Security and data protection
You can view this information under “Security and Data Protection” at any time.
1. Data controller/contact
a. The data controller responsible under the German Federal Data Protection Act is:
b. Data Protection Officer
Data protection officer
e-mail: firstname.lastname@example.org .
2. Personal data
3. Collection and use of your data
3.1 Collection of access data
When you access our website, your terminal automatically transfers data for technical reasons. The following data are stored separately from other data that you may possibly transmit to us:
- Date, time and duration of your visit to our websites
- IP address, that has been assigned to you by your Internet provider
- the web page visited
- the user tool (i.e. web browser, operating system) you have used to access the site
- the action that you carried out on our website
- the terms you used in the search engines and in the site search and the search result
- whether a site was successfully accessed or not
- what information was called up (incl. downloads)
- from which server you accessed the website and the website from which you reached the current website
- These data are exclusively stored for technical purposes and are not at any time associated with a specific person.
The handling of your personal data for the purposes of providing this website and of communicating via this website are carried out on the basis of our legitimate interest pursuant to Article 6 (1) (f) General Data Protection Regulation (GDPR). It is technically necessary for us to process specific personal data (e.g. IP address) in order to provide this website. In order for you to communicate with us, it is necessary for us to handle respective personal data.
In the context of the necessary balancing of interests we have balanced your interest in the respective privacy of your personal data and our interest in the provision of this website and the establishment of contact with one another. Your interest in privacy is outweighed in both cases. If this were not the case, we would be unable to provide this website or to react to your contact query.
3.2 Ticket Shop
3.2.1 Various data on the visitor are required in order to purchase a ticket from our Ticket Shop. The following mandatory details are necessary:
- Your name
- Your e-mail address
- Company (only for trade visitors)
- Address (place, street, house number, postcode)
- Marketing characteristics
- A password
These data are necessary in order to set up and manage a user account for you. Not least we require these and possibly other data in order to be able to respond to possible future queries from you.
We process these data in order to be able to provide you with the services of our ticket shop and to fulfil the respective contracts agreed with you pursuant to Article 6 (1) (b) GDPR. The data is also processed for the promotion of our events and services (on the basis of Section 7 Paragraph 3 UWG (German Fair Trade Practices Act)) and for optimization and for market research and opinion research.
Insofar as we, as described above, require your data for the purposes of providing the functions of our ticket shop, you are contractually obliged to provide us with these data. Without these data we are unable to provide you with these functions.
3.2.2 Furthermore, you can enter the following voluntary details in the course of your registration in your profile:
- Academic title
- Other title
- Company (only voluntary for private visitors)
- House number
- P.O. Box
- P.O. Box, postcode:
- Web address
The entry of these details is voluntary and not necessary in order to purchase a ticket.
The processing of this personal data is only carried out on the basis of the express consent you have provided to us pursuant to Article 6 (1) (a) GDPR.
3.3 Community functions
We offer various community functions on our websites. You can use these community functions to interact with other users. These functions include Matchmaking365 and ambista.
Pease note that these areas could, corresponding to your settings, be publically accessible, and that all personal information that you set within them or provide in the course of your registration can be seen by others. We cannot control how other users of our website utilize this information. In particular, we cannot prevent unwanted messages being sent to you. Content placed in the community areas can be stored for an unlimited period. Should you, at some future time, wish the removal of specific placed material, send us a corresponding e-mail at the address given above.
We collect all data entered in the context of the community functions in order to be able to provide you with the community functions as intended, Article 6 (1) (b) GDPR.
Insofar as we, as described above, require your data for the purposes of providing the community functions, you are contractually obliged to provide us with these data. Without these data we are unable to provide you with the corresponding community functions.
3.4 Contact form
If you submit queries to us via our contact form, your details from the contact form including the contact data you have provided there
- First name
- Activity related with Koelnmesse
- Tel. no.
- Fax number
are saved and processed for the purpose of answering your query.
We collect these data in order to be able to accept and process your query, Article 6 (1) (b) GDPR.
Insofar as we, as described above, process your data for the purposes of accepting and processing your queries, you are contractually obliged to provide us with these data. Without these data we are unable to accept and process your queries.
