Privacy policy

Data Protection Information of Messe Düsseldorf GmbH
Stand: 03.07.2023

1. General Information of Data Protection

This data protection information explains how personal data is handled, in particular how it is used, stored and protected, as well as the rights to which data subjects are entitled. The Messe Düsseldorf GmbH Internet portal is primarily a marketplace for doing business. Although much information is also available to anonymous users, it is sometimes necessary for us to require data from users, which can be either company-related or personal, in order for them to receive the desired services. Personal data is protected in our systems in accordance with internationally applicable data protection standards, the European Union's General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) (hereinafter referred to as “GDPR”) and national data protection regulations. We want users to be able to rely on responsible and confidential treatment of their data.

Personal data will only be used for the purposes stated in this data protection information or purposes expressly declared at the time of subsequent data collection. This data protection information relates to data processing on our website as well as our trade fair-specific websites (including mobile application), our social media channels and any forms of communication used. It does not apply to other websites to which we merely refer via a hyperlink. Since we are not responsible for their information, we recommend that you carefully read the information on data protection there. Whenever content is requested from our website, personal data (e.g. name of the requested file, date/time, amount of data transferred) about this process is stored in a log file. We thus track user behaviour across the entire website. However, we do not combine this information with data about individual users without their prior express consent. We break down all usage statistics according to the user's domain name, browser type and the MIME type in which this information is read from the browser string (the information contained in each user's browser). We track and catalogue the search terms entered by users in search engines, but this tracking is never related to individual users.

Encryption procedures are used for the secure transmission of payment data. This means that the communication between the user's browser and our system cannot be read by other participants on the Internet.

2.Public Process Directory

2.1 Name of controller

2.2 Management (legally representing controller

Wolfram N. Diener (Chief Executive Officer of the Management Board)
Bernhard J. Stempfle
Erhard Wienkamp

2.3 Contact details of controller

Adresse: Messeplatz, Stockumer Kirchstraße 61, D-40474 Düsseldorf, Deutschland
Phone: +49 211 4560-01
Fax: +49 211 4560-66
E-Mail: info[at]messe-duesseldorf.de
Internet: http://www.messe-duesseldorf.de/

2.4 Contact details of the data protection officer

Data Protection Officer of Messe Düsseldorf GmbH
c/o migosens GmbH
Wiesenstr. 35
45473 Mülheim an der Ruhr
E-mail: dsb-messe-duesseldorf[at]migosens.net

Purpose of data collection, process ingoruse/legitimate interests of Messe Düsseldorf GmbH

The purpose of Messe Düsseldorf GmbH is to promote the economy by organising trade fairs and exhibitions in Germany and abroad, by organising or holding congresses and conferences, and by all activities connected with the trade fair, exhibition, congress, and conference business. The main focus of our activities is the organisation of trade fairs, which are aimed at narrowly defined target groups based on their respective professional orientation.

To fulfil this purpose, we maintain trade fair and exhibition centres as well as congress and conference rooms, which we use for events or rent out for an appropriate fee. For this purpose, we process personal data of especially exhibitors, trade fair (trade) visitors, trade fair (general interest) visitors, journalists, service providers, suppliers, cooperation partners (or their respective employees, bodies, or other agents), as well as persons who are close to our company due to personal ties.

The data processing of personal data is based either on consent (e.g. Article 6, Section 1 lit. (a) GDPR) of the data subject (in particular in the case of direct marketing measures by electronic means or in the case of photo and video use for advertising purposes) or on the basis of other permissions granted by the GDPR for the exercise of the declared purposes of the company, in particular for the implementation of our range of events, for the handling of business processes, for quality assurance and improvement of our trade fair events, including the provision of information to our customers (see item 2.6, categories A, B, F below) before and after an event and regarding subsequent events.

In doing so, we pursue the legitimate interest of granting access to our trade events exclusively to visitors with a professional connection to the respective topic of the event in question. This serves to promote the quality of the professional exchange. Subsequent events may also be other events organised or held by us in Germany and abroad that have a thematic connection to the respective event.

