Messe München GmbH (“Messe München”) thanks you for your interest in our company and products. We take the protection of your person-related data very seriously. We would like you to feel at ease when you visit our trade shows, our website or when using our digital content and products. At our trade shows, we employ photographers and service providers to take photos and other image material of the fairs we organize ourselves. These include in particular portrait and event photos (“trade fair photos”).
Protecting your privacy is of optimum importance to us. Therefore, compliance with legislation on protecting data privacy is self-evident for us. Our employees are obligated to maintain data secrecy. They are regularly trained in the areas of data protection and data security. In the following, we would like to outline briefly how we handle your personal data within the context of our website, our digital content and products, and how we protect these data.
Messe München GmbH, represented by the managing directors Klaus Dittrich, Dr. Reinhard Pfeiffer, Stefan Rummel, Falk Senger, Gerhard Gerritzen and Monika Dech
Tel.: +49 89 949-20720
Fax: +49 89 949-20729
Messe München GmbH
Data Protection Officer
Tel.: +49 89 949-20045
Fax: +49 89 949-20069
Personal data refer to individual information about the personal or material relations of a certain or identifiable natural person This includes information such as your name, postal or email address, and access data in the context of using our website and our other digital content and products. Personal data are also stored by us in addition to the access data only if you voluntarily provide us with this, e.g., in the context of a registration, a survey, a prize contest, a contact request, a subscription to a newsletter or to carry out an online order. In addition, personal data are only used to the extent necessary and for the sole consented purpose or a legally permissible purpose. For secure transmission of your data, Messe München GmbH uses encryption procedures in secured areas. This means that the communication between your browser or terminal device and our ordering system is not readable for others on the internet, for example. Apart from that, the use of our ordering system is deemed as consent to the storage and use of your data by Messe München GmbH and its partners. In the context of trade fair photos, we generate and collect image material from you and other personal data that you provide us in connection with the photos (for example, name, telephone number, e-mail address, postal address).
By accessing our website, Messe München GmbH receives access data that is stored for security purposes and in principle permits identification of:
The provision of this website requires the handling of personal data, for example, the IP address for the retrieval of the content displayed on this website.
These data are evaluated by Messe München GmbH and enable us to optimize our offers as a whole and make the content more specific for you personally, e.g., to recognize you as a returning visitor to our website. If you have an existing data record, the new data can be assigned to it in many cases. The IP address of the computer from which the access is made is only stored for backup purposes for a period of one month.
You also have the opportunity to contact us via our contact form. We collect the personal data for this that you enter in the contact form.
The handling of your personal data for the provision of this website and for communication via this website is based on our legitimate interest. For the provision of this website, it is technically necessary that we process certain personal data (e.g., the IP address). For your communication with us, we must handle the respective personal data.
As part of the required balancing of interests, we balance your interest in the confidentiality of your personal information and our interests in the provision of this website in establishing contact with each other. Your interest in confidentiality is secondary in both cases. Otherwise, we could not provide you with access to this website or respond to your contact request.
We use service providers to provide our website. We transmit personal data to these service providers for this. These service providers are contractually obligated by us to exercise the same care when handling personal data as we do ourselves.
These service providers are subject to the same strict data protection regulations and are also included in the data protection concept of Messe München GmbH.
Personal data are only transmitted to state institutions and authorities in the context of legal or judicial obligations.
You have the opportunity to follow us on Facebook and on other third-party social media platforms (e.g., LinkedIn or XING). For this purpose, we handle those personal data that you provide to us in each case or which are made available to us by the respective platform operator about you insofar as they are made available to us. You can control the privacy settings yourself on a social media platform.
(1.1) Legal basis
Our handling of your personal data as part of our social media offers is based on our legitimate interest pursuant to Art. 6 para. 1 f) of the GDPR. For the provision of our social media offers, it is technically necessary that we process certain personal data (e.g., the IP address and personal data that you have provided to the respective platform operator or us).
As part of the required balancing of interests, we balance your interest in the confidentiality of your personal information and our interests in the provision of our social media offers with each other. Your interest in confidentiality is secondary in such cases. Otherwise, we would not be able to provide you with our social media offerings.
(1.2) Recipient categories
We use service providers to provide our social media services (e.g., Facebook, LinkedIn and XING). The data you submit to us as part of our social media offers are also automatically transmitted to the respective social media platform operator.
(2.1) Legal basis
The handling of your personal data for the provision of such a blog is carried out based on our legitimate interest. For the provision of the blog feature, it is necessary for us to process certain personal data (e.g. the IP address).
(2.2) Balancing of interests
In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the blog feature against each other. Your interest in confidentiality is secondary in this case. Otherwise we could not provide the blog functions to you.
(3.1) Community Features
We have several community features on our Instagram channel that allow you to interact with other users.
Please note that these areas are publicly accessible and any personal information that you post or provide upon registration may be viewed by others. We have no control over how other Instagram channel users use this information. In particular, we cannot prevent unsolicited messages from being sent to you.
(3.2) Event invitations
Occasionally, events are posted on our Instagram channel that you may need to sign up for. If you sign up for an event, we process your personal data provided at the time of registration, such as name and address, as well as contact and communication information such as phone number and e-mail address and, if applicable, other information provided by you to perform the respective event (e.g. for the creation of a guest list, accreditation and admission control, room and staff planning as well as catering) and to send you your invitation and notifications for the respective event; we may also use this information for misuse detection and legal defense.
(3.3) Recipient categories
Your personal information will be shared with Instagram to facilitate the operation of our Instagram channel. The transfer of your data is thus in compliance with Section 6 para. 1 lit. b GDPR, as this is required to enable you to use our Instagram channel.
You can subscribe to our newsletter on our website by providing your consent. We collect the personal data that you enter in the registration form for this purpose.
Your consent is the legal basis for our processing of data. You may revoke your consent at any time with effect for the future.
We commission service providers with the mailing of our newsletter. For this purpose, we transmit personal data to these service providers. These service providers are obligated by contractual agreement to exercise the same care when handling personal data as we do ourselves.
You can apply online to us via our website. For this, you can first register on our application portal. However, this is not a mandatory requirement for your application. If you register for our career portal, the personal data that you enter in the registration form will be processed for this purpose. Basically, those personal data are processed that you specify with or without registration, and which you provide us with in the context of your application, e.g. your application documents.
(a) The processing of your personal data in the context of the application portal takes place for preparing, executing and processing the corresponding usage contract (license agreement).
(b) The processing of your personal data in the context of your application is only to prepare an employment contract pursuant to Section 6, para 1 lit. b) GDPR in conjunction with § 26 Federal Data Protection Act (BDSG).
(c) Your application will only be stored for a longer period of time if you give us your corresponding consent. You can revoke your consent with future effect at any time.
In the context of application procedures, we transmit personal data to service providers in the context of service provision. A review of your documents for other open positions at Messe München GmbH or referral to other entities in our group of companies shall only occur if you have provided us your consent to do so. You may revoke your consent at any time with effect for the future.
If there is no legal basis for further retention of your application data, deletion takes place after 6 months of conclusion of the application process.
If you—as visitors, members of the press, exhibitors, partners, sponsors, or speakers—wish to use our ISPO Digitize Summit Portal at https://ispo-digitize.converve.io or place orders in the associated ticket shop, you may be required to provide your personal data, such as when you sign in to our portal or place an order. The mandatory information required for processing your registration for the portal or ordering tickets is compulsory; other information provided within the context of the portal is voluntary. We only process the personal data you provided for the purpose of offering you the services of our ISPO Digitize Summit Portal.
The ISPO Digitize Summit Portal offers you the following services and features:
If you wish to use our portal, you must register by specifying your e-mail address and assigning a password of your choice.
If you use our portal, we will store the personal data required for the purpose of fulfilling the contract until such time that you delete your user account. The processing of this data is based on statutory provisions that allow us to process personal data to the extent necessary for the use of a service or the performance of a contract (§ 15 para 1 German Telemedia Act, Sect. 6 para b GDPR).
Furthermore, we will store the voluntary data you provided for the time of your use of the portal, unless you delete them before that time. You can manage and change all personal details of your networking profile in the protected customer area. The legal basis in this respect is our overriding legitimate interest in the use of the data which you voluntarily provide to us (Sect. 6 (1) page 1 (f) GDPR).
If you wish to place orders in our ticket shop through the ISPO Digitize Summit Portal, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. We process the personal data you provided solely for the handling of your order. The legal basis for this is Sect. 6 (1) page 1 (b) GDPR.
