Privacy Policy

Data Protection Regulations of Messe Düsseldorf GmbH

As from 24.06.2019

The present data protection regulations make equal reference to both men and women. For the purpose of
simplification, only the male form is used.

1. General Information on Data Protection

2. Data protection with special applications

3. Public Process Directory

4. Right of objection

1. General Information on Data Protection

The Internet portal of Messe Düsseldorf GmbH is primarily a marketplace for the processing of business
transactions. Although a great deal of information is also available to anonymous visitors, there is
sometimes a need for us to obtain data from you which can be company or even person-related in order to
provide you with the desired services. Our systems protect your data in accordance with internationally
applicable data protection standards,the European General Data Protection Regulation (Regulation
(EU)2016/679, GDPR) and national data protection regulations. Our goal is to make it possible for you to be
certain of responsible and confidential treatment of your data. Encoding procedures are used for the secure
transmission of payment data. This means that communication between your browser and our system cannot be
read by other participants in the Internet. Personal data is used exclusively for the purposes explicitly
stated in these data protection regulations or during later data collection.

Our websites may contain links to websites of other providers. As we are not responsible for their
information, we recommend that you study the information provided on such sites concerning data protection
carefully.

Each time content is requested from our Internet site, data (e.g. name of the file requested, date/time,
data volume transferred) on this process is stored in a protocol file. In this way, we monitor user conduct
throughout the entire website. Nevertheless, the bringing together of this information with data on
individual users is only carried out with prior, written consent. Messe Düsseldorf GmbH classifies the
entire use statistics on the basis of the user?s domain name, the browser type and the MIME type by reading
out this information from the browser string (the information contained in the browser of every user). We
monitor and list the search terms entered in the search engine by users; nevertheless, this tracing is never
carried out in connection with individual users.

1.1 Cookies

We employ so-called session cookies. We do so in the pursuit of legitimate interests on the basis of a
balancing of interests according Article 6 section 1 letter f. of the European General Data Protection
Regulation (Regulation (EU) 2016/679, GDPR). Said cookies enable optimisation of communication times for
incoming web inquiries. As a fundamental rule, our website can also be used without cookies, however this
can result in restrictions with individual applications. Cookies are not used for the preparation of
person-related use profiles. We moreover employ cookies with a runtime of 180 days, in order to collect and
use anonymous usage data for purposes of launching advertising adds on the basis of online behavioral
targeting. No personal data, particularly no IP-address, is gathered in the scope of this procedure. We
cooperate with Aumago GmbH (“Aumago”), Berlin, an audience marketer. Aumago uses cookies. Cookies are small
text files that are stored in the browser of a user. Pseudonymous usage data in the form of cookie IDs and
advertising IDs without IP addresses are collected in the cookie. The cookie ID and promotional ID without
an IP address are not enough to identify a natural person behind a browser / user.

Based on the user’s surfing behavior (visited website, categories, product pages), Aumago assumes an
interest in a specific B2B industry and uses this information on our behalf to run targeted, usage-based
online advertising campaigns. The cookies can be synchronized in this regard via cookie matching with other
platforms. The matching can e.g. take place for: Google, DoubleClick, Adition, Appnexus, Mediamath, The
Trade Desk, Adform, Active Agent, yieldlab.

The cookies are either Aumago cookies or cookies from service providers that are used by Aumago, such as The
ADEX GmbH, Berlin. The cookie is created as soon as you are in touch with an advertising medium placed by
Adform (such as advertising banners). The cookie includes an advertising ID and is created with a runtime of
365 days. It does not include any characteristics (such as full IP address, first and family name, address,
e-mail account) by which you can be identified personally. However, the advertising ID does tell us which
advertising media drew your attention to us. Under no circumstances will Messe Düsseldorf GmbH link the
advertising ID with personal data. The user can at any time opt-out via the following link to
declare his dissent with this cookie tracking. Technically, this opt-out stores an opt-out cookie in the
user’s browser. The opt-out cookie requires that the browser settings do not prevent the storage of cookies
or deletes cookies. After deleting the opt-out cookie, the user must repeat the opt-out. Alternatively, the
user can delete the cookies directly in the browser, sets his browser settings on do-not-track or manage his
cookie preferences here. If you would like to receive information about the
information stored in your cookie, please send us your cookie ID.“

We use Hotjar https://www.hotjar.com in order to better
understand our users‘ needs and to optimize this service and experience. Hotjar is a technology service that
helps us better understand our users experience (e.g. how much time they spend on which pages, which links
they choose to click, what users do and don‘t like, etc.) and this enables us to build and maintain our
service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’
behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form),
device screen size, device type (unique device identifiers), browser information, geographic location
(country only), preferred language used to display our website). Hotjar stores this information in a
pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual
users or to match it with further data on an individual user. For further details, please see Hotjar’s
privacy policy by clicking on this link https://www.hotjar.com/privacy.

You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and
Hotjar’s use of tracking cookies on other websites by following this opt-out link https://www.hotjar.com/opt-out.

1.2 Video surveillance on our trade fair premises

Video surveillance takes place on the trade fair premises of Messe Düsseldorf GmbH. The video
surveillance serves the purpose of observing the rights of domestic authority, in order to prevent crime
as well as to conserve evidence in case a crime has occurred. Video surveillance moreover takes places
for logistical purposes of traffic routing, traffic congestion prevention, coordination of transport of
persons by bus and for purposes of truck guidance. The legal basis for said video surveillance is
Article 6 paragraph 1 letter f. of the European General Data Protection Regulation (Regulation (EU)
2016/679, GDPR), whereas the legitimate interests pursued by Messe Düsseldorf GmbH arise from the
aforementioned purposes. If and as far as video footage is recorded, it is deleted upon lapse of 48
hours, unless a longer lