Data Protection Notice of Deutsche Messe AG (DMAG)

Hereinafter we will inform you about which of your data we store when and why. This relates to the processing of various data by Deutsche Messe AG, including the data collected upon access to our website, and the use of cookies. Moreover, we will inform you about your rights and provide further legally required information.


I. Who is the controller of the data and how can I contact the data protection officer?

Controller within the meaning of the GDPR is Deutsche Messe AG (DMAG), Messegelände, 30521 Hannover, Germany (phone:  +49 (0) 511 89-0; info@messe.de ).

For questions regarding data protection, please contact our data protection officer at datenschutz@messe.de or at the above-indicated address.


II. Your rights as a data subject

Every data subject has the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification of data (Art. 16 GDPR)
  • right to erasure and/or "right to be forgotten" (Art. 17 GDPR)
  • right to restriction of the processing of personal data (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR).

You may at any time object to the processing of your personal data for marketing purposes - including profiling in connection with direct marketing - without giving reasons.

Moreover, you have a general right to object (cf. Art. 21 para. 1 GDPR). In this case, reasons must be given for the objection.

To the extent data is processed on the basis of consent, such consent can be revoked at any time with future effect.

Should you wish to exercise your rights as a data subject, please refer to datenschutz@messe.de.

Furthermore, you have the right to file a complaint with a Data Protection Authority against the data processings performed by us.

III. Scope of data collection, scope of data processing, purpose of processing, transfer of data in connection with the use of services / offers of Deutsche Messe AG

The use of the online services offered by Deutsche Messe AG requires the setting up of a customer account (Account). This is the basis for Deutsche Messe AG to offer to its customers various services in order to make participation in the event as interesting and pleasant as possible. The online services offered by Deutsche Messe AG come as a comprehensive package. The legal basis for the setting up and allocation of user accounts is Art. 6 (1) b GDPR.

1. Booking of exhibition packages, including online booking system ("Shop")

If you wish to book exhibition packages or further services via the online booking system ("Shop"), you need to set up an account. Via this account you can make required amendments / updates or book exhibition spaces for further trade fairs. After completion of your booking, you can deactivate your account at any time.

DMAG will process the personal data collected within the framework of booking exhibition packages for purposes of contractual performance, accounting and customer administration.

Deutsche Messe AG will transfer the core data (company name, contact person, address, and contact details like phone number and email address) to other national companies based in Hannover within DMAG Group to ensure that identical core data are used and administrated by all group companies. This also includes the sharing of data updates of which we or one of our group companies becomes aware. Any updates will be made available to all other group companies involved. This helps us to simplify our internal processes and will save you the trouble of having to provide your core data again when contacting another group company. For an overview of our group companies please go to http://www.messe.de/de/unternehmen/tochtergesellschaften/deutschland/  .

In addition, the data collected in connection with the booking of exhibition packages will be used to process any warranty claims or complaints. Your data may also be transferred to external auditors and/or tax authorities for auditing purposes. The data will be stored in accordance with statutory retention periods pursuant to Secs. 146 et seq. German Revenue Code (AO) and/or Sec. 257 German Commercial Code (HGB) and deleted upon expiry of the respective retention periods.

The mandatory information provided when setting up the customer account (name and address, company, contact person, trade fair and booth) will, to the extent required, be transferred to external service providers commissioned by Deutsche Messe AG who offer additional services in connection with the booth you have booked.

Legal bases:
  • setting up and allocation of user accounts: Art. 6 (1) b GDPR
  • contractual performance including processing of complaints / warranty claims: Art. 6 (1) b GDPR
  • transfer of data to other group companies of Deutsche Messe AG: Art. 6 (1) f GDPR
  • transfer of data to service partners for the provision of services on behalf of Deutsche Messe AG: Art. 6 (1) b GDPR and/or Art. 6 (1) f GDPR
  • storage of data pursuant to AO/HGB and, where applicable, audits by financial authorities / auditors: Art. 6 (1) c GDPR


2. Purchase of event tickets

a.
Setting up a user account

The purchase of event tickets (tickets for trade fairs, symposiums, or other events) requires the setting up of a customer account. Via this account you can also use further services and book further tickets. After completion of your purchase, you can deactivate such account at any time if you want to.

As an alternative to setting up an own customer account, you can use your social media account with Facebook, Google+, LinkedIn or Xing for the purchase of tickets. You will be forwarded to the site of the respective social media service, where you can log in with your user data. Such data will then be used for the setting up and allocation of your user account with Deutsche Messe AG.

