Data Protection

Last updated: June 23, 2021

The aim of this data protection declaration is to inform you and the public about the type, scope and purpose of the personal data collected, used and processed by us and at the same time inform you about your rights..

1. Definitions

Our data protection declaration is based on the terms of the General Data Protection Regulation (GDPR). When we speak of the following terms in our data protection declaration, we mean the following:

  • Personal data

    Personal data is information that relates to an identified or identifiable natural person (hereinafter referred to as the "data subject"). "Identifiable" is a person who, either directly or indirectly, by assigning an identifier, such as a name, an identification number or location data, as well as an online identifier or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

  • Affected person

    A person is “affected” when their personal data is processed by the person responsible for processing.

  • Processing

    "Processing" is to be understood as the process carried out with or without the help of automated processes that is related to personal data, such as the collection, recording, organization, ordering, storage, adaptation or change that reading, querying, using, disclosing through transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.

  • Restriction of processing

    Restriction of processing is the marking of stored personal data with the aim of restricting their future processing

  • Profiling

    “Profiling” is the automated processing of personal data that is used for evaluation, analysis or prediction (in particular with regard to work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or change of location).

  • Pseudonymization

    Pseudonymization is the processing of personal data in a way in which the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that guarantee that the personal data cannot be assigned to an identified or identifiable natural person.

  • Controller or controller

    The person responsible or the person responsible for the processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible or the specific criteria for his nomination can be provided for in accordance with Union law or the law of the member states.

  • Processors

    Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible.

  • Recipient

    Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data as part of a specific investigation according to Union law or the law of the member states are not considered recipients.

  • Third Party

    A third party is a natural or legal person, public authority, agency or body other than the data subject, the person responsible, the processor and the persons who are authorized to process the personal data under the direct responsibility of the person responsible or the processor.

  • Consent

    Consent is any voluntary, informed and unambiguous declaration of intent given by the person concerned for the specific case in the form of a declaration or other unequivocal affirmative action with which the person concerned indicates that they consent to the processing of their personal data is.

3. Collection of data and legal basis for processing

Collection of general data and information

When you access our website, information of a general nature is automatically recorded. This information (so-called "server log files") includes, for example, the type of Internet browser, the operating system used, the domain name of your Internet service provider and the like. No conclusions can be drawn about your person on the basis of this information. This information is technically necessary in order to correctly deliver the website content you have requested and is mandatory when using the Internet. Anonymous information of this kind is statistically evaluated by us in order to optimize our website and the technology behind it.

The following information is recorded and stored when you access our website:

  • IP address of your PC or your internet-enabled device
  • Access date
  • Name and URL of the file called up
  • Referrer URL
  • Browser / operating system / access provider

The data collection and storage serve the following purposes:

  • Establishing a connection to the website
  • Technical use of the website
  • System security
  • Administration.

The data processing takes place in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https: //" and the lock symbol in your browser line.

Registration and ordering on our website

If you register on our website or create a user account, personal data will also be collected from you. We would like to point out that registration may offer more extensive access to the content of our website, but is not a mandatory requirement for using our website. The personal data are transmitted to the person responsible for the processing results from the respective input mask that is used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the person responsible for processing and for their own purposes. The person responsible for processing can arrange for the transfer to be made to one or more contract processors, for example a parcel service provider for postal delivery to you, who also uses the personal data exclusively for internal use attributable to the person responsible for processing.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you register on our website, the following data is collected from you and then stored by us:

  • Name and address
  • Email address
  • Telephone number

The purpose of data collection and storage is:

  • Customer identification
  • Processing and handling the order for correspondence with you
  • Accounting
  • To process any liability claims that may exist, as well as the assertion of any claims against you
  • Technical administration of the website
  • Administration

Your consent will be obtained from you during the ordering process before this data is processed.

The data processing takes place according to Art. 6 Para. 1 S. 1 lit. b GDPR.

Contact option via the website

If you send us inquiries using the contact form or email, your details from the request form or the email, including the contact details you provided there, will be stored by us for the purpose of processing the request and / or contacting the person concerned. We do not pass this data on to third parties. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR. The data processing because your consent is based on Art. 6 para. 1 sentence 1 lit. a GDPR. The deletion of the personal data collected for the use of the contact form takes place automatically after your request has been dealt with. You have the right to withdraw your consent to data processing at any time.

Comment function in the blog on the website

If comments are made on our site, in addition to this information, the selected user name is also recorded and stored so that illegal content can also be tracked to relieve our burden.

4. Storage period

We store the personal data collected and transmitted to us for the processing of your order until the statutory retention period expires. Your data will then be deleted by us, unless we are obliged to store it for a longer period in accordance with Article 6, Paragraph 1, Sentence 1, Letter c GDPR due to retention and documentation obligations under tax and commercial law (from HGB, StGB or AO) or you have consented to further storage in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a GDPR

5. Duty to provide - possible consequences of failure to provide

The provision of personal data is partly required by law (tax law) or can result from contractual regulations (transparency of the contractual partner). Failure to provide personal data would prevent the conclusion of a contract and therefore does not take place. The person responsible will provide you with any information about the provision of personal data required by law or contract

6. Existence of automated decision-making

We do not use automated decision-making or profiling.