We offer several networking features on our portal that allow you to interact with other participants in the ISPO Digitize Summit, such as exchanging messages. If you use these features, please be aware that we may not be able to prevent unsolicited messages from being sent to you.
You furthermore have the option to create a networking profile in which you indicate your main interests. You can then contact other participants via the so-called matchmaking function. In addition, there is the possibility to receive event information matched to your interests, to create your personalized event program, or to register for so-called Match Up sessions. We use all data voluntarily provided by you within the context of these portal features exclusively for the purpose of providing you the named portal functions as intended. Without this data, we would not be able to offer and make these functions available to you.
The processing of your personal data takes place to fulfill the contract to provide the networking functions. The legal basis for this is Sect. 6 (1) page 1 (b) GDPR. Upon termination of this contractual relationship, the processing of your personal data is based on our legitimate interests. The legal basis for this is Sect. 6 (1) page 1 (f) GDPR.
In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the networking features against each other. Your interest in confidentiality is secondary in this case. Otherwise we could not provide the networking functions to you.
If you decide to participate in the ISPO SDG Summit, we will process the data you provide us with during registration to provide you with an admission ticket for the event. The legal basis for this is Section 6 para 1 lit. b GDPR ("Fulfillment of Contract").
We also process your personal data on the basis of Section 6 Para. 1 lit f GDPR ("legitimate interests") in order to assign you to a suitable working group within the ISPO SDG Summit and to inform you (in accordance with §7 of the Unfair Competition Act) about related events and offers of Messe München. Your rights and freedoms have been balanced against this interest and they are outweighed in this case. You may object to the processing of your personal data for advertising purposes at any time by sending an email to firstname.lastname@example.org.
Should you wish to have Messe München make travel arrangements for you for the event, you can provide us your consent for this pursuant to Section 6 para. 1 lit a GDPR. This consent is voluntary and can be revoked at any time with effect for the future. The same applies should you be interested in matchmaking with other summit participants and, for this purpose, agree to the disclosure of your answers provided in the visitor survey to other participants within the closed visitor area.
In the context of holding the ISPO SDG Summit, we are working with partners, who—as contract processors—are contractually obliged to only process your personal data for the above-mentioned purposes pursuant to Sect. 28 GDPR, and only on behalf of Messe München GmbH. Your data will not be passed on to third parties or to a third country.
We will process your data until the above purposes cease to apply or until the statutory retention periods for this have expired.
To be able to offer you a virtual tour of the ICM, we record your IP address and accompanying technical information (including time, device language, operating system, browser version) with the objective of giving you a realistic online impression of the premises of the ICM on site, enabling you to decide whether the ICM is a suitable location for your event.
Legal basis for the processing of the above personal data is Section 6 para. 1 lit. b GDPR (“pre-contractual measures”). If you simply wish to get an impression of the ICM without intent of any potential cooperation, the legal basis for the processing of your data is the legitimate interest of Messe München GmbH in the realistic representation of its premises pursuant to Section 6 para. 1 lit. f GDPR. Your rights and freedoms will be appropriately considered in this context.
Certain elements of the configurator are implemented with the involvement of external technology partners. Should one of the offerings require the transmission of personal data to third parties, we will ask for your prior consent pursuant to Section 6 para. 1 lit. a GDPR (see number 2, Recipient categories).
As part of the provision of the ICM configurator, the above personal data will be transmitted to a contract processor pursuant to Section 28 GDPR.
If you are a member of the women's network and have consented to the publication of your personal profile, it will appear in the protected members only area. The purpose of the publication is to facilitate contact between the members of the initiative. Basis for this publication is your consent pursuant to Section 6 para. 1 lit. a GDPR.
All data in the members area are only accessible to other members of the initiative while logged in. You can have your personal profile deleted at any time by sending an e-mail to email@example.com", thus revoking your consent.
In addition, Messe München GmbH will inform you about selected events that may be of relevance to the members of the network. The legal basis for this is the legitimate interest of Messe München GmbH in offering events that are of interest to the members of the network, pursuant to Section 6 para 1 lit. f GDPR. Your rights and freedoms will be appropriately considered in this context. You may object to receiving invitations to these events at any time by sending an e-mail to firstname.lastname@example.org.