If you use the social login via Facebook, Google+, LinkedIn or Xing, the social networks will transfer the following data to us:

Facebook: name, first name, email address

Google+: name, first name, email address

LinkedIn: name, first name, email address

Xing: name, first name, email address

After login to the online ticket shop via your existing social media account with Facebook, Google+, LinkedIn or Xing, you have the option to disconnect the link to the social media service. We will store the data provided to us by the social media service as long as they are needed for the processing of the ticket purchase and the event. Deutsche Messe AG will not transfer any data to social networks. Nonetheless, due to the transfer of data to DMAG occasioned by you the social network may store your registration with DMAG. In such case, the respective social network will have sole responsibility for any data processing.

b. Purchase of event tickets

Once you are registered for our online ticket shop, you can use this platform for the purchase of event tickets (tickets for trade fairs, conferences). Guided Tour tickets are available at the separate Guided Tour shop. Deutsche Messe AG will process the mandatory data provided by you and the data relating to the selected event for your ticket purchase and to ensure entry to the selected events on the respective date(s). In addition, this data will be used to issue name badges for trade fair visits / conference attendances.

The data about the ticket purchase will be used for accounting purposes and, where applicable, to process any warranty claims or complaints. Moreover, your data may be transferred to external auditors and/or tax authorities for auditing purposes. The data about the ticket purchase will be stored in accordance with statutory retention periods pursuant to Secs. 146 et seq. German Revenue Code (AO) and/or Sec. 257 German Commercial Code (HGB) and deleted upon expiry of the respective retention periods.

Legal bases:

  • contractual performance including processing of warranty or other claims: Art. 6 (1) b GDPR
  • setting up and allocation of user accounts: Art. 6 (1) b GDPR
  • storage of data pursuant to AO/HGB and, where applicable audits by financial authorities / auditors: Art. 6 (1) c GDPR


3. Registration of professional visitor tickets and exhibitor passes (together "visitor tickets")

Registration for professional visitor tickets requires the setting up of an own user account. Via this account, you can also benefit from further services offered in connection with the trade fair. Registration for professional visitor tickets only serves as an example for the services offered by Deutsche Messe AG in connection with your customer account.

In connection with the registration for professional visitor tickets, Deutsche Messe AG will use the collected data to ensure entry to the trade fair for the professional visitor on the scheduled dates. In addition, the data will be used to issue name badges for the trade fair visit.

Since the costs for entry to the trade fair are borne by the exhibitor inviting the professional visitor, the data related to the ticket registration will also be transferred to the exhibitor who issued the invitation (core data and voluntary information).

Legal bases:
  • setting up and allocation of user accounts: Art. 6 (1) b GDPR
  • contractual performance including processing of claims / warranty claims: Art. 6 (1) b GDPR
  • transfer of core data to the exhibitor who issued the invitation: Art. 6 (1) f GDPR


4. Use of further trade fair services

By setting up a user account, in particular when purchasing online tickets or registering for professional visitor tickets or exhibitor passes, trade fair attendees will get access to additional trade fair services offered by Deutsche Messe AG as part of a service package. This includes the following services:

  • Lead Management
  • Favourites Search
  • Routing
  • Name badges

The following data processings are carried out in connection with the individual services:

Lead Management

If desired, Deutsche Messe AG can streamline the forwarding of stored visitor's ticket registration data to exhibitors or other relevant companies, organizations or individuals taking part in the event (e.g. convention or forum participants, speakers, sponsors, etc. - hereinafter "Event Participants"). The Event Participant can scan the barcode on his/her ticket in order to see what data is stored by Deutsche Messe AG.


Favourites Search & Routing

Users of or our website or app can add exhibitors, products and events to their favourites list. On the basis of such favourites list, an optimal route will be generated for the user, which can be processed and stored in the user account. If you have installed the trade fair app - and consented to the use of your location - the app can show your specific route and your location.

Legal basis:

  • contractual performance including processing of warranty claims or complaints: Art. 6 (1) b GDPR.


5. Processing of personal data by DMAG for marketing purposes

DMAG and service providers engaged by it (e.g. letter shops) will use your name and address for further purposes in connection with customer retention and customer reactivation. This will include the delivery by post of information regarding further interesting products and services, because DMAG wishes to draw your attention to interesting offers and establish a long-lasting customer relationship.

Moreover, Deutsche Messe AG will use the mandatory data provided in connection with the use of its offers / services as well as voluntary information provided (see paragraphs 1-4 above) to personalise and constantly improve trade fair attendance for visitors and exhibitors and to provide future offers tailor-made to your interests. We process the data collected in connection with the use of our offers / services to provide you with the best possible support regarding your business development and to point out interesting options for trade fair visitors / exhibitors. Your data will be processed internally and in pseudonymised form in order to comply wit your legitimate interest to ensure protection of your personal data. The data processing allows us to provide you with personalised offers (website, email, post).