3.5 Registration as an exhibitor or a visitor
You can register on our website as a visitor, trade visitor or exhibitor. We process the personal data that you have provided us with in the course of your registration in order to accomplish this.
The processing of your personal data is carried out for the purposes of initiating, executing and winding up the corresponding user contract, Article 6 (1) (b) GDPR.
You are not required to register in order to participate in Koelnmesse events. You can of course also purchase an anonymous ticket at the box office counters on site.
Without registration, we are unfortunately unable to provide you with services such as online advance ticket sales or simplified repeat ticket sales, matchmaking, travel services or other services.
In detail, we process your personal data for the following purposes:
- The purchase of tickets for our events;
- The redeeming of vouchers;
- The registration of future tickets “with one click.”
- The delivery of and payment for other services of Koelnmesse (e.g. trade fair directories and catalogues);
- Checking trade visitor status;
- Announcements, trade information and other materials concerning events of interest to you;
- The offer of individually customized services;
- Query regarding participation in our market and opinion research;
- The prevention or discovery of misuse and fraud, in particular in the case of vouchers and free tickets;
- If necessary, simple actualization of your personal data over the Internet.
Data collected subsequently is also assigned to your customer account. These include, for example, data collected when ordering a ticket.
We reserve the right pursuant to Section 7 (3) UWG to send you by e-mail information on goods and services similar to those that you have purchased from us. You can object to the receipt of such information via e-mail at any time. Every e-mail contains the information about how you can unsubscribe from the receipt of future e-mails.
5. Information on cookies and targeting
5.1 We use so-called browser cookies to collect information about your use of our website. Cookies are small text files that are stored on your hard drive where specific preferences and data regarding the exchange of information between our system and your browser is stored. A cookie generally contains the name of the domain from which the cookie data was sent and information about the age of the cookie and an alphanumeric identification sign. Cookies enable our systems to recognize the user’s device and to make possibly existing settings available immediately. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the respective user’s computer. Cookies help us to improve our website and enable us to offer you a better service that is even-more customized to your needs. They enable us to recognize your computer when you return to our website and so:
- To store information about your preferred activities on our website and so to orient our website on your individual interests. This includes, for example, advertising that corresponds to your personal interests;
- To increase the speed with which your queries are processed;
5.2 The cookies used by us only store the aforementioned data about your use of our website. This is carried out not on the basis of an assignment to you personally, but by the allocation of an identification number to the cookie (“cookie ID”). The cookie ID is not associated with your name, IP address or similar data that would enable the attribution of the cookie to you. You can find out how to prevent the use of browser cookies under Item 5.5.
5.3 Our website uses so-called tracking technologies (you will find further details in Item 6). We use these technologies in order to make the Internet offer more interesting for you. This technology enables Internet users who have already shown an interest in our website to be presented with advertising on the websites of our partners. The display of these advertisements on our partners’ websites takes place based on the use of cookie technology and an analysis of the previous user behaviour. This analysis is carried out using a pseudonym and user profiles with your personal data are not put together.
Should you wish to opt out of this tracking process, you can refuse to allow the setting of a cookie required by this process:
For example, by means of a browser setting that deactivates the automatic setting of cookies in general. Please use e.g. the “Do not track” (“DNT”) option of your web browser.
Alternatively, you can use the following link:
Please note that you must carry out this step individually for every one of your terminals and/or browsers.
5.5 Should you not wish the use of browser cookies, you can set your browser in such a way that the storage of cookies is not accepted. Please note that in this case you may only be able to use our website on a limited basis or not at all. Should you wish to only accept our own cookies, and not the cookies of our service providers and partners, you can select the setting “Block third-party cookies” in your browser.
6. Pseudonymous user profiles
6.1 Conversion tracking by third parties
The following conversion tracking by third parties may be used:
- Ligatus Conversion Pixel
You will find further information on data protection and cookies from Ligatus GmbH, Hohenstaufenring 30–32, 50674 Cologne, Germany, here .
- Outbrain Conversion Pixel
You will find further information on data protection and cookies from Outbrain Inc., 39 West 13th Street, 3rd floor, New York, NY 10011, USA, here .