Members of trade fair clubs additionally receive promotional information from partner companies via us on such offers that correspond to the stated interests.

Personal data will not be passed on to third parties for the purpose of advertising, unless this is part of our service provision (e.g. within the framework of the scanning of exhibitor, visitor and press badges (hereinafter referred to as “badges”) offered by exhibitors or Messe Düsseldorf GmbH, (see below item 2.7, bullet point 8). The data stored on the badge that you provide here can therefore either be read by third parties upon presentation of the badge and thus stored and used, or read, stored and used by Messe Düsseldorf GmbH for its own purposes, or forwarded by Messe Düsseldorf GmbH to third parties. In such a case, the data protection information of the third party applies accordingly under its own responsibility.

Description of the groups of persons concerned and the data or categories of data concerned

In order to fulfil the purposes mentioned under 2.5, the following personal data is collected, processed and used for each group of persons:

2.7 Recipients or categories of recipients to whom the data may be disclosed

• Public bodies in the case of overriding legal provisions (category A-F) / legal basis for data transfer: Article 6, Sec. 1 lit. (c) GDPR
• Companies of the Messe Düsseldorf Group (category A, B, C, F) / the data transfer takes place within the framework of commissioned processing pursuant to Article 28, GDPR
• Companies/Entrepreneurs who acquire an exhibition event, company shares or assets from Messe Düsseldorf GmbH, or implementing partners of Messe Düsseldorf (category A-F) / Legal basis for data transfer: Article 6, Sec. 1 lit. (f) GDPR
• Foreign representations, insofar as the residence of the person visiting the trade fair is abroad (category A, B, C, F) / the data transfer takes place within the scope of a commissioned processing according to Article 28 GDPR
• Other processors of Messe Düsseldorf GmbH (category A-D, F) / the data transfer takes place within the scope of a commissioned processing pursuant to Article 28 GDPR
• Service providers for services accompanying the trade fair, insofar as the person requests corresponding services from Messe Düsseldorf (category A-D, F) / Legal basis for data transfer: Article 6, Sec. 1 lit. (b) GDPR
• Entrepreneurs who have issued visitor vouchers receive the visitor data (name, address, communication data) of the redeemed vouchers, insofar as this is contractually agreed (category B, C, F) / legal basis for the data transmission: Article 6, Sec. 1 lit. (f) GDPR
• In addition, we may offer exhibitors the service of electronic use of the data of trade visitors and club members. This service is provided on condition that the visitor, exhibitor or press representative allows the exhibitor or Messe Düsseldorf GmbH to scan the barcode on his or her admission ticket. The aforementioned persons thus decide for themselves whether their electronic “badges” will reach the exhibitor or Messe Düsseldorf GmbH. Data transfer is generally excluded if the persons object to the transfer of their data to the exhibitor or Messe Düsseldorf GmbH (category B, F) / Legal basis for data transfer: Article 6, Sec. 1 lit. (a) GDPR or Article 6, Sec. 1 lit. (f) GDPR

In all cases listed above, the transfer of data serves the purposes listed in section 2.5.

Criteria for data deletion

In principle, all personal data are deleted as soon as they are no longer necessary for the purposes for which they were collected or otherwise processed. Deletion shall also take place in cases where data deletion is required by law and in cases where the data subject has withdrawn his or her consent to the processing of personal data relating to him or her or has lodged an objection thereto. This does not apply if and to the extent that, despite the withdrawal of consent or despite the objection to data processing, there is another legal basis or there are overriding legitimate grounds for data processing. This may be the case, for example, in the event of the existence of statutory retention obligations (such as those for commercial correspondence or accounting records).