If you use the matchmaking service of Connecting Women, the information provided by you will be processed by our contract processor Chemistree GmbH in accordance with Section 28 GDPR. Processing of your personal data occurs solely for the purposes of Frauen Verbinden. Legal basis is the legitimate interest of Messe München GmbH to recommend contacts of interest within the network to registered members of Connecting Women. Your rights and freedoms will be appropriately taken into consideration. Further information on matchmaking at Chemistree can be found here. You may object to the processing of your data for this purpose at any time or request deletion. Simply write an e-mail to email@example.com.
Messe München GmbH Messe does not transmit any personal data from the Members’ portal to third parties but only to contract processors, to the extent necessary to provide the above mentioned services.
For the duration of your membership in the network initiative, your personal data will be stored for the purposes mentioned above. When you terminate your membership, the data will be immediately deleted.
Cookies are small text files used by many websites worldwide and in Germany. Cookies are created during your visit to our website and stored by our server on your hard drive. Our cookies do not contain any personal data. In addition, cookies stored by our servers can only be read by us and not any third-party website. Most browsers are set in such a way that they automatically accept cookies. If you do not wish to benefit from the advantages of cookies, you can deactivate this function in your browser. Please refer to the individual setting options of your browser. Of course, you can view our website without cookies. However, this can result in restricting functions with respect to our offers.
The legal basis for our handling of your personal data for the provision of our website is our legitimate interest. As part of the required balancing of interests, we always balance your interest in the confidentiality of your personal information and our interests in the provision of this website (including its provision). Your interest in confidentiality is secondary in such cases.
This website uses third-party tools for analysis purposes. These tools measure the effectiveness with which users are addressed by advertisements (“conversion tracking”).
If you click ads from one of the third parties listed below, a conversion tracking cookie is placed on your computer. If you visit a particular website, the third party and we may recognize that you have clicked the ad and have been redirected to this page. This enables us to collect data that is relevant to our advertising efforts. We may learn the total number of users who clicked an ad, the visit duration, the operating system, the terminal model, the location, paid transactions, and in which functional scope mobile apps were used. No personal information about the identity of the user is disclosed.
Should you not wish to participate in the conversion tracking process, you can also reject the required placement of a cookie for this, for example, via your browser setting that generally disables the automatic placement of cookies. For example, use the "Do not track" option ("DNT") of your internet browser.
We work together with the following third-party providers in the context of conversion tracking:
We also use the following tools for marketing and optimization purposes:
Google Adwords Remarketing Pixel
By means of the remarketing or "similar target groups" function of Google Inc. ("Google"), we can address visitors to the website with advertising in a targeted manner with personalized, interest-based ads when you visit other websites on the Google Display Network. To carry out this analysis of website usage, which forms the basis for the creation of interest-based advertisement, Google uses “cookies”. For this purpose, Google saves a small file with a sequence of numbers in the browsers of website visitors. This number records website visits as well as anonymous data about the use of the website. No personal data of visitors to the website are stored.
Additional information about Google remarketing and the data protection declaration of Google can be found at: www.google.com/privacy/ads/.
Google Tag Manager
Google Tag Manager is a solution that enables us to manage various website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data under certain circumstances. Google Tag Manager does not access these data. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, which are implemented by Google Tag Manager.
Use of Google Analytics
We use Google Analytics on our websites, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies,” i.e. text files that are stored on your device, enabling us to track and analyze your visit to our website. The information generated by the cookie about your activities on this website is usually sent to a Google server in the U.S. and stored there. However, due to activation of IP anonymization on our website, your IP address will be truncated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the U.S. and truncated there. Google will use this information on our behalf to track and evaluate your use of our websites, compile reports on website activities and to provide us with other services related to website activity and internet usage. The IP address of your browser transmitted in the context of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies on your device by changing the settings of your browser software accordingly; however, we point out that in this case you may not be able to fully use all functions on our website. Furthermore, you have the option of disabling the tracking of the data generated by the cookie and related to your use of the website (including your IP address) as well as processing of this data by Google, if you download and install the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en
You can disable the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data on future visits to this website: Disable Google Analytics.
We furthermore use Google Analytics to evaluate Double-Click Cookie and AdWords data for statistical purposes. If you do not wish to allow this, you can deactivate it via the Ads Preferences Manager http://www.google.com/settings/ads/onweb/?hl=en.