- “DoubleClick by Google” (Accuen Conversion Pixel)/Google Adwords Conversion Pixel
You can prevent the storage of the cookies by carrying out a corresponding setting in your browser software; however, we expressly inform you that you may not then be able to use the full scope of all of the features of our websites. In addition, you can disable the collection of the data created by the cookies concerning your use of the websites and the processing of this data by Google if you download and install the browser plugin that is available under the following link under the point “DoubleClick” deactivation plugin:
You will find further information on data protection and cookies from Google here .
- Twitter Conversion Pixel
You will find further information on data protection and cookies from Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, here .
- Seeding Alliance conversion pixel
You will find further information on data protection and cookies from Seeding Alliance GmbH, Lichtstr. 25, 50825 Cologne here . You can object to the collection and storage of data in the context of Seeding Alliance GmbH with future effect at any time.
- Plista Pixel
You will find further information on data protection and cookies from Plista GmbH, Torstraße 33-35, 10119 Berlin here . You can object to the collection and storage of data in the context of Plista GmbH with future effect at any time.
- DELFINE MEDIA Pixel
You will find further information on data protection and cookies from DEFINE MEDIA Pixel GmbH, An der Raumfabrik 31a, 76227 Karlsruhe here .
- Adform Pixel
You will find further information on data protection and cookies from Adform A/S, Wildersgade 10B, 1st floor, DK-1408 Copenhagen, Denmark here . You can object to the collection and storage of data in the context of Adform A/S with future effect at any time.
- The Trade Desk' Pixel
You will find further information on data protection and cookies from Trade Desk Inc., Chestnut Street, Ventura, CA93001, USA, here . You can object to the collection and storage of data in the context of The Trade Desk Inc. with future effect at any time.
- ADITION Pixel
You will find further information on data protection and cookies from ADITION TECHNOLOGIES AG, Oststraße 55, 40211 Düsseldorf, here . You can object to the collection and storage of data in the context of ADITION with future effect at any time.
- LinkedIn Conversion Pixel
You will find further information on data protection and cookies from the LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale CA 94085, USA, here .
- Facebook Conversion Pixel
You will find further information on data protection and cookies from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, here .
- Facebook Website Custom Audiences Pixel
We use the “Website Custom Audiences” pixel from Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA on our websites. Tracking pixels are integrated into our websites for this purpose. When you visit our sites, the tracking pixel is used to establish a direct connection between your browser and Facebook’s server. As a result, Facebook receives information from your browser including the fact that your terminal has accessed our website. If you are a Facebook user, Facebook can assign the visit to our websites to your user account. We would like to point out that we, as the providers of the websites, have no knowledge of the content of the transmitted data or of how it is used by Facebook. We can only select which sectors of Facebook users (such as age, interests) should see our advertisements displayed. In this process, we use one of two modes of working from Custom Audiences, in which no datasets — in particular, none of our users’ e-mail addresses — are transferred to Facebook.
Click here if you do not wish data to be collected using Custom Audiences: https://www.facebook.com/settings?tab=ads#_=_
Alternatively you can deactivate the Facebook pixel on the Digital Advertising Alliance website under the following link: http://www.aboutads.info/choices/
- Taboola conversion pixel
You will find further information on data protection and cookies from Taboola Inc. (28 West 23rd St., 5th floor, New York, NY 10010) here (You will find opt-out information under “Site Visitor Choices”)
- Amazon Pixel
We use the web analysis services Amazon Conversion Pixel and Amazon Remarketing Pixel from Amazon of Amazon.com, Inc, 410 Terry Ave N, Seattle, WA 98109, USA on our websites.
When you visit our sites, Amazon receives the information that you have called up our website. For this purpose, a so-called Web Beacon (these are invisible graphics) is called up from Amazon and Amazon places a cookie on your terminal, and as a result data is transferred to Amazon.
Amazon uses the cookie placed in order to recognize you on other websites, in apps, and within Amazon services and to show you personalized advertising as appropriate.
You can prevent the storage of the cookies by making a corresponding setting in your browser software. However, we inform you that you may not then be able to use the full scope of all of the features of our websites. You can also avoid the collection, by Amazon, of the data generated by the cookie regarding your use of the website and Amazon’s processing of this data by clicking on the following link and there selecting the option “Do not show me interest-based ads provided by Amazon”: https://www.amazon.de/adprefs . Alternatively you can make the corresponding settings under http://www.youronlinechoices.com/de .
