between users and exhibitors are also registered.
The above data is collected exclusively for the purpose of enabling the user to use the "My Trade Fair" portal. Insofar as communication data, i.e. requests addressed to exhibitors by users, are collected and, if necessary, processed, this is done in order to guarantee the effectiveness and reliability of the communication function of the portal by controlling the group of recipients and, if necessary, by editorial interventions. Registration of appointments made between the user and exhibitors is exclusively anonymous and for statistical purposes.
We also reserve the right to pass on the named data to third parties. However, the data will only be passed on to third parties for the aforementioned purposes. Personal data will not be passed on for other purposes, in particular for advertising purposes or the like. If we pass on user data to third parties to carry out the aforementioned activities, we contractually oblige them to treat the data confidentially and to use it only for the aforementioned purposes.
Provided that the user agrees to the conditions of this declaration, he declares his consent to the regular use of personal data. Consent is given by ticking the appropriate box during the registration process.
The user has the right to revoke his consent at any time. If consent is not given or is revoked, the user is not granted access to the "My Fair" online portal.
VII. Website Analysis
The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. Here, cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of usage-relevant content or advertising. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.
The data generated with etracker is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject to strict German and European data protection laws and standards.In this regard, etracker was checked, certified and awarded with the ePrivacyseal data protection seal of approval.
The data is processed on the legal basis of Art. 6 Section 1 lit f (legitimate interest) of the EU General Data Protection Regulation (GDPR).Our legitimate interest is the optimization of our online offer and our website. As the privacy of our visitors is very important to us, etracker anonymizes the IP address as early as possible and converts login or device IDs into a unique key with which, however,no connection to any specific person can be made with. etracker does not use it for any other purpose, combine it with other data or pass it on to third parties.
You can object to the outlined data processing at any time provided it is related to your person. Your objection has no detrimental consequences for you.
Further information on data protection with etracker can be found here.
VIII. Social Plugins
Our website can use social plugins ("plugins") of the social network twitter.com, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are marked with a Twitter logo. If you call a website of MESSE ESSEN GmbH that contains such a plugin, a direct connection to the Twitter servers is established by clicking on the icon. The content of the plugin is transmitted directly from Twitter to your browser and integrated into the website. By integrating the plugins, Twitter receives the information that you have called up the corresponding page of our website. If you are logged in to Twitter, Twitter can assign your visit to your Twitter account. If you interact with the plugins, for example forward a tweet or make a comment yourself, the corresponding information is transmitted directly from your browser to Twitter and stored there. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your relevant rights and setting options for the protection of your privacy can be found in the Twitter data protection information. If you do not want Twitter to collect data about you via our website when using the plugin, you must log out of Twitter before visiting our website.
Our website can contain social plugins ("Plugins") of the social network xing.com ("XING"), which is operated by XING AG, Gänsemarkt 43, 20354 Hamburg. Plugins are marked with a XING logo or the suffix "XING Social Plugin". If you call up a website of MESSE ESSEN GmbH that contains such a plugin, a direct connection to the XING servers is established by clicking on the icon. The content of the plugin is transmitted by XING directly to your browser and integrated into the website. By integrating the plugins, XING receives the information that you have called up the corresponding page of our Internet presence. If you are logged in to XING, XING can assign the visit to your XING account. If you interact with the plugins, e.g. make a comment, the corresponding information is transmitted directly from your browser to XING and stored there. The purpose and scope of data collection and the further processing and use of the data by XING, as well as your rights and options for protecting your privacy, can be found in XING's data protection information. If you do not want XING to collect data about you via our website when using the plugin, you must log out of XING before visiting our website.
The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform that allows users to share photos and videos and also to distribute such data on other social networks.
Instagram's services are operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Each time one of the individual pages of this website is accessed by the data controller and an Instagram component (Insta button) has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by that Instagram component to download a representation of that Instagram component. As part of this technical process, Instagram is informed of which specific subpage of our website is visited by the person concerned.
If the person concerned is logged into Instagram at the same time, Instagram recognizes which specific page the person concerned is visiting each time the person visits our website and for the entire duration of that person's stay on our website. This information is collected by the Instagram component and assigned by Instagram to the Instagram account of the person concerned. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted is assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Instagram receives information from the Instagram component that the person concerned has visited our site whenever they are logged into Instagram at the same time as they visit our site, regardless of whether or not they click on the Instagram component. If the data subject does not want Instagram to receive this information, they can prevent the transmission by logging out of their Instagram account before accessing our website.
Our websites can use plugins from Google's YouTube site. This website is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
IX. Other third-party services
1. Google Maps
Our websites can use the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
2. Google Captcha
We integrate the function for the recognition of bots, e.g. for entries in online forms ("ReCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
With reCAPTCHA it should be checked whether the data entry on our web pages (e.g. in a contact form) is done by a human being or by an automated program. For this reCAPTCHA analyzes the behavior of the web site visitor on the basis different characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis reCAPTCHA evaluates various information (e.g. IP address, time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Visitors to the website are not informed that an analysis is taking place.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his website offers against abusive automated spying and SPAM.
X. Links to other Websites
Our websites may contain links to other websites. We have no influence on the editorial content of external websites and on whether their operators comply with data protection regulations.
XI. Applicant management
1 These data protection provisions apply exclusively to the application procedure and thus between the applicant and Messe Essen GmbH.
2 The data to be provided by the applicant in this procedure will be stored and processed by our data processor, Essener Systemhaus (ESH). It goes without saying that Messe Essen GmbH and ESH have a contract for the collection and processing of personal data on behalf of Art. 28 EU-GDPR. Processing is carried out exclusively on behalf of Messe Essen GmbH.
3 Only employees of Messe Essen GmbH who are bound to data secrecy have access to the applicant's data.
4 The data is collected, stored and used exclusively for the purpose of the application procedure. This data is stored only to the extent permitted by law.
5. Applicants who have received a rejection will be asked to give their consent to the storage of their data for future vacancies at the end of the application process. If the applicant does not give his/her consent, the data will be deleted in accordance with the statutory provisions. The use of the data can be objected to at any time by sending an e-mail to firstname.lastname@example.org.
6. The data will not be passed on to third parties.
XII. Prize competitions
Where contests are held, all rules and information about the relevant procedure and the use of personal data during the duration of the contest will be provided. The information collected will also be used to verify the identity of the participants and to notify the winners or prizewinners. Information about specific persons will not be passed on to third parties, unless it is necessary for the dispatch of the prize.
XIII. Video surveillance
Video surveillance on the exhibition grounds is used to control the flow of traffic / visitors and for security purposes. An evaluation for other purposes does not take place.
We reserve the right to change this data protection declaration at any time with effect for the future. An up-to-date version is available on the website. Please visit the website regularly and inform yourself about the applicable data protection regulations.
As of: 24.05.2018