Click here for the Google privacy notice: https://policies.google.com/privacy?hl=en
Quantcast Remarketing Pixel
Quantcast provides us with a service for user measurement and advertising purposes. Using Quantcast remarketing, we can provide our visitors to the website with targeted advertising. Quantcast associates the information about your website visit or your app use with a unique identifier (your cookie ID), but not with your name, email address or telephone number. You can find more information in the data protection declaration of Quantcast. You can opt out of Quantcast's advertising and data collection at any time: www.quantcast.de/opt-out/
Additional information about Quantcast and the data protection declaration of Quantcast can be found at: www.quantcast.de/datenschutz.
We use the service Eloqua for optimum communication with our customers. The Eloqua server of the provider ORACLE Deutschland B.V. & Co. KG, Riesstrasse 25, 80992 Munich is located in the EU. In the context of support and administration services, it cannot be ruled out in individual cases that individual employees of Oracle Corporation outside of the EU have access to user data as part of their contractual service provision. As a precaution, we have ensured an adequate level of data protection at Oracle Corporation by providing adequate guarantees in the sense of the Federal Data Protection Act. Eloqua places a permanent cookie on the respective login page unless an Eloqua cookie already exists on your terminal. If you have already used a website that uses Eloqua, you might already have an Eloqua cookie. Among other things, we use the Eloqua cookie to analyze your use of our sites, so that we can continually improve them. Emails sent using Eloqua use tracking technologies. We primarily use these data to find out which topics are of interest to you by tracking whether our emails are opened and which links you click. We then use this information to improve the emails we send you and the services we provide and to link them to existing tracking or profiling information. If you want to prevent the use of Eloqua cookies on your terminal in the future, this is possible via the following link: www.oracle.com/legal/privacy/privacy-policy.html#opt-out.
If you do not wish us to recognize your computer (hard disk cookies), you can also set your browser to delete cookies from your computer hard disk, block all cookies or warn you before a cookie is stored. If you do not accept cookies, you will not be able to use some of our services. Generally, cookies enable us to identify who you are and consequently to offer you better and more personalized services.
SalesViewer® technology from SalesViewer® GmbH is used to collect and store data for marketing, market research and optimization purposes on this website. These data can be used to create user profiles under a pseudonym. For this purpose, tracking pixels are used to collect company-related data. The data collected with these technologies are not used to identify the visitor of this website personally and are not combined with personal data of the carrier of the pseudonym without the individually granted consent of the person affected.
Consent for data collection and storage can be revoked at any time with effect for the future to prevent the collection by SalesViewer® within this website in the future. This stores an opt-out cookie for this website on your terminal. If you delete your cookies in this browser, you must click the link again.
(1) Purpose and legal basis
For Product Discovery, especially for search and navigation in our webshop, we use the services of FINDOLOGIC GmbH, Jakob-Haringer-Str. 5a, 5020 Salzburg, a technology company that endeavors to respond to personal needs and preferences for product searches and purchases in the webshop through data analysis. The objective is to better align search queries and product ads with the interests of our users. The cooperation with FINDOLOGIC represents order processing pursuant to Section 4 para. 8 GDPR and is regulated by Section 28 GDPR. The data are processed exclusively for the purposes of Messe München GmbH.
Furthermore, FINDOLOGIC invoices Messe München GmbH only for transactions made by real customers (and not, for example, by bots). This can be verified based on the IP address that is stored and processed for this purpose. The legal basis for this is also Section 6 (1) (f) GDPR: Messe München GmbH has a legitimate interest in correct settlement by the contract processor. Your rights and freedoms will balanced accordingly against our interest in storing IP addresses. The IP address will not be merged with other data, nor will we process it for other purposes.
(2) Recipient categories
The above personal data will not be transmitted to third parties but only to the contract processor and, if required, its sub-contractor, for the above purposes.
(3) Deletion periods
Your search results and preferences will be immediately deleted after the session ends. The IP address of each transaction is securely stored in accordance with Section 32 GDPR. After six (6) months, the addresses will be irreversibly anonymized.
You can buy online tickets for trade fairs and congresses via our website. We process the personal data for this that you enter in the order form. The processing of your personal data takes place for preparing, executing and processing the corresponding contract.
In this context, Messe München only processes personal data for the purpose of Messe München's business purposes. This is necessary for carrying out the tasks of the exhibition and exhibition industry in economic, scientific and cultural fields. The tasks include in particular the holding of trade fairs, exhibitions, congresses and similar events, taking care of the exhibition interests of the City of Munich and the Free State of Bavaria at home and abroad, the promotion of the economy by organizing trade fairs, exhibitions, congresses and similar events as well as the operation, maintenance and further development of the exhibition center in Munich, Messestadt-Riem.