This results in the setting of an opt-out cookie in your browser that prevents the future recording of your data by the Amazon Pixel when you visit our website. This opt-out remains in effect until you delete the opt-out cookie.
Further details on the collection of data are available from Amazon at: http://www.amazon.de/gp/BIT/InternetBasedAds .
We do not have any influence on the data collected nor are we aware of the full scope of the data collected. These data are transferred to the USA and are evaluated there.
- Google Analytics with Conversion Tracking
We use Google Analytics, a Web analysis service from Google Inc. (“Google”), including the function “Conversion Tracking”. Google Analytics employs so-called “cookies”, which are text files that are stored on your terminal and make it possible to analyse how you are using the website, the products that you view and possible purchases that you make. No personal data are collected during this process. The information created by the cookie (including your abbreviated IP address) is transferred to a Google server in the USA and stored there. Google will use this information to evaluate it, to create reports on the website activities and the products viewed or sold for the operators of the website, and to provide additional services connected with the use of the website and the Internet. If applicable, Google will also transfer this information to third parties, insofar as this is legally prescribed, or insofar as third parties process this information on behalf of Google.
You can deactivate Google Analytics by means of a browser add-on, should you not want the website analysis. You can download the add-on here: https://tools.google.com/dlpage/gaoptout?hl=en .
The use of Google Analytics with Conversion Tracking takes place on the basis of our legitimate interest in a needs-based design, the statistical evaluation and the efficient promotion of our website and the fact that your legitimate interests are not overriding pursuant to Article 6 (1) (f) GDPR.
6.2 Further tools for the purposes of marketing and optimization
- Use of Google AdWords and Remarketing
We also place advertisements using Google AdWords, in order to draw attention to our services outside the display network. The corresponding advertisements are displayed by Google after a search query on the part of the user.
Cookies are subsequently used to help register on our website how many users reached our website via one of our advertisements. The anonymous statistics that we gain from this process enable us to optimize our advertisements. The cookie is stored with the click on an advertisement.
We also use Google Analytics for the statistical evaluation of the data from AdWords. The storage of the cookies can be prevented using the settings of your browser. In this case your visit to our website also does not appear in the anonymous user statistics.
The use of Google AdWords and Remarketing takes place on the basis of our legitimate interest in the efficient promotion of our website, the success monitoring of our advertisements and the fact that your legitimate interests are not overriding pursuant to Article 6 (1) (f) GDPR.
- Google AdSense
In addition, Google informs users how ads are personalized in the Advertising preferences . These settings can be accessed on Google's My Account page and most links labeled "Google Ads" or "Privacy Info" in Google Ads. Users can completely disable personalized ads. These options allow users to interact more with the ads they see and less likely to be distracted by them. For more information, please refer to Google's frequently asked questions about advertising policies .
- Google Tag Manager
Google Tag Manager is a solution that enables us to manage various website tags using a single interface. The Tool Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect any personal information. The tool triggers other tags which could themselves collect data. Google Tag Manager does not access these data. If deactivation is carried out at domain or cookie level, this remains in force for all tracking tags that have been implemented using Google Tag Manager.
- Facebook Insights
Our Facebook page serves the purpose of enabling us to actively communicate with our customers and interested parties. We use this platform to provide information about our trade fairs and other events.
When you visit our Facebook page, your personal data can be automatically collected and stored for the purposes of market research and advertising. This data is used with pseudonyms to create user profiles. As a rule, cookies are placed on your terminal for this purpose. The cookies store the user’s behaviour and interests. Further information about this is available from Facebook under the following link: http://en-gb.facebook.com/help/pages/insights.
The use of the statistical information about the utilization of the Facebook page made available by Facebook (“Facebook Insights”) takes place pursuant to Article 6 (1) (f) of the General Data Protection Regulation (GDPR) within the framework of a balancing of interests for the purposes of our predominant legitimate interests in optimizing the presentation of our services and effective communication with our customers and interested parties.