We will basically stop processing your personal data collected upon prior use of our offers / services for marketing purposes - including profiling within the scope of direct marketing - if you have not used any of the offers / services of DMAG for a period of up to 5 years with this exception: In the following two years we will continue to process your name, address, company affiliation, and status (professional visitor, exhibitor) as well as the last trade fair you attended for the purpose of direct mailings only.

As a principle, your email address will only be used for marketing purposes if we have obtained your consent.

As far as the telephone number owner comes from Germany, also the telephone number will only be used for marketing purposes if we have obtained your consent. Any telephone number outside of Germany will be used depending on the legal situation of the country concerned, provided you have not objected to commercial use

There are the following exemptions: To the extent DMAG obtains your email address in connection with the sale of products / services, we will use your email address to promote similar own products. You are entitled to object to the use of your data for marketing purposes at any time; this will be pointed out to you upon collection of any data as well as in any marketing communications. Moreover, Deutsche Messe AG will use professional phone numbers within Germany for marketing purposes, to the extent this is based on presumed consent, e.g. within the scope of an existing business relationship.

Legal bases:

  • data processing for marketing purposes, including profiling in connection with marketing purposes, and transfer: Art. 6 (1) f GDPR
  • telephone marketing: Art. 6 (1) a GDPR and Sec. 7 para. 2 no. 2 alt. 2 German Unfair Competition Act (UWG)
  • email marketing: Art. 6 (1) a GDPR and Sec. 7 para. 3 UWG

6. Transfer of personal data to group companies and sales partners of DMAG for marketing purposes

Where trade fair visitors are not based in Germany, DMAG will transfer their postal address provided upon setting up of the customer account (excluding email address, including name, company, industry, function and position) to the company and/or sales partner locally responsible for the support of trade fair visitors. The aim is to establish a long-lasting business relationship between DMAG and trade fair visitors via its subsidiaries / sales partners and to point out further interesting events of DMAG and/or its subsidiaries.

Legal basis:

  • transfer of core data to regional subsidiaries and sales partners of Deutsche Messe AG Group: Art. 6 (1) f GDPR.


7. Subscription to email newsletter

We will only send you marketing communications via email if we have obtained your prior explicit consent. Notwithstanding, we may process your email address for marketing purposes as described in paragraph 5.

Legal basis:

  • email marketing: Art. 6 (1) a GDPR.



IV. Data processing in connection with the use of online services

Hereinafter we will explain what types of data processings are carried out in connection with the access to a website or an app of Deutsche Messe AG.

1. Processing of data upon access to our website - logfile data

When you access our website / app, some pieces of general information will automatically be collected. This information (server logfiles) includes e.g. the type of your browser, the operating system you use, the domain name of your internet service provider and similar information. In addition, your IP address will be transferred and used for the purpose of providing the service requested by you. This information is technically required to accurately provide the contents of websites you call up and are inevitably collected when using the internet.

In accordance with our IT security concept, the generated logfile data will be stored for a period of 3 weeks to enable us to detect and analyse any attacks against our website. The legal basis for this data processing is Art. 6 (1) sentence 1 f GDPR.

2. Processing of data in connection with the use of our website - your requests

If you send us a request via email or via our contact form, we will collect the data provided by you for processing and responding to such request. This information will remain stored for a period of up to two years for verification purposes. The legal basis for this data processing is Art. 6 (1) sentence 1 letter f GDPR.

3. Integration of external service providers

Linking with other services is a fundamental principle of the Internet. Therefore, we have integrated various external service providers into our website.

a. Integration of social plug-ins

To offer you means of interacting with your contacts and more easily share interesting information, our website uses the social plug-ins of various social networks, e.g. Facebook.com, Twitter.com and Google+. The different plug-ins can be recognised by their respective network logos. We use a 2-click approach to ensure that access to our website as such will not trigger a transfer of data.

Only if you click on a plug-in, your browser will establish a direct connection with the servers of the respective network. The network transmits the content of the plug-in directly to your browser and your browser integrates such content into the website. To the extent a network has its seat outside the EU / the EEA, we cannot exclude that your data will be transferred to and processed by a server outside the EU / the EEA. Since we have no influence on the amount of data collected by the networks through the plug-ins or the respective period of use, we hereby inform you according to our present knowledge:

When clicking on a plug-in, the respective network will receive the information that you have accessed the link included in our website. If you are logged into a network, such network can connect this information with your profile. If you do not want the network to collect information on your access to our website, you have to log out before calling up our site. In principle, however, it is possible that a network detects and stores your IP address, even if you are not registered with or logged into such network. Furthermore, we have no information regarding the deletion of data collected by the respective plug-in providers.