To this end, Messe München maintains exhibition and exhibition facilities, congress and meeting rooms, which it uses or rents for events. The Messe München also operates this for certain events and special internet offers.
The processing of personal data is carried out in particular for the handling of business processes in connection with the above activities, for your information and for promoting our events and services (based on Section 7 para. 3 of the Law on Unfair Competition [UWG]), for their optimization as well as market and opinion research. You can object to the sending of electronic mail by sending an email to the following address: firstname.lastname@example.org
We organize certain trade fairs, conferences and events in cooperation with partners. For this purpose, we have, together with the respective partner, a joint ticket management (e.g., combination tickets for visiting specific events). In such case, both we and the respective partner are jointly responsible for the collection of data at ticket purchase and the further processing in the context of contract initiation, contract implementation and execution. Furthermore, we and the respective partner process the data for our own advertising purposes within the legal framework (based on Section 7 para. 3 of the Law on Unfair Competition [UWG]).
If you object to the processing for advertising purposes, you may contact either us or the respective partner. Your objection will be forwarded as appropriate if you no longer wish to receive advertising from us. In case of doubt, Messe München and the respective partner will assume that you no longer wish to receive any advertising at all.
You can register as a visitor, trade visitor or exhibitor on our website. For this purpose, we process the personal data that you provide to us as part of your registration.
The processing of your personal data takes place for preparing, executing and processing the corresponding usage contract (license agreement).
You do not have to register to participate in events of Messe München and its subsidiaries. Of course, you can also buy an anonymous ticket at the ticket counters without registering. Our hosts and hostesses as well as our service center and the exhibition project management will support you in doing this.
Without registration, we are unfortunately unable to provide you with services such as online advance sale or simplified repeated ticket purchase, match-making, networking functions in the context of our Connect app, travel services or other services of Messe München.
This does not apply for you as a visitor in the following cases:
In particular, we process your personal data for the following purposes:
Data collected later is also assigned to the customer account. For example, these include the data collected data when you order tickets, the number of a voucher of an exhibitor inviting you, and email addresses of other persons for whom you also order tickets at the same time as you order,
You may have multiple customer accounts if you registered with us using different email addresses.
We organize certain trade fairs, conferences and events in cooperation with partners. For this purpose, we have, together with the respective partner, a joint ticket management (e.g., com-bination tickets for visiting specific events). In such case, both we and the respective partner are jointly responsible for the collection of data at ticket purchase and the further processing in the context of contract initiation, contract implementation and execution.
For this purpose, we have concluded a data protection agreement with our partner on joint responsibility. In the following, we would like to provide you with the essentials of such an agreement:
We only forward the data to third parties to the extent described below. Some of the recipients are located outside the European Economic Area (EEA). Please also note the following section in this context.
The transmission of data to the extent described above may be made to countries outside the European Economic Area (EEA) in some cases. Some of these countries do not have a level of data protection comparable to the level of protection within the EU (e.g., USA, China or India). To protect your data, our non-EEA Group companies and contractors, to which data are to be transmitted, for example, foreign representatives, are required to provide appropriate data protection in accordance with EU standard contractual clauses for the transmission of personal data to third countries.
You can find the EU standard contract clauses at the following link:
You can also find information on international data protection at the following link:
In the context of the app that we provide for specific trade fair events (“Connect app”), you will be given access to the public information we are providing about the respective trade-fair event and—if you have acquired this option—also access to the networking functions of the Connect app.
The provision of the Connect app requires the handling of personal data, such as the IP address used to retrieve content displayed on the Connect app, requests placed by you, or our online services and functional areas. You also have the option to contact us via our contact form or the Support Chat feature (where provided by us). For this purpose, we collect your e-mail address and username, as well as the details provided to us to establish your user account: name, name, company, job title, position and country.
The handling of your personal information in the context of providing the Connect app, its functions and for communication is based on our legitimate interest. For the provision of the Connect app, it is technically necessary for us to process certain personal data (e.g. the IP address). For your communication with us it is required that we process the personal data mentioned above. In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the Connect app against each other. Your interest in confidentiality is secondary in this case, as otherwise, we would not be able to provide you with the Connect app (including its features) or respond to your requests.