The data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Article 26 GDPR. You can read this agreement here: https://www.facebook.com/legal/terms/page_controller_addendum
Facebook has its headquarters in the USA. An adequacy decision by the European Commission for the USA has been adopted. This decision is based on the EU-US Privacy Shield, to which Facebook is subject: https://www.privacyshield.gov/EU-US-Framework
You can find a link to the opt-out option here: https://www.facebook.com/settings?tab=ads
- LeadLab (wiredminds)
Products and services from wiredminds GmbH (www.wiredminds.de) are used on this website for the purposes of marketing and optimization. In the process, data is collected, processed and stored, and used to create usage profiles under a pseudonym. The usage profiles are completely anonymized where this is possible and sensible. Cookies may be used in this process. Cookies are small text files that are stored in the visitor’s Internet Browser and are used to recognize the Internet Browser. The data collected, which may also include personal data, are transferred to wiredminds or collected directly by wiredminds. wiredminds is permitted to use information that has been left as a result of a visit to a website to create anonymized usage profiles. The data obtained in this way are not used to personally identify the visitor to this website without the specifically granted consent of the person affected and they are not combined with personal data concerning the bearer of the pseudonym. Insofar as IP addresses are recorded, these are anonymized by the deletion of the last number block immediately after their collection. You can object to the collection, processing and storage of data with future effect at any time.
- Google Maps
- Google Webfonts
This website uses the so-called Webfonts to represent the typefaces. These are provided by Google ( http://www.google.com/webfonts/ ). To accomplish this, your browser loads the required Webfont into the browser cache when the page is called up. This is necessary in order for your browser to be able to display an optically improved representation of our text. If your browser does not support this function, your computer will be use a standard font for the display.
You will find further information about Google Webfonts under https://developers.google.com/fonts/faq?hl=en-GB&csw=1
You will find general information about the topic of data protection at Google under http://www.google.com/intl/en-GB/policies/privacy/
- ADEX DMP-TECHNOLOGY
We use the "DMP tag technology" of The ADEX GmbH, Berlin, for the anonymous collection of information about your usage behavior and the provision of such anonymous information to Third Party Providers for the display of Online Behavioral Advertising. You can customize the settings for collection and use of information via the technology of The ADEX in your cookie settings or by clicking the following link: http://de.theadex.com/company/consumer-opt-out/#opt-in-out
Alternatively, you can opt out of the settings for collection and use of information by activating or deactivating The ADEX (available as ADEX) as a provider in the central preference manager of YourOnlineChoices .
- Push notifications
You can opt in to receive our push notifications. To send our push notifications, we use the delivery service "CleverPush", which is provided by CleverPush GmbH, Nagelsweg 22, 20097 Hamburg ("CleverPush").
By that you will receive regular messages about the event you have selected and the corresponding offer.
To opt in, you must confirm your browser's request to receive notifications. This process is documented and stored by CleverPush. This includes saving the opt in time and your browser ID or device ID. The collection of this data is required so that we can understand the processes in case of misuse and therefore serves our legal protection. To show you the push notifications, CleverPush collects and processes your browser ID on our behalf and your device ID in the case of mobile access. By subscribing to our push notifications, you agree to their receipt. Legal basis for the processing of your data after registration for our push notifications is in the presence of your consent Art. 6 (1) (a) GDPR.
CleverPush also statistically evaluates our push notifications. CleverPush can detect if and when our push notifications were displayed and clicked by you. This enables us to determine which push notifications are of interest to recipients, in order to match future messages to the presumed interests of all recipients and thus increase interest in our offer. In addition to the push token or device ID, we also store the focus of the app on which the push notifications were activated (e.g. business, sports, etc.). We also use this information to send push notifications to the respective subscribers who are in their presumed interests. The legal basis of the processing is in each case Art. 6 (1) (f) DSGVO. A push token or device ID is only assigned to a specific person if we should be legally obliged to do so, to defend against claims against us if this is required as evidence, and to prosecute any violations of the law.