7. Routine deletion and blocking of personal data

When the storage period, which is explained in more detail under 4 above, has expired, the personal data will be routinely deleted.

8. Rights of the person affected by the data processing

As a person affected by data processing, you have the following rights:

  • Art. 15 GDPR:You have the right to request information about your personal data processed by us. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;
  • Art. 16 GDPR: You have the right to request the correction of incorrect or incomplete personal data stored by us;
  • Art. 17 GDPR: You have the right to delete your personal data stored by us, unless the processing is to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defense of legal claims is necessary to demand;
  • Art. 18 GDPR: You have the right to restrict the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you do need to assert, exercise or defend legal claims or if you have objected to processing in accordance with Art. 21 GDPR;
  • Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to have it transmitted to another person responsible;
  • Art. 7 Para. 3 GDPR: You have the right to revoke your consent to data processing. As a result, we are no longer allowed to continue the data processing based on this consent in the future;
  • Art. 77 GDPR: You have the right to complain about data processing to a supervisory authority at your usual place of residence or workplace or at our company headquarters (right of appeal).

9. Cookies

Use, legal basis and purpose

We use so-called "cookies" so that we can optimally design and further optimize the range of functions and the technical presentation of our website. These are small text files that are stored or saved on your device. With the help of these "cookies", data can be saved on your computer when you visit our website.

We also use cookies on our website that enable an analysis of the surfing behavior of the users.

When you visit our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 (1) (a) GDPR if the user has given his / her consent.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages. We need cookies for the following applications: Acceptance of language settings. The user data collected by technically necessary cookies are not used to create user profiles.

The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and so we can continuously optimize our offer.

Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted to our site from there. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

10. Social media

Data processing in social media

Our company is active on various social media. In the context of communication with users, data of users outside the European Union can be processed, which can result in risks due to the difficulty in enforcing rights. With regard to US providers who are certified under the Privacy Shield, we would like to point out that they undertake to comply with the data protection standards of the EU.

As a rule, the user data is processed for advertising and market research purposes in order to be able to create usage profiles from usage behavior. The usage profiles can be used, for example, for the targeted placement of advertisements. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored.

Legal basis for processing:

The legal basis for processing users' personal data is our legitimate interest in effectively informing users and communicating with users in accordance with Article 6 (1) (f) GDPR. If the users are asked to consent to the data processing described above by the respective providers of the platforms, the legal basis for processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR.

The respective provider has the fastest access to the user data. This can take the most effective measures. The rights of the data subject can therefore be asserted directly with the provider directly. Otherwise, we are at your side at all times.

Xing Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Each time you visit one of our pages that contains Xing functions, a connection to the Xing servers is established. To the best of our knowledge, personal data is not saved. In particular, no IP addresses are saved or usage behavior is evaluated. Further information on data protection and the Xing Share button can be found in Xing's data protection declaration at https://www.xing.com/app/share?op=data_protection

LinkedIn Our website can use social plugins ("plugins") from the social network " Use LinkedIn ", which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The plugins are marked with a LinkedIn logo or the addition "LinkedIn Social Plugin". When you visit a Messe Düsseldorf GmbH website that contains such a plugin, a direct connection to the LinkedIn servers is established by clicking on the icon. The content of the plugin is transmitted directly from LinkedIn to your browser, which integrates it into the website. By integrating the plugins, LinkedIn receives the information that you have accessed the corresponding page on our website. If you are logged in to LinkedIn, LinkedIn can assign the visit to your LinkedIn account. If you interact with the plugins, for example leave a comment, the corresponding information is transmitted directly from your browser to LinkedIn and stored there. The purpose and scope of the data collection and the further processing and use of the data by LinkedIn as well as your related rights and options for protecting your privacy can be found at http://www.linkedin.com/legal/privacy-policy . If you do not want LinkedIn to collect data about you via our website when you use the plug-in, you must log out of LinkedIn before visiting our website.

11. Online Marketing

Use of GoogleMaps

We use the function for embedding GoogleMaps maps from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website.

The function enables the visual display of geographic information and interactive maps.

When the pages in which GoogleMaps maps are integrated, Google also collects, processes and uses data from visitors to the pages. You can find more information on the collection and use of data by Google in Google's privacy policy at https://www.google.com/privacypolicy.html . There you can also change your settings in the data protection center so that you can manage and protect your data processed by Google.

Your data may also be transmitted to the USA. There is an adequacy decision by the European Commission for data transfers to the USA.

For reasons that arise from your particular situation, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) f GDPR.

To do this, you must switch off the JavaScript application in your browser. However, we would like to point out that in this case you may not be able to use all the functions of this website, such as the interactive map display, to their full extent.

Use of Google reCAPTCHA

We use the reCAPTCHA service from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website. The purpose of the query is to distinguish whether the input is made by a person or by automated, machine processing. The query includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. Your data may also be transmitted to the USA. There is an adequacy decision by the European Commission, the "Privacy Shield", for data transfers to the USA. Google participates in the "Privacy Shield" and has submitted to the requirements. By clicking on the query, you consent to the processing of your data. The processing takes place on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.

You can find more information about Google reCAPTCHA and the associated data protection declaration at: https://www.google.com/privacy/ads

Google Ads

Part of our website is the integration of the so-called Google AdWords service. This is an internet advertising service that allows advertisers to place ads in Google's search engine results as well as in the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance by means of which an advertisement is only displayed in Google's search engine results if the user calls up a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operating company for the services of Google AdWords is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website. The person concerned can prevent the setting of cookies by our website, as already shown above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

The data subject also has the option of objecting to interest-based advertising by Google. To do this, the person concerned must call up the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/

Google Analytics (with anonymization function)

Part of our website is the integration of the so-called Google Analytics service. This is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called "cookies". These are small text files that are stored on your device and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. Google will use the information obtained on behalf of the website operator to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link http: // tools .google.com / dlpage / gaoptout? hl = de Download and install the available browser plug-in.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics.

Google Optimize

Our website uses the "Google Optimize" web analysis and optimization service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter "Google Optimize"). We use the Google Optimize service to increase the attractiveness, content and functionality of our website by showing new functions and content to a percentage of our users and statistically evaluating changes in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics).

Google Optimize uses cookies that enable you to optimize and analyze your use of our website. The information generated by these cookies about your use of our website is usually transferred to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymization, so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. Google will use this information to evaluate your use of our website, to compile reports on the optimization test and the associated website activities, and to provide us with other services relating to website activity and internet usage.

You can prevent the storage of cookies by setting your internet browser accordingly. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de. You can find more information about data collection and processing by Google in Google's data protection information, which you can access at http://www.google.com/policies/privacy.

Microsoft Clarity

We use Microsoft Clarity on our website. This is a web analysis service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 USA, hereinafter referred to as “Microsoft”.

Through certification according to the EU-US data protection shield ("EU-US Privacy Shield")

https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK

The Microsoft Clarity service is used to analyze the usage behavior of our website. The legal basis is Art. 6 Paragraph 1 lit.f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, are transmitted to a Microsoft server in the USA and stored there. However, we use Microsoft Clarity with the so-called anonymization function. With this function, Microsoft shortens the IP address within the EU or the EEA.

The data collected in this way is in turn used by Microsoft to provide us with an evaluation of the visit to our website and of the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Retargeting releva

This website uses retargeting technology from releva GmbH, Feilnerstr. 10, 10969 Berlin ( www.releva.nz ). This makes it possible to target visitors to our website with personalized, interest-based advertising. The advertising material is displayed on the basis of a cookie-based analysis of previous usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests as part of a pseudonymized user profile and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. As a result, you will see advertising that is very likely to correspond to your product and information interests. If the information collected is related to a person, it is processed in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in displaying personalized advertising and in market research. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. In order to object to the use of cookies on your computer in general, you can set your internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. You can also permanently object to the setting of cookies or the creation of a pseudonymized user profile by using the available opt-out function under the following link: https://releva.nz/datenschutz

Further information and the data protection provisions regarding advertising and releva GmbH can be viewed at https://releva.nz/datenschutz

12. Payment processing

PayPal

Components from PayPal are integrated on our website. PayPal is an online payment service provider. Payments are processed through accounts that are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have an account. An account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you use such payment options, we will pass on your personal data required for payment processing to PayPal. As a rule, the scope of the personal data passed on is: first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that are necessary for payment processing. In order to process the purchase contract, personal data related to the respective order is also necessary.

The purpose of the data transfer is to process payments and prevent fraud. A data transfer on our part to PayPal will take place in particular if there is a legitimate interest in the data transfer. PayPal may transfer the personal data received to credit agencies as part of its own data protection declaration. The purpose of this transmission is to check your identity and creditworthiness. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data is to be processed on behalf of the company. The data subject has the option of revoking their consent to the handling of personal data from PayPal at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

The data transfer to PayPal described in this section only takes place if you select this payment option.

PayPal's current data protection regulations can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe

On our website we offer, among other things, payment via Stripe and the associated payment methods. The provider of these payment services is:

Stripe Payments Europe Ltd

Block 4, Harcourt Center

Stripe Payments Europe Ltd

Harcourt Road

Dublin 2

If you choose to pay via Stripe, the payment details you have entered will be transmitted to Stripe.

Your data is transmitted to Stripe on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past. All data required for payment processing are used exclusively for the execution of payments and are transmitted using the “SSL” method. Stripe is PCI DSS certified. Stripe transfers, processes and, if necessary, stores personal data outside the EU. Stripe is subject to the Safe Harbor Agreement. Information on Stripe's data protection is available here: https://stripe.com/de/privacy