Data Protection Notice of Deutsche Messe AG (DMAG)

Hereinafter we will inform you about which of your data we store when and why. This relates to the collection and processing of various data by Deutsche Messe AG in the following contexts:

  • collection and processing of personal data within the scope of initiating and realising business relationships, including data transfers (III.)
  • use of (online) services / offers of Deutsche Messe AG, including the purchase of event tickets and the registration as a professional visitor (IV.)
  • data processing in connection with the use of online services (V.)
  • use of cookies - our cookie guidelines (VI.)
  • data transfer to companies established outside the EU / EEA (VII.)

At the beginning of this data protection notice we will provide you with additional statutorily required information (I.) and inform you about your rights (II.)

I. Who is the controller of the data and how can I contact the data protection officer?

Controller within the meaning of the GDPR is Deutsche Messe AG (DMAG), Messegelände, 30521 Hannover, Germany (phone: +49 (0) 511 89-0; info@messe.de ).

For questions regarding data protection, please contact our data protection officer at datenschutz@messe.de or at the above-indicated address.

II. Your rights as a data subject

Every data subject has the following rights: 

  • right of access (Art. 15 GDPR)
  • right to rectification of data (Art. 16 GDPR)
  • right to erasure and/or "right to be forgotten" (Art. 17 GDPR)
  • right to restriction of the processing of personal data (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR).  

You may at any time object to the processing of your personal data for marketing purposes - including profiling in connection with direct marketing - without giving reasons.

Moreover, you have a general right to object (cf. Art. 21 (1) GDPR). In this case, reasons must be given for the objection.

To the extent data is processed on the basis of consent, such consent can be revoked at any time with future effect.

Should you wish to exercise your rights as a data subject, please refer to datenschutz@messe.de.

Furthermore, you have the right to lodge a complaint with a supervisory authority against the data processings performed by us.
 

III. Scope of data collection and data processing, purposes of processing, transfer of data; here: business contacts

1. Business initiation / support regarding business and professional development

For the purpose of business initiation, Deutsche Messe AG will collect and process personal data you provide within the scope of a business contact or in connection with a request, a delivery or performance, or other form of business contact. By business contact we mean the collection of data at presentations of Deutsche Messe AG as well as at events and networking meetings. In addition, we will collect publicly available data, like information from company websites or publicly available directories (catalogues, lists of associations, etc.).

Apart from your contact details, the data collection will include further information provided by you in this context (in addition to the data on your business card, this usually extends to requests you make or further information you provide on the company you work for). Moreover, we will collect the data made available on the website of your employer. We will process such data to provide you and the company you work for with support regarding business and professional development in accordance with the objectives of Deutsche Messe AG.

We will involve service providers in the processing of such data. If your country of residence is not Germany, we will transfer the above-described data to the locally responsible subsidiary and/or sales partner of Deutsche Messe AG. Our aim is to provide support regarding business and professional development also via our subsidiaries / sales partners, to establish a long-term business relationship, and to inform about further relevant events of DMAG and its subsidiaries at their respective locations.


2. Performance of a contract

For the purpose of contractual performence we will collect and process core data (company name, contact person, address, phone number, email address) as well as further data required for purposes of contractual performance and accounting, like order and performance data, correspondence data, payment data. This also includes the use of such data for the processing of complaints and warranty cases. Furthermore, the data may be made available to external auditors, tax advisors and lawyers working for Deutsche Messe AG.

3. Deletion of data

The data collected in connection with the ordering and delivery of services will be stored in accordance with the statutory retention periods pursuant to Secs. 146 et seq. German Revenue Code (AO) and/or Sec. 257 German Commercial Code (HGB) and deleted upon expiry of the respective retention periods. The personal data of other business contacts will remain stored as long as the respective person in its function is of relevance for our business purposes. This will be reviewed internally every 5 years. To the extent required for compliance with statutory retention obligations, the data will then be archived.
 

4. Legal bases

The legal bases for the processing of personal data are: 

  • 6 (1) (b) GDPR for delivery and performance
  • 6 (1) (f) GDPR for the processing of data of suppliers and other service providers to initiate business deals
  • 6 (1) (f) GDPR for the processing of data of other business contacts, including transfer to subsidiaries / sales partners   


IV. Scope of data collection and data processing, purposes of processing, transfer of data; here: use of (online) services / offers of Deutsche Messe AG, including the purchase of event tickets and the registration as a professional visitor

The use of the online services offered by Deutsche Messe AG requires the setting up of a customer account (Account). This is the basis for Deutsche Messe AG to offer to its customers various services in order to make participation in the event as interesting and pleasant as possible. The online services offered by Deutsche Messe AG come as a comprehensive package. The legal basis for the setting up and allocation of user accounts is Art. 6 (1) b GDPR.

1. Booking of trade fair participations, including online booking system ("Exhibitor Shop")

If you wish to book a trade fair participation or further services via the Exhibitor Shop, you need to set up an account. Via this account you can make required amendments / updates or book participations in further trade fairs. After the trade fair, you can deactivate your account at any time.

DMAG will process the personal data collected within the framework of booking trade fair participations for purposes of contractual performance, accounting and customer administration. In addition, the data collected in connection with the booking of trade fair participations will be used to process warranty cases or other complaints. The data may also be disclosed to external auditors or tax authorities for auditing purposes. In individual cases, the data may be disclosed to lawyers engaged by Deutsche Messe AG in connection with the assessment / assertion of legal claims.

Deutsche Messe AG will transfer the core data (company name, contact person, address, and contact details like phone number and email address) to other companies within DMAG Group with its corporate seat in Hanover to ensure that identical core data are used and administrated by all group companies. This also includes the sharing of data updates of which we or one of our group companies becomes aware. Any updates will be made available to all other group companies involved. This helps us to simplify our internal processes and will save you the trouble of having to provide your core data again when contacting another group company. For an overview of our group companies please go to www.messe.de.

The mandatory information provided when setting up the customer account (name and address, company, contact person, trade fair and booth) will, to the extent required, be transferred to external service providers of Deutsche Messe AG who offer additional services in connection with the booth you have booked.

Pursuant to the German Trade Regulation Act (GewO), every event needs to be registered with the competent regulatory agency. To this end, the organiser has to submit to the regulatory agency a preliminary list of exhibitors prior to the event. In this context, personal data included in the corporate information of a company (sole proprietorships) may be disclosed to the regulatory agency.

The data will be stored in accordance with the statutory retention periods pursuant to Secs. 146 et seq. German Revenue Code (AO) and/or Sec. 257 German Commercial Code (HGB) and deleted upon expiry of the respective retention periods.

 Legal bases: 

  • setting up and allocation of user accounts: 6 (1) b GDPR
  • contractual performance including processing of complaints / warranty claims: 6 (1) b GDPR
  • storage of data pursuant to AO / HGB and audits by tax authorities / auditors: 6 (1) c GDPR
  • transfer of data pursuant to GewO: 6 (1) c GDPR
  • transfer of data to service partners for the provision of services on behalf of Deutsche Messe AG: 6 (1) b GDPR and/or Art. 6 (1) f GDPR
  • transfer of data to other group companies of Deutsche Messe AG: 6 (1) f GDPR


2. Purchase of event ticket

a. Setting up a user account

he purchase of event tickets (tickets for trade fairs, symposiums, or other events) requires the setting up of a customer account. Via this account you can also use further services and book further tickets. After the trade fair, you can deactivate such account at any time if you want to.

As an alternative to setting up an own customer account, you can use your social media account with Facebook, Google+, LinkedIn or Xing for the purchase of tickets. You will be forwarded to the site of the respective social media service, where you can log in with your user data. Such data will then be used for the setting up and allocation of your user account with Deutsche Messe AG.