Your consent to the storage and use of your personal information to receive our push notifications and the statistical survey described above may be revoked at any time with future effect. Furthermore, you can object to the use of personal data described above at any time on the basis of Art. 6 (1) (f) DSGVO. To revoke consent, you can change the setting to receive push notifications in your browser. If you use our push notifications on a desktop PC with the operating system "Windows", you can also unsubscribe our push notifications by right-clicking on the respective push notification in the settings that appear there.
Your data will be deleted as soon as they are no longer necessary to achieve the purpose of their survey. Your data will be stored as long as the subscription to our push notifications is active.
Under the following link, the process of unsubscribing will be explained in detail: https://cleverpush.com/faq .
To accelerate the retrieval of content (e. g. images) and to defend against attacks, CleverPush uses the offers from cloudflare.com, an offer from Cloudflare, Inc., within the scope of order processing based on the standard contractual clauses.
CleverPush does not store any data on Cloudflare's servers that contain personal data, but only general content such as text or images. When this content is called up, the end device you are using establishes a connection to Cloudflare and this leads to the processing of the IP address of the end device you are using.
7. Data processing by social networks
We maintain publicly accessible profiles in social networks. The individual social networks that we use are listed below.
Social networks such as Facebook, Google+ etc. can normally carry out comprehensive analyses of your behaviour as a user when you visit their websites or a website with integrated social media content (e.g. Like buttons or advertising banners). Numerous processing operations that are relevant to data protection are triggered by a visit to one of our social media sites.
Specifically, if you visit one of our social media sites while you are logged in to your social media account, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded when you are not logged in or if you do not have an account with the respective social media portal. In this case, the data acquisition is accomplished e.g. by using cookies that are saved on your terminal or by recording your IP address.
The operators of the social media portals can use the data collected in this way to create user profiles in which your preferences and interests are stored. As a result, you can be presented with interest-based advertising both inside and outside the respective social media site. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are, or have been, logged in.
Please also note that we are unable to trace all of the processing operations on the social media portals. Depending on the provider, further processing operations could be carried out by the operators of the social media portals. You can find details of such further processing in the terms and conditions of use and the privacy policies of the respective social media portals.
Our social media sites are intended to ensure the most comprehensive possible presence in the Internet. This is in our legitimate interest pursuant to Article 6 (1) (f) GDPR. The analytical processes initiated by the social networks may be based on differing legal foundations, which must be stated by the operators of the social networks (e.g. consent pursuant to Article 6 (1) (a) GDPR).
Controller and assertion of rights
When you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. You can basically assert your rights (access, rectification, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that despite our joint responsibility with the operators of the social media portals we do not have comprehensive influence on the data processing operations of the social media portals. Our opportunities essentially depend on the corporate policies of the respective provider.
Duration of storage
The data we collect directly through our social media sites is deleted by our systems as soon as there is no longer any need for storing this data, if you ask us to delete it, or if you revoke your consent to have the data stored. Stored cookies remain on your device until you delete them. This clause does not affect mandatory legal requirements, in particular those specifying storage periods.
We have no influence on the length of time that your data is stored by the operators of the social networks for their own purposes. To find out more, please refer to the information provided by the operators of the respective social networks (e.g. read their privacy policies; see below).
Special social networks
We have a Facebook page. This service is provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.
We have an agreement with Facebook (Controller Addendum) concerning the joint processing of the data. This agreement stipulates which data is processed by us and which is processed by Facebook whenever you visit our Facebook page. You can read this agreement by clicking on the following link: https://www.facebook.com/legal/terms/page_controller_addendum
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads .
We do not use the plugins of the social networks Facebook, Twitter, Google+, LinkedIn and Xing themselves on our website. Our buttons for sharing content via social media are implemented using the software “Shariff,” which first transmits the data to the respective network operator when you click the buttons. If you would like to learn more about Shariff, click here .