Data transmission abroad

In order to provide our customers and business partners with the best possible service worldwide, we transfer personal data within the companies of the Messe Düsseldorf Group. In order to fulfill contractual purposes or to carry out pre-contractual measures with companies from third countries interested in exhibiting or visiting, it is essentially necessary to transfer data to the foreign representative office of the relevant third country. For this purpose, the relevant data, as listed under 2.6, will be transmitted to the competent foreign representation. In the case of representatives of

In order to provide our customers and business partners with the best possible service worldwide, we transfer personal data within the companies of the Messe Düsseldorf Group. In order to fulfill contractual purposes or to carry out pre-contractual measures with companies from third countries interested in exhibiting or visiting, companies from third countries visiting a trade fair, the visitor's name may also be given to the relevant foreign representation, provided there is no objection to the transfer. The registration data of a company whose representative is visiting an exhibitor at the exhibition stand can - provided the visitor does not object to the scanning of his/her data on the barcode of the admission ticket - be transmitted to the exhibitor visited, irrespective of whether the exhibitor is from Germany, the EU or a third country. In all cases in which we ourselves arrange for personal data to be transferred to third countries that do not have an adequate level of data protection regulated by law, the data will only be transferred if the data recipient contractually undertakes to comply with equivalent standards of data protection and data security as we ourselves do.

3. Cookies

We use cookies. Cookies are small files that are sent by us to the browser of your terminal device when you visit our website and are stored there. They are used to enable you to make the best possible use of our web pages.

Your cookie settings can be viewed and changed at any time under Cookie Settings in the Usercentrics Consent Management Tool. There you will find an overview of all providers used and the respective processing purposes. Consent for functional cookies and marketing cookies can be given individually or generally and can be revoked at any time for the future.

If the use of certain cookies or cookies in general is not desired, users can also prevent their storage on their terminal device by making the appropriate settings on their terminal device and/or Internet browser. Users can select “do not accept cookies” in their browser settings. The procedures for managing and deleting cookies in the settings of the respective browser can be found in the help function of the respective browser.

Stored cookies can be deleted at any time in the system settings of your terminal device and/or internet browser. Please note that the functionality and range of functions of our website may be limited if cookies are blocked or if you do not give your consent to the use of cookies.

Further information on the cookies used can be found in the following explanations.

3.1 Essential cookies

These cookies are mandatory for the use of our websites and cannot be deactivated. The legal basis for the processing of personal data using these cookies is - if a contractual relationship exists - Article 6, Sec. 1 lit. (b) GDPR or Article 6, Sec. 1 lit. (c) GDPR. In addition, however, it is also our legitimate interest according to Article 6, Sec. 1 lit. (f) GDPR. The legitimate interest is derived from the purposes of use of the cookies.

3.2 Functional cookies

Functional cookies are used to evaluate website usage. Some of these cookies are used/deployed by third-party providers, i.e. service providers carefully selected by us. Through the use of such cookies, we can, for example, count the visits to our website and understand from which other websites a redirection to our website took place. This analysis tells us which parts of our website are the most popular, which are the least used and how visitors move around our web pages. This enables us to improve the performance of the website and optimise the content. The processing of data by means of cookies in this context takes place exclusively on the basis of voluntary consent in accordance with Article 6, Sec. 1 lit. (a) GDPR. If consent is given, cookies are deployed for analysis when our website is called up or when an offer provided via the site is called up. It is possible to extend the consent either to individual cookies or to all cookies of this category.

3.3 Marketing-Cookies

Marketing cookies are used to provide interest-based content and ads. This allows more accurate reports on campaign performance to be obtained. Some of these cookies are deployed by third parties. They receive information about the user’s use of our website and may combine this information with other data they may have received elsewhere. This enables us, with the help of selected partners, to address visitors who have shown an interest in the content and offers on our website with advertising geared to their interests (retargeting / remarketing). The display of advertising on the websites of our marketing and social media partners is based on an analysis of previous usage behaviour on our website.