If you use the social login via Facebook, Google+, LinkedIn or Xing, the social network will transfer the following data to us: 

  • Facebook: name, first name, email address
  • Google+: name, first name, email address
  • LinkedIn: name, first name, email address
  • Xing: name, first name, email address 

After login to the online ticket shop via your existing social media account with Facebook, Google+, LinkedIn or Xing, you have the option to disconnect the link to the social media service.

We will store the data provided to us by the social media service as long as they are needed for the processing of the ticket purchase and the event. Deutsche Messe AG will not transfer any data to social networks. Nonetheless, due to the transfer of data to DMAG occasioned by you the social network may store your registration with DMAG. In such case, the respective social network will have sole responsibility for any data processing.


b. Purchase of event tickets

Once you are registered for our online ticket shop, you can use this platform for the purchase of event tickets (tickets for trade fairs, conferences). Guided Tour tickets are available at the separate Guided Tour shop. Deutsche Messe AG will process the mandatory data provided by you and the data relating to the selected event for your ticket purchase to ensure entry to the selected events on the respective date(s). In addition, this data will be used to issue name badges for the trade fair visit / the conference attendance.

The data about the ticket purchase will be used for accounting purposes and, where applicable, to process any warranty claims or complaints. Moreover, your data may be transferred to external auditors and/or tax authorities for auditing purposes or to lawyers engaged by Deutsche Messe AG in connection with the assessment / assertion of legal claims. The data about the ticket purchase will be stored in accordance with statutory retention periods pursuant to Secs. 146 et seq. German Revenue Code (AO) and/or Sec. 257 German Commercial Code (HGB) and deleted upon expiry of the respective retention periods.

Legal bases: 

  • contractual performance including processing of warranty or other claims: 6 (1) b GDPR
  • setting up and allocation of user accounts: 6 (1) b GDPR
  • storage of data pursuant to AO/HGB and, where applicable audits by tax authorities / auditors: 6 (1) c GDPR
  • disclosure to lawyers engaged by Deutsche Messe AG in connection with the assessment / assertion of legal claims: 6 (1) f GDPR  


3. Registration of professional visitor tickets / exhibitor passes (hereinafter collectively "professional visitor tickets")

Registration for professional visitor tickets requires the setting up of an own user account. Via this account, you can also benefit from further services offered in connection with the trade fair. Registration for professional visitor tickets only serves as an example for the services offered by Deutsche Messe AG in connection with your customer account. 

In connection with the registration for professional visitor tickets, Deutsche Messe AG will use the collected data to ensure entry to the trade fair for the professional visitor / exhibitor on the scheduled dates. In addition, the data will be used to issue name badges for the trade fair visit.   

Since the costs for entry to the trade fair are borne by the exhibitor inviting the professional visitor, the data related to the ticket registration will also be transferred to the exhibitor who issued the invitation (core data and voluntary information).

Legal bases: 

  • setting up and allocation of user accounts: 6 (1) b GDPR
  • contractual performance including processing of claims / warranty claims: 6 (1) b GDPR
  • transfer of core data to the exhibitor who issued the invitation: 6 (1) f GDPR


4. Use of further trade fair services

By setting up a user account, in particular when purchasing online tickets or registering for professional visitor tickets or exhibitor passes, trade fair attendees will get access to additional trade fair services offered by Deutsche Messe AG as part of a service package. This includes the following services: 

  • Lead Management
  • Favourites Search
  • Routing
  • Name badges 

The following data processings are carried out in connection with the individual services:
 

Lead Management

If desired, Deutsche Messe AG will facilitate an easy transfer of the data stored in connection with the visitor's ticket registration to an exhibitor or to other companies / organisations / persons participating in the event (e.g., participants of a conference or forum, speakers, sponsors, etc.; hereinafter "event participants"). The event participant can scan the barcode on the ticket and will obtain the data stored with Deutsche Messe AG.

 
Favourites Search & Routing

Users of or our website or app can add exhibitors, products and events to their favourites list. On the basis of such favourites list, an optimal route will be generated for the user, which can be processed and stored in the user account. If you have installed the trade fair app - and consented to the use of your location - the app can show your specific route and your location.

Legal basis: 

  • contractual performance including processing of warranty claims or complaints: 6 (1) b GDPR.

  

5. Processing of personal data by DMAG for marketing purposes

DMAG and service providers engaged by it (e.g. letter shops) will use your name and address for further purposes in connection with customer retention and customer recovery. This will include the delivery by post of information regarding further interesting products and services, because DMAG wishes to draw your attention to interesting offers and establish a long-lasting customer relationship.

Moreover, Deutsche Messe AG will use the mandatory data provided in connection with the use of its offers / services as well as voluntary information provided (see paragraphs 1-4 above) to personalise and constantly improve trade fair attendance for visitors and exhibitors and to provide future offers tailor-made to your interests. We use the data collected in connection with the use of our offers / services to provide you with the best possible support regarding your business development and to point out interesting options for trade fair visitors / exhibitors. Your data will be processed internally and in pseudonymised form in order to comply wit your legitimate interest to ensure protection of your personal data. The data processing allows us to provide you with personalised offers (website, email, post).

We will stop using your name, address and other data collected upon prior use of our offers / services for marketing purposes - including profiling within the scope of direct marketing - if you have not used any of the offers / services of DMAG for a period of up to 7 years. After expiry of 5 years, we will continue to process your name, address, company affiliation, and status (professional visitor, exhibitor) as well as the last trade fair you attended for the purpose of direct mailings.

As a principle, your email address will only be used for marketing purposes if we have obtained your consent. With respect to recipients with registered seat in Germany, phone numbers will likewise only be used for marketing purposes if consent has been obtained. The following exemptions apply:

To the extent DMAG obtains your email address in connection with the sale of products / services, we will use your email address to promote similar own products. You are entitled to object to the use of your data for marketing purposes at any time; this will be pointed out to you upon collection of any data as well as in any marketing communications. Moreover, Deutsche Messe AG will use professional phone numbers, in particular of recipients in Germany, for commercial marketing purposes, to the extent this is based on presumed consent, e.g. within the scope of an existing business relationship.  

The phone numbers of recipients outside Germany will be used in compliance with the statutory provisions applicable in the country where the recipient is established and only if the recipient has not objected to the use of its phone number for marketing purposes.

Legal bases: 

  • data processing for marketing purposes, including profiling in connection with marketing purposes, and transfer for further marketing purposes: 6 (1) f GDPR
  • telephone marketing: Art. 6 (1) a GDPR and 7 para. 2 no. 2 alt. 2 German Unfair Competition Act (UWG)
  • email marketing: 6 (1) a GDPR and Sec. 7 para. 3 UWG 


6. Transfer of personal data for marketing purposes to media cooperation partners of Deutsche Messe AG

In the interest of exhibitors, we always seek to involve media companies in order to facilitate special publications and thus make the event known to a broad public. In this context, we would like to provide the media companies involved with the opportunity to contact you directly in order to inform you about the possibility of placing advertisements in these (special) publications and thus realise targeted advertising in a relevant environment. 

Where DMAG in the context of a trade fair / an event cooperates with a media partner (e.g. a newspaper publishing company), DMAG will transfer the personal data (core data, including contact person but without email address) provided by the exhibitor upon registration to the respective media company in order to facilitate a direct contact for the above-mentioned purposes. Responsibility for any further data processing in this context lies with the respective media company. 

Legal basis: 

  • Transfer of data to the media partners of an event: 6 (1) f GDPR  


7. Transfer of personal data to group companies and sales partners of DMAG for marketing purposes

DMAG has transferred all events relating to the topic "Human Resources" to its subsidiary Spring with its seat in Mannheim. To the extent the features of a company imply an interest in the topic "Human Resources", DMAG will transfer to Spring the exhibitor's data collected upon the setting up of the customer account, including contact person, for own marketing purposes of Spring. This will include the following data: name, address (without email address), company, industry, function and position. 