Various data are first transferred to the respective social network when you click on the corresponding button. These data can include:
- Date and time of the website access
- URL of the website which the visitor is browsing
- URL of the website which the visitor previously visited
- Browser used
- Operating system used
- IP address of the visitor
9. Transfer of data
In principle, a transfer of your personal information without your prior express consent will only take place in the following cases:
- When it is required for the investigation of an unlawful use of our services or for the prosecution, personal data are transferred to the law-enforcement authorities and if necessary to injured third parties. However, this only occurs when there are concrete indications of unlawful or abusive behaviour. A transfer can also take place when it is necessary for the enforcement of terms and conditions of use or of other agreements. We are also legally obliged to provide information to specific public authorities on request. These are prosecutorial authorities, authorities that prosecute misdemeanours punishable by fines and the financial authorities. The transfer of this data takes place on the basis of our legitimate interest in combatting misuse, the prosecution of criminal offences, the safeguarding, assertion and enforcement of claims and the fact that your rights and interests with regard to the protection of personal data are not overriding pursuant to Article 6 (1) (f) GDPR.
A possible transfer of the personal data is justified by our legitimate interests in adapting our business form to economic and legal factors as required and the fact that your rights and interests with regard to the protection of personal data are not overriding pursuant to Article 6 (1) (f) GDPR.
10. Transfer of data to third countries
The data can in some cases be transferred in the scope described above to countries outside the European Economic Area (EEA). These countries do not have a standard of data protection comparable with the standard of protection within the EU (e. g. USA, China or India). For the protection of your data, those of our group companies and contract partners located outside the EEA to whom data should be transferred, such as foreign representatives, are obligated on the basis of the EU standard contractual clauses for the transfer of personal data to third countries to guarantee adequate data protection.
You will find the EU standard contractual clauses for the transfer of personal data to third countries under the following link:
You will also find information on international data protection under the following link: https://www.lda.bayern.de/en/international.html
11. Changes of purpose
The processing of your personal data for purposes other than those described will only take place to the extent permitted by a legal regulation or subject to your consent for the change of purpose of the data processing. In the event of further processing for purposes other than those for which the data were originally collected, we will inform you of these other purposes before the further processing and make all relevant information available to you.
12. The deletion of your data
We delete or anonymize your personal data as soon as they are no longer required for the purposes according to the aforementioned items for which we collected them. As a rule, we store your personal data for the duration of your user relationship with respect to the website.
After the expiry of these periods of notice, the data are deleted, insofar as these data are no longer required due to legal retention periods, for criminal prosecution or for the safeguarding, assertion or enforcement of legal claims. In this case, they are locked. The data are then no longer available for further use.
13. Automatic case-by-case decision making or profiling measures
We do not use any automated processing steps in order to reach a decision – including profiling – in connection with our website.
14. Your rights as an affected individual
14.1 Right to information
Pursuant to Article 15 GDPR, you have the right to request us at any time to provide you with information concerning personal data relating to you that we process. You can make this request by sending a postal letter or e-mail to the above address.
14.2 Right to rectification of incorrect data
You have the right to request us to immediately rectify your personal data if they are inaccurate. To do so, please contact the above addresses.
14.3 Right to erasure
You have the right to obtain from us the erasure of personal data on the grounds described in Article 17 GDPR. These grounds especially give you the right to erasure if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the personal data have been unlawfully processed, if we have received an objection to the processing, or the personal data have to be erased in compliance with a legal obligation in Union or Member State law to which Koelnmesse is subject. With regard to the duration of the data storage, see Item 12 of this data protection declaration. To exercise the aforementioned right, please contact the above addresses.
14.4 Right to restriction of processing
You have the right to request us to restrict processing pursuant to Article 18 GDPR. This right applies, in particular, to the following cases: When the accuracy of the personal data is contested between the user and ourselves, for a period enabling us to verify the accuracy of the personal data; the user has an existing right to erasure but opposes the erasure of the personal data and requests the restriction of their use instead; the data are no longer needed for our purposes, but they are required by the user for the establishment, exercise or defence of legal claims; the user has objected to processing pending the verification whether our legitimate grounds override those of the user. To exercise the aforementioned right, please contact the above addresses.
14.5 Right to data portability
You have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR. To exercise the aforementioned right, please contact the above addresses.
14.6 Right to object
Pursuant to Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning yourself which is based on point (e) or (f) of Article 6 (1) GDPR. In that case, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
14.7 Right of appeal
If you have a complaint, you also have the right to appeal to the responsible regulatory authority. The responsible regulatory authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
Tel.: +49 211/38424-0
fax: +49 211/38424-10
Status: 21 August 2020