Such usage profiles are created partially anonymously or pseudonymously in line with the information stated by the providers of the retargeting / remarketing services we use. Data collected in this way is not used by us to identify users personally and is never merged with personal data stored by us. We use these cookies, for example, to address interested users with the appropriate information and thus to continuously optimise marketing communication with visitors to our website in order to feature relevant advertising content for them, including outside our web pages.

The data is processed exclusively on the basis of voluntary consent in accordance with Article 6, Sec. 1 lit. (a) GDPR. If users give us their consent, marketing cookies will be set when they visit our website or access an offer provided via the site, and users will also be able to experience interest-based advertising from us on other websites and social media offerings.

3.4 Storage period

Cookies can be divided into session cookies and permanent cookies depending on how long they are stored.

3.4.1 Session cookies

Most cookies are only needed for the duration of the current service call or session and are deleted again or lose their validity as soon as users leave our website or their current session expires (so- called “session cookies”). These are used, for example, to maintain the registration for our ticket shop.

3.4.2 Permanent cookies

These cookies are stored for a longer period of time in order to recognise users when they return to the website at a later date and to be able to call up stored settings. This enables users to access the website more quickly and conveniently, for example, or to avoid having to reapply certain settings again. Permanent cookies are automatically deleted after 180 days.

3.4.2.1 Staying logged in

Insofar as this is technically set up on the Internet portal, we offer users the “stay logged in” option for their account when logging in, which can be used on a voluntary basis. If users do not wish to use the login service, they are free to use the Internet portal without the “stay logged in” option. However, when visiting the site again later after the session has ended (browser session), users have to log in again. If they select the “stay logged in” option, they do not have to do this again; they remain logged in. For this purpose, we use an IDP cookie that automatically recognises users when they visit the Internet portal again. In the course of this, a session ID is stored. This has a reference to their account. The browser only stores the IDP cookie; the IP address is not stored. We base the processing of personal data on the granting of consent in accordance with Article 6, Sec. 1 lit. (a) of GDPR, for which the active ticking of the box provided is required. In order to cancel the “stay logged in” option and revoke the consent given for the future, users must click on “log out”. The IDP cookie used has a duration of eight weeks. This means that after a certain period of time, users will have to log in again, even if they have chosen the “stay logged in” option and have not logged out since then. Also, if users change their password, they will need to log in again. Finally, we strongly recommend that the “stay logged in” option not be used on terminals that users do not use only for themselves. Otherwise, there is an increased risk of unauthorised access to the respective customer account by third parties.

3.5 Third-party providers

We also include third-party features on our website in order to use their services. These features use third-party cookies that are placed directly on your device by these services. When you visit our website for the first time, you will be informed about the use of these cookies via the Consent Management Tool. The cookies are only used if users consent to their use. The legal basis is therefore Article 6, Sec. 1 lit. (a) GDPR.

3.6 Use of the Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform to fulfill the legal obligation pursuant to Article 7, Sec. 1 GDPR. The operator is Usercentrics GmbH, Rosental 4, 80331 Munich. Usercentrics Consent Management Platform collects log file data, user agent (device, browser type, browser language, browser version, resolution) and consent data (consent yes/no, timestamp, data scope, data attributes, controllerID, processorID, consentID) via a JavaScript. This JavaScript enables Usercentrics GmbH to inform the user about certain tags and web technologies on our website and to obtain, manage and document his or her consent. The legal basis for processing the data is Article 6, Sec. 1 lit. (c) GDPR, as we are legally obliged to provide evidence of consent (pursuant to Article 7, Sec. 1 GDPR). The aim is to know the preferences of our users and to implement them accordingly as well as to document them in a legally secure manner. The data is deleted as soon as it is no longer required for our logging and there are no legal storage obligations to the contrary. Visitors can permanently prevent the execution of JavaScript at any time by making the appropriate settings in their browser, which would also prevent Usercentrics from executing the JavaScript.

4. Video surveillance at the exhibition centre

Video surveillance is carried out on our exhibition grounds. This is carried out for the purpose of exercising domiciliary rights, preventing criminal offences and preserving evidence in the event of criminal offences. It is also carried out for logistical reasons for traffic management, in particular for parking management, tailback prevention, coordination of passenger bus transports and truck management. The legal basis for video surveillance is Article 6, Sec. 1 lit. (f) of the General Data Protection Regulation (GDPR), whereby the legitimate interests pursued on our part result from the aforementioned purposes. If and insofar as a video recording is made, it will be deleted after 48 hours, unless longer storage is necessary for the exercise of the aforementioned legitimate interests. In the latter case, deletion shall only take place after the purpose of the processing has ceased to exist.

5. Data protection for special applications

5.1 Online orders

We offer exhibitors / exhibitor representatives (the natural person behind the exhibitor / contact person of the exhibitor) and visitors the opportunity to book services online.

5.1.1 Visitor Registration / Exhibitor Staff Registration / Ticket Shop

By using the online registration for visitors (trade fair trade visitors and general-interest trade fair visitors) and for exhibitor representatives (all aforementioned groups of persons hereinafter also referred to collectively as “user” or “data subject”), we collect the data required to process ticket orders in the Ticket Shop. The legal basis is Article 6, Sec. 1 lit. (b) GDPR. The data collected during registration can also be corrected or changed by the user at a later date and at any time after clicking on the edit link in the user profile, with the exception of surnames and first names. Visitors to the fair (i.e. visitors to general-interest events without trade visitor status) have the option of using a guest access to book services online without registering and without providing additional data relating to the mere processing of the contract. By requesting additional data from trade fair visitors (i.e. visitors with trade visitor status) and exhibitor representatives in the registration process, for example on special trade interests or the type of journey, we are pursuing the legitimate interest of recognising market-relevant trends and opinion developments and better aligning our trade events with the professional interests and needs of the visitors and exhibitors at the event in question or offering digital exchange services among all users. This also enables us to provide users with targeted specialist information even before a follow-up event. The classification of a data subject as either a trade fair trade visitor or a general trade fair visitor is either based on the fact that certain events are only accessible to trade fair trade visitors, or it is based on the fact that the user has guest access to the ticket shop, or it is

based on a corresponding query. All this serves to promote the quality of the professional exchange, which is essential for the successful implementation of trade fairs, exhibitions, congresses and conferences and is therefore also in the interest of both trade fair trade visitors and exhibitor representatives. The legal basis is Article 6, Sec. 1 lit. (f) GDPR. No conflicting interests of the data subjects that outweigh the aforementioned legitimate interests of Messe Düsseldorf GmbH in this respect are apparent. In the case of the redemption of admission ticket vouchers for free or discounted ticket orders, we base both the registration and the aforementioned request for information not merely relating to the processing of the ticket order on the fact that visitors' services are paid for in full or in part or exchanged for (in part) by providing the personal data requested. The legal basis for data processing is Article 6, Sec. 1 lit. (b) GDPR. We will also send to those users who have booked a service online advertising on similar goods and/or services of their company by electronic means (e.g. by e-mail). If users do not wish to receive advertising, they can object to the use of their data for this purpose at any time by sending an e-mail to privacy@messe-duesseldorf.de or by clicking on the unsubscribe link in each e-mail, without incurring any costs other than the transmission costs according to the basic rates. The legal basis is Article 7, Sec. 3 UWG (Act against Unfair Competition) in conjunction with Article 6, Sec. 1 lit. (f) GDPR.

Insofar as personal data of special categories are processed in accordance with Article 9, Sec. 1 GDPR (e.g. requesting health status in order to be able to obtain a free ticket for an accompanying person), we expressly point this out to you at the relevant points.