Where trade fair visitors are not based in Germany, DMAG will transfer the postal address provided upon setting up of the customer account (excluding email address, including name, company, industry, function and position) to the subsidiary and/or sales partner of Deutsche Messe AG locally responsible for the support of trade fair visitors. The aim is to establish a long-lasting business relationship between DMAG and trade fair visitors via its subsidiaries / sales partners and to point out further relevant events of DMAG and/or its subsidiaries at their respective locations. 

Legal bases:

  • transfer of core data to Spring in case of presumed interest in the topic "Human Resources": 6 (1) f GDPR
  • transfer of core data of trade fair visitors without residence in Germany to regional subsidiaries and sales partners of Deutsche Messe AG Group: 6 (1) f GDPR. 


8. Subscription to email newsletter

We will only send you marketing communications via email if we have obtained your prior explicit consent. Notwithstanding, we may process your email address for marketing purposes as described in paragraph 5. 

Legal basis:

  • email marketing: 6 (1) a GDPR.  


V. Data processing in connection with the use of online services

Hereinafter we will explain what types of data processings are carried out in connection with the access to a website or the use of an app of Deutsche Messe AG.
 

1. Processing of data upon access to our website - logfile data

When you access our website / app, some pieces of general information will automatically be collected. This information (server logfiles) includes e.g. the type of your browser, the operating system you use, the domain name of your internet service provider and similar information. In addition, your IP address will be transferred and used for the purpose of providing the service requested by you. This information is technically required to accurately provide the contents of websites you call up and are inevitably collected when using the internet. 

In accordance with our IT security concept, the generated logfile data will be stored for a period of 3 weeks to enable us to detect and analyse any attacks against our website. The legal basis for this data processing is Art. 6 (1) f GDPR.


2. Processing of data in connection with the use of our website - your requests

If you send us a request via email or via our contact form, we will collect the data provided by you for processing and responding to such request. This information will remain stored for a period of up to two years for verification purposes. The legal basis for this data processing is Art. 6 (1) f GDPR.


3. Product recommendations in our shop

Product recommendations in our Exhibitor Shop are determined on the basis of seasons and orders. To this end, Deutsche Messe AG engages an external service provider who carries out the required data processings on behalf of Deutsche Messe AG using pseudonymised data. Where recipients have objected to the use for marketing purposes - e.g. deactivation of trackings - only recommendations related to the respective product will be displayed in the Shop. The collected data will be evaluated for the purpose of product recommendations for a period of up to two years, based on Art. 6 (1) f GDPR. 


4. Integration of external service providers

Linking with other services is a fundamental principle of the Internet. Therefore, we have integrated various external service providers into our website. 

 

a. Integration of social plug-ins

To offer you means of interacting with your contacts and more easily share interesting information, our website uses the social plug-ins of various social networks, e.g. Facebook.com, Twitter.com, Google+ and Pinterest. The different plug-ins can be recognised by their respective network logos. We use a 2-click approach to ensure that access to our website as such will not trigger a transfer of data.

Only if you click on a plug-in, your browser will establish a direct connection with the servers of the respective network. The network transmits the content of the plug-in directly to your browser and your browser integrates such content into the website. To the extent a network has its seat outside the EU / the EEA, we cannot exclude that your data will be transferred to and processed by a server outside the EU / the EEA. Since we have no influence on the amount of data collected by the networks through the plug-ins or the respective period of use, we hereby inform you according to our present knowledge: 

When clicking on a plug-in, the respective network will receive the information that you have accessed the link included in our website. If you are logged into a network, such network can connect this information with your profile. If you do not want the network to collect information on your access to our website, you have to log out before calling up our site. In principle, however, it is possible that a network detects and stores your IP address, even if you are not registered with or logged into such network. Furthermore, we have no information regarding the deletion of data collected by the respective plug-in providers. 

The plug-in provider will store the data collected about you as a user profile to be used for purposes of marketing, market research and the demand-oriented design of its website. In particular, this evaluation takes place (also for users not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of a user profile by service providers. 