The plug-in provider will store the data collected about you as a user profile to be used for purposes of marketing, market research and the demand-oriented design of its website. In particular, this evaluation takes place (also for users not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of a user profile by service providers.

The legal basis for the use of plug-ins is Art. 6, para. 1 sentence 1 letter f GDPR. Please refer to the privacy guidelines of the respective social network for information regarding the purpose, duration and scope of the data collection, the further processing and use of your data, your respective rights, and setting options to protect your privacy:

b. Use of Google Tag Manager

To deliver online marketing and to integrate our external partners we use the Google Tag Manager. This allows us to control the delivery of online advertisements. This tool does not use cookies, but still requires the transfer of IP addresses to Google, where the use of the Tag Manager will be analysed. We have activated a function that automatically anonymises IP addresses prior to their transfer to Google. The legal basis for this data processing is Art. 6 (1) sentence 1 letter f GDPR. The data collected will be deleted after two years.

c. Use of Google Maps

Our website uses Google Maps, a service offered by Google, Inc. This allows us to display interactive maps, to ensure easy traceability of the locations indicated on our website, and to facilitate convenient use of the map functions.

This application is retrieved directly from the Google servers. Google will therefore receive the IP-address currently assigned to you. When you access the function, Google will receive the information that you have called up our respective subsite. If, to what extent and for how long your IP address is stored and internally used by Google is beyond our knowledge. The legal basis for the use of this service is Art. 6 (1) sentence 1, letter f GDPR.

If you are registered with a Google service, Google can assign your visit to your user account. Even if you are not registered with Google or not logged in, it is possible that Google may store your IP address and use it for profiling purposes. Google will store the data collected about you as a user profile to be used for purposes of advertising, market research and/or the demand-oriented design of its websites. In particular, this evaluation takes place (also for user not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of a user profile by Google.

Please note that data processings by Google may be performed outside the EU/EEA. Google will process your personal data also in the U.S. and has accepted the regulations of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. For further information on data protection by Google please go to https://www.google.de/intl/de/policies/privacy.

d. Use of YouTube

Our website uses plug-ins of the website YouTube, which is operated by Google. The operator of the web pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, U.S.A.

When you visit one of our web pages that uses the YouTube plug-in, a connection will be established to the servers of YouTube. The YouTube server will receive information on which of our web pages you have visited.

If you are logged into your YouTube account, YouTube will be able to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in the interest of presenting our online offers in an attractive way; the legal basis therefore is Art. 6 (1) letter f GDPR. We only collect information on the frequency of call-ups of the YouTube videos integrated in our website and will delete the respective data after 2 years.

For further information on the handling of user data please refer to the privacy policy of YouTube at: https://www.google.de/intl/de/policies/privacy .

e. Use of reCAPTCHA

To protect user enquiries via our internet contact form, online ticket registrations and subscriptions to our newsletter, Deutsche Messe AG uses the reCAPTCHA service of Google Inc. The legal basis is Art. 6 (1) letter f GDPR. The prompts of reCAPTCHA are used to discern whether an entry is made by a human being or, improperly, automated machine processing is used. The prompts include the transfer of IP addresses and any further data required by Google for the provision of reCAPTCHA. To this purpose, your entry will be transferred to and further used by Google. By using reCAPTCHA you agree that the recognition you have made will be incorporated in the digitalisation of old works. DMAG will not store any further data about your use of this service.

We have activated IP anonymisation on our website. Therefore, Google will shorten your IP address within the member states of the European Union and contracting states of the agreement of the European Economic Area. Only in exceptional cases will your full IP address will be transferred to a server of Google in the U.S.A. and shortened there. On behalf of the operator of this website Google will use such information to analyse the use of this service. The IP address transmitted by your browser will not be merged with any other data of Google. The data is subject to separate data protection regulations of Google. For further information on the privacy policy of Google please refer to: https://www.google.com/intl/de/policies/privacy/ .

Your browser is outdated, and this may limit the functionalities and website displays. Please upgrade your browser to the latest version.This website uses cookies. By continuing to use this website, you give your consent for Deutsche Messe AG to store cookies on your PC/device and use them to collect and analyze data on your user behavior so that it can provide you with a more personalized web experience. You will find further information under Privacy policy / Cookies.