Insofar as you have gained access to the networking features of the Connect app, you will be able to communicate with other users of the Connect app by posting messages and commenting on public channels (including sponsored channels). In addition, you can create private channels with other users to communicate individually without being visible to anyone other than the participants you have defined for your particular private channel. You can also be contacted individually by other users via a private channel.
For the purpose of providing these networking functions, we process your personal data, in particular your user account information (name, first name, company, job title, position and country), and any messages and comments posted in the channels.
The processing of your personal data takes place to fulfill the contract to provide the networking capabilities. Upon termination of this contractual relationship, the processing of your personal data is based on our legitimate interests. In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the networking functions against each other. Your interest in confidentiality is secondary in both cases. Otherwise we could not provide the networking functions to you.
Insofar as you have acquired access rights to use the networking functions (e.g. by purchasing a corresponding online ticket or networking-only ticket, or as part of your rights as an exhibitor) and if you have given your express consent upon purchase, we will process your personal data in the context of your user account as a user profile (name, first name, company, job title, position, country and, if provided, your profile photo) in our Connect app already from the time of acquisition of the access rights (regardless of whether you are already downloaded the Connect app or registered for it) until you log in to the Connect app for the first time. In this case, your user profile will be displayed to other users of the Connect app; third parties who use the app without registering are only shown the first name. Third-party users will then be able to send you private messages. You will be able to read these messages immediately after you log in to the Connect app for the first time.
You can revoke this consent granted at the time of purchase at any time (e.g., via email@example.com) with future effect. The revocation of consent is only effective for the future and does not affect the legality of any processing which may have occurred before the revocation.
We only forward the data to third parties to the extent described below. Some of the recipients are located outside the European Economic Area (EEA). Please also note the following section in this context.
We process device data to send you push messages, synchronize your favorites, and for so-called crash-reporting to detect the error in the event of an app crash. This includes the following information: the device ID, the device model, name of the device, the operating system, time stamp, and the cause of the error. Processing of the data in the context of favorite synchronization and the sending of push messages is required to fulfill the contract with you. The legal basis for the processing of this data is therefore Section 6 para. 1 lit. b GDPR. The data is required as part of the crash report to analyze and fix errors or crashes of the app. This purpose constitutes our legitimate interest in the processing of data, which is thus in compliance with Section. 6 para. 1 lit. f of the GDPR. The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of push messages, the data is deleted as soon as the request has been processed. You can turn off the push notification service and thus object to the processing of your data. Unless you use favorites synchronization, no data will be collected. For more information on favorites synchronization, see section h. For crash reporting, the data is absolutely necessary, you cannot object to the processing. In case you do not agree, we ask you to uninstall the app. The crash data will be deleted when it is no longer needed for analysis and troubleshooting.
We require access to the location of your device for location-based services. This service is intended to provide you with helpful information in the context of the event concerned, depending on your location. Your location data is determined using GPS data, nearby Wi-Fi networks SSID, mobile data and Bluetooth, and is used only to perform relevant technical functions. Your location data will not be used to create movement profiles beyond your current location and will not be logged or stored by us. You may revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not allow access.
To enable you to save the dates of your trade fair visit planning in your device calendar, we need access to your calendar. We will not retrieve or store any personal data from your calendar. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not grant access.
We need access to your address book to enable you to save the contacts provided through the exhibitor directory. We will not retrieve or store any personal data from your address book. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not allow access.
We require access to your device camera to produce camera memos. The data will be stored on your device. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not grant access.
We need memory access to store the trade show visit data you have created on your device. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not allow access.
This app uses Google Analytics, an analytics service provided by Google Inc. ("Google"). With the help of Google Analytics, we collect data on how and which functions were used within the apps. These include e.g. search queries, clicks on banners and which product groups and exhibitor entries in the app are called up in which frequency. The information collected about your use of this app is usually transmitted to a Google server in the U.S. and stored there. We only use Google Analytics with activated IP anonymization, that is, within the member states of the EU and the European Economic Area, user IP addresses will be truncated.
This deletion of digits eliminates any personal reference to your IP address. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there.