The legal basis for the use of plug-ins is Art. 6 (1) f GDPR. Please refer to the privacy guidelines of the respective social network for information regarding the purpose, duration and scope of the data collection, the further processing and use of your data, your respective rights, and setting options to protect your privacy: 


b. Use of Google Tag Manager

To deliver online marketing and to integrate our external partners we use the Google Tag Manager. This allows us to control the delivery of online advertisements. This tool does not use cookies, but still requires the transfer of IP addresses to Google, where the use of the Tag Manager will be analysed. We have activated a function that automatically anonymises IP addresses prior to their transfer to Google. The legal basis for this data processing is Art. 6 (1) f GDPR. The data collected will be deleted after two years. 


c. Use of Google Maps

Our website uses Google Maps, a service offered by Google, Inc. This allows us to display interactive maps, to ensure easy traceability of the locations indicated on our website, and to facilitate convenient use of the map functions. 

This application is retrieved directly from the Google servers. Google will therefore receive the IP- address currently assigned to you. When you access the function, Google will receive the information that you have called up our respective subsite. If, to what extent and for how long your IP address is stored and internally used by Google is beyond our knowledge. The legal basis for the use of this service is Art. 6 (1) f GDPR. 

If you are registered with a Google service, Google can assign your visit to your user account. Even if you are not registered with Google or not logged in, it is possible that Google may store your IP address and use it for profiling purposes. Google will store the data collected about you as a user profile to be used for purposes of advertising, market research and/or the demand-oriented design of its websites. In particular, this evaluation takes place (also for user not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of a user profile by Google. 

Please note that data processings by Google may be performed outside the EU/EEA. Google will process your personal data also in the U.S. and has accepted the regulations of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. For further information on data protection by Google please go to https://www.google.de/intl/de/policies/privacy.


d. Use of YouTube

Our website uses plug-ins of the website YouTube, which is operated by Google. The operator of the web pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, U.S.A. 

When you visit one of our web pages that uses the YouTube plug-in, a connection will be established to the servers of YouTube. The YouTube server will receive information on which of our web pages you have visited. 

If you are logged into your YouTube account, YouTube will be able to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. 

We use YouTube in the interest of presenting our online offers in an attractive way; the legal basis therefore is Art. 6 (1) f GDPR. We only collect information on the frequency of call-ups of the YouTube videos integrated in our website and will delete the respective data after 2 years. 

For further information on the handling of user data please refer to the privacy policy of YouTube at: https://www.google.de/intl/de/policies/privacy


e. Use of reCAPTCHA

To protect user enquiries via our internet contact form, online ticket registrations and subscriptions to our newsletter, Deutsche Messe AG uses the reCAPTCHA service of Google Inc. The legal basis is Art. 6 (1) f GDPR. The prompts of reCAPTCHA are used to discern whether an entry is made by a human being or, improperly, automated machine processing is used. The prompts include the transfer of IP addresses and any further data required by Google for the provision of reCAPTCHA. To this purpose, your entry will be transferred to and further used by Google. By using reCAPTCHA you agree that the recognition you have made will be incorporated in the digitalisation of old works. DMAG will not store any further data about your use of this service. 

We have activated IP anonymisation on our website. Therefore, Google will shorten your IP address within the member states of the European Union and contracting states of the agreement of the European Economic Area. Only in exceptional cases will your full IP address will be transferred to a server of Google in the U.S.A. and shortened there. On behalf of the operator of this website Google will use such information to analyse the use of this service. The IP address transmitted by your browser will not be merged with any other data of Google. The data is subject to separate data protection regulations of Google. For further information on the privacy policy of Google please refer to: https://www.google.com/intl/de/policies/privacy/.

Your browser is outdated, and this may limit the functionalities and website displays. Please upgrade your browser to the latest version.This website uses cookies. By continuing to use this website, you give your consent for Deutsche Messe AG to store cookies on your PC/device and use them to collect and analyze data on your user behavior so that it can provide you with a more personalized web experience. You will find further information under Privacy policy / Cookies.