5.1.2 Online registration (OR)

Online registration (OR) offers the possibility of booking a stand online as an exhibitor at a trade fair (web application together with the associated database). Personal data of the exhibitor representatives are also processed in this process. The legal basis is Article 6, Sec. 1 lit. (f) GDPR (balancing of interests). The legitimate interest pursued by us lies in the proper processing of orders, for which a natural person is required as a contact person for the exhibitor, e.g. in order to be able to discuss queries or other details. If, in individual cases, the exhibitor is the same person as the natural person placing an order as a contractual partner of Messe Düsseldorf GmbH itself, the latter shall be based on Article 6, Sec. 1 lit. (b) GDPR, i.e. on the initiation or fulfilment of a contract to which the person concerned is a party. We will forward the data to the contact person appointed by the exhibitor representative (contact person) for the processing of the order. In addition, the exhibitor’s e-mail address provided on registration for the trade fair will be sent advertising about similar goods and services of the exhibitor's company by electronic means. If the sending of advertising should not be desired, the use of the processing of the data for this purpose can be objected to at any time by sending an e-mail to privacy@messe-duesseldorf.de or via an unsubscribe link in each e-mail, without incurring any costs other than the transmission costs according to the basic rates. The legal basis for data processing is Article 7, Sec. 3 UWG in conjunction with Article 6, Sec. 1 (f) GDPR.

5.1.3 Online Order System (OOS) for exhibitors

We operate the Online Order System (OOS) for the acceptance of orders and the subsequent conclusion of contracts via the Internet as an online shop for exhibitors. This is a web application and database for ordering trade fair-related articles and services in addition to the stand space. A log-in is required to use the OOS. The providers are Messe Düsseldorf GmbH and its affiliated service partners. We base the processing of personal data here in pursuit of legitimate interests on a balancing of interests pursuant to Article 6, Sec.1 (f) GDPR. The legitimate interest pursued by us lies in the proper processing of orders, for which a natural person is required as a contact person for the exhibitor, e.g. in order to be able to discuss queries or other details. If the exhibitor is the same person as the natural person who places an order as a contractual partner of Messe Düsseldorf GmbH, the latter is based on Article 6, Sec. 1 lit. (b) GDPR, i.e. on the initiation or performance of a contract to which the data subject is a party.

5.2 Surveys

We enable participation in interactive surveys so that users can easily share their opinions with other users. Surveys also serve the purpose of being able to tailor the content and services even more specifically to our clientele. We use a system of ‘tagging’ users after they have voted, so that they can only cast one vote on a particular question. There is no correlation between this tagging and information about individual users. At our own discretion, we share the demographic information

accumulated in these surveys with the other users of the respective fair-specific website, but never personal data. The legal basis is Article 6, Sec. 1 lit. (a) GDPR.

5.2.1 Panels

In the course of Trend Reports we regularly conduct a survey of industry experts from e.g. manufacturers and suppliers on current issues and assessments of the market (so-called panels). The aim is to identify and then present the current trends and relevant topics in the relevant area. Participants can register for the panels either via our website or by agreeing to the information email we send them. The legal basis for data processing is Article 6, Sec. 1 lit. (a) GDPR. If necessary (e.g. to evaluate the responses and create a report), the respective data will be forwarded to our service provider. A corresponding contractual relationship exists with the respective service providers.

5.2.2. Market research

We regularly conduct market research surveys on relevant topics from various areas of the trade fair industry. The aim of this is to identify market trends and the wishes of our contractual partners and users and to be able to react to them. Registration for the survey is made via the information email sent to us, which also determines the relevant types of data. In some cases, we also work together with market research companies, so that personal data - with the consent of the users - is passed on to them. Whether or not such cooperation takes place is determined by the respective information email. The legal basis for data processing is therefore Article 6, Sec. 1 lit. (a) GDPR. Consent can be revoked at any time with effect for the future.

5.3 Electronic newsletter

We make it possible to order electronic newsletters on various topics. For this purpose, we collect the e-mail addresses of those users who voluntarily register as subscribers. The legal basis for sending the newsletter(s) is Article 6, Sec. 1 lit. (a) GDPR in conjunction with § 7 Section 2 No. 2 UWG (consent). We use the so-called double opt-in procedure to register for our newsletter. This means that after registering for the newsletter, the user receives an e-mail to the specified e-mail address asking for confirmation. Users can revoke their consent to receive the newsletter at any time with effect for the future by clicking on the unsubscribe link provided in every newsletter or by sending an e-mail to privacy@messe-duesseldorf.de.

5.4 Prize competitions, loyalty programmes

Insofar as we run loyalty programmes or prize competitions, all rules and information about the respective procedure and the use of personal data during the term of the programme will be clearly stated in the respective conditions of participation. Furthermore, the information collected is used to verify the user identity and to notify the winners or prize winners. Again, we do not share information about specific individuals with third parties.

6. Other visitor services

6.1 Matchmaking

Matchmaking is a networking platform for participants of Messe Düsseldorf GmbH events. The matchmaking engine calculates and displays the people, products and/or services that are most relevant to the user of the GRIP matchmaking services. The GRIP Matchmaking Platform thus facilitates the professional exchange between visitors and exhibitors. Personal data is transferred to our service provider, Intros.at Ltd, Epworth House, 25 City Rd, London EC1Y 1AA, London, United Kingdom (as a processor). This service provider operates an event-related digital networking platform (for desktop devices and mobile devices) in the form of the GRIP Matchmaking Service. We base the processing of personal data in the context of the provision of the GRIP Matchmaking Services on Article 6, Sec. 1 lit. (b) GDPR. Insofar as personal data is transferred to a third country in the context of the use of the “Teams” and “Instant Video Calls” functions, we base this transfer on the legal basis of Article 49, Sec. 1 Sub-section 1 lit. (b) GDPR. In doing so, we process the following types of data provided by the user himself/herself in the visitor registration or in his/her GRIP profile: Name, email address, city, country, interests (for registered users), usage data of the GRIP matchmaking services, other so-called structural data of the registration, product or service categories in which there is

interest. The provision of the types of data listed above in their own GRIP profile is not obligatory for users. Data transferred from the visitor registration can be edited and/or deleted by the user in the GRIP profile. However, the consequence of not providing this data is that the full functionality of the GRIP Matchmaking Services can only be used to a limited extent. In particular, the creation of matches, i.e. the determination of matches with other users of the GRIP Matchmaking Service, is not possible or only possible to a limited extent. In order to be able to use the virtual meeting room function within the matchmaking platform, it is necessary for technical reasons to use the service of the video meeting provider Whereby. If the exhibitor representative uses the matchmaking service and is also entered as a contact person in our exhibitor and product database, this person will be shown there as a matchmaking participant. We base the processing of personal data that takes place when this service is used within the framework of the exercise of legitimate interests on a balancing of interests in accordance with Article 6, Sec. 1 lit. (f) GDPR.

6.2 Web sessions

Depending on the event organised by Messe Düsseldorf GmbH, web sessions are offered by Messe Düsseldorf GmbH as well as by external parties (such as exhibitors or associations). Web sessions are seminars, events or conferences in which people can participate via the Internet. For example, the latest products, processes or generally relevant technical information are presented to the registered trade public. Participation requires a download and successful installation of the “Zoom” conference software from Zoom Video Communications, Inc, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113 (USA). A successful registration with the aforementioned provider of this software is also necessary. Each interested participant carries out this registration on his or her own. When registering for a web session after successful registration, the types of data required for participation in the session, namely surname, first name (can also be replaced by the person concerned with a pseudonym) and e-mail address, are transmitted by us to the aforementioned provider of “Zoom”, with whom Messe Düsseldorf GmbH maintains a corresponding contractual relationship. We base the processing of personal data in this respect on the fact that the transfer of data is in the interest of the data subject. In particular, since “Zoom” is technically particularly suitable for conducting the web sessions in order to offer participants an informative and high-quality web experience, there is a close and significant connection between the transfer of data and the contract concluded in the interest of the participants between Messe Düsseldorf GmbH and the provider of “Zoom”. The relevant legal basis is therefore Article 49, Sec. 1 lit. (c) GDPR. For participation in a free web session, the participant also agrees to his/her data (namely surname, first name, e-mail address, company affiliation, professional position, country) being passed on to the presenting exhibitor, in particular for the exhibitor’s own marketing purposes. We base the processing of personal data in this respect on the granting of consent in accordance with Article 6, Sec. 1 lit. (a) (in the case of exhibitors based in a third country without an adequacy decision in conjunction with Article 49, Sec. 1 lit. (a) GDPR.

6.3 Vehicle owner query / parking spaces of Messe Düsseldorf GmbH

We operate paid parking spaces for motor vehicles (KFZ) for rental. In cases where vehicles have been parked in chargeable parking spaces and the maximum parking time has been exceeded or no valid parking ticket has been purchased, we carry out a vehicle owner query at the Federal Motor Transport Authority. This serves to enforce parking fee claims in accordance with the parking conditions posted for the use of the parking spaces. In the event of personal identity between the holder and the parking space tenant, we rely on the legal basis of Article 39, Sec. 1 StVG (German Road Traffic Act) in conjunction with Article 6, Sec. 1 lit. (b) GDPR; otherwise (in the absence of personal identity) on the legal basis of Article 39, Sec. 1 StVG (German Road Traffic Act) in conjunction with Article 6, Sec. 1 lit. (f) GDPR (pursual of legitimate interests after weighing up interests). The vehicle owner query is both necessary and indispensable for asserting, securing or enforcing or for satisfying or defending legal claims in connection with the assertion of outstanding parking fee claims. This is because it is the only suitable means of enforcing the law. This, as well as the assessment made by the legislator in Article 39 of the German Road Traffic Act, means that our interest in carrying out the vehicle owner query outweighs the interest of the owner in not having the associated encroachment on his or her personal rights.

7. Candidate Management

1. The following data protection information under item 7 applies exclusively to the application procedure and thus between the candidate and Messe Düsseldorf GmbH.
2. Of course, you are free to declare for which purpose your personal data should not be used. If you no longer wish your data to be used for a specific purpose, you can object to any further use of your data here.
3. The data to be provided by the candidate in this procedure will be processed by our service-providing data processor, Haufe-Lexware Services GmbH & Co. KG, in a computer centre within Germany in accordance with the applicable legal provisions. The processing is carried out on our behalf.
4. Only employees of Messe Düsseldorf GmbH who are committed to the confidentiality of personal data and who have been trained in accordance with the applicable data protection law have access to the candidate’s personal data.
5. The data is collected, stored and used exclusively for the operation of the application procedure. Data will only be stored to the extent permitted by law. The candidate personal data will be deleted six months after a possible rejection. The data will not be passed on to third parties, including group companies of Messe Düsseldorf GmbH.
6. We offer a so-called job subscription. This is a job finder service that belongs directly to a specific job market and that informs the searcher about new jobs. Persons interested in working for Messe Düsseldorf GmbH can set up such a job subscription online. There, the interested party enters his / her e-mail address and a password of his / her choice and selects which type of job advertisements are to be sent to him / her after publication on the homepage. Registration takes place according to the double opt-in procedure. In the case of this job agent, the data of the interested party will be stored until revoked after successful registration and confirmed registration and used within the scope of the services of the job agent.
7. The transmission of the data is encrypted (https) so that it cannot be read, copied, changed or removed by unauthorized persons.
8. You can object to the use of the data at any time here.

8. Your rights as a data subject

Right to information / data deletion / restriction of processing

Any data subject has the right to obtain, on request, confirmation as to whether personal data relating to him or her are being processed by us. If such processing takes place, the data subject may request information about the personal data processed by us concerning him or her. Furthermore, he or she may request data rectification, data erasure, restriction of processing and data portability, as well as object to the processing.

8.2 Right of appeal

Any person affected by data processing has the right to lodge a complaint with a competent supervisory authority.

8.3 Right of objection