In addition to the above access requests, we process personal data only in the context of the use of individual functions of the app. Unless you use these functions, we will not collect any other personal information. In order to enable a synchronization of the favorites created in the app with the watch lists in the online exhibitor catalog on exhibitors.bauma.de, we transmit—in addition to the favorites—also an e-mail address as an identifying feature for your online exhibitor catalog user account during synchronization. You must enter the e-mail address in the app yourself before the first sync. The e-mail address gets stored in the app to simplify subsequent synchronization processes. Synchronization will only occur if you press the “Synchronize Favorites” button in the app. Pursuant to Section 6 para. 1 lit. f GDPR, processing of your personal data serves the purpose of improving usability. The data for favorites synchronization is used only to process the request and will subsequently be deleted.
If you decide to register as the contact person in your company for our TrustedTargeting Campaign Creator (hereafter: "Creator"), we will process the data you provide us with during registration to send you a campaign offer by e-mail and to provide you (as a representative of your company) with the services of the Creator. The legal basis in both cases is Section 6, para 1 lit b GDPR (contractual or pre-contractual measures).
We furthermore process your personal data on the basis of Section 6 para 1 lit f GDPR ("legitimate interests") for the purposes of product and contract optimization in order to be able to offer our customers the best possible service. We also want to ensure that our customers obtain the right support for future contract fulfillment and can operate our tool independently. In addition, we process your data for market research and opinion surveys and for the purpose of direct advertising for similar topics and products of Messe München (in case of contact by e-mail: in connection with Section 7 para 3 of the German Act against Unfair Competition (UWG)). Your rights and freedoms have been balanced against this interest and they are outweighed in this case. You may object to the processing of your personal data for these purposes at any time by sending an e-mail to: firstname.lastname@example.org.
We are working with partners, who—as contract processors—are contractually obliged to process your personal data only for the above-mentioned purposes pursuant to Sect. 28 GDPR, and only on behalf of Messe München GmbH. Your data will not be passed on to third parties. In the event that data is transferred to a third country, all necessary legal requirements are met (e.g. US Privacy Shield certification, conclusion of EU standard contractual clauses).
We will process your data until the above purposes cease to apply, or until the statutory retention periods for this have expired.
Your consent is the legal basis for our data processing. You can revoke your consent at any time with effect for the future.
We are cooperating with third parties in the context of competitions. We transfer personal data to these third parties for this purpose.
We process trade show photos (including any other personal data that you provide to us in connection with the photos) for the documentation of our trade fairs. In addition, we process trade show photos—in particular especially through publication and usage—for press and advertising purposes in various media (in particular print (e.g. brochures) and online (websites, social media, etc.)). This includes the publication, use and processing for the purpose of press news and public relations, editorial reporting as well as for advertising and marketing purposes in connection with Messe München GmbH and the trade shows, conferences and other events it organizes.
The legal basis for the creation and use of trade show photos is Section 6 para. 1 lit. f) GDPR (legitimate interest in the documentation of our fairs and our legitimate interests in connection with the above-mentioned processing purposes). In the required balancing of interests, your privacy rights will be honored appropriately.
In case we wish to publish and use footage from you on which you are clearly identifiable for press and advertising purposes, we will request your consent. The legal basis for publication is then your consent pursuant to Section 6 para. 1 lit. a) GDPR.
In areas where the Art Copyright Law ("KUG") is applicable, we may also disseminate, use and otherwise process trade fair photos pursuant to § 23 KUG for the following purposes:
For the purpose of press and public relations, editorial reporting, advertising and marketing purposes, the photos taken at trade shows may be sent to journalists, media companies, press and photo agencies, including to platforms abroad, and published by us. For the fulfillment of orders, we also commission service providers, in particular for the production of trade fair photographs. These service providers are obligated by contractual agreement to exercise the same care when handling personal data as we do ourselves.
We will delete your personal data if the purpose of storage is no longer necessary and no statutory provision requires a retention. Statistical evaluations are made only in anonymous form.
Please contact our data protection officer for the exercise of your rights and the revocation of your consent.
You have the following rights toward us regarding your personal data:
You can revoke your consent with future effect at any time.
You have the right to file a complaint with a data protection supervisory authority concerning our processing of your personal data.
The following data protection supervisory authority is responsible for us:
Bavarian State Office for Data Protection
Phone: +49 981 180093-0
Fax: +49 981 180093-800
If you have any questions or suggestions regarding data protection at Messe München GmbH, please feel free to contact our data protection officer by e-mail.
Munich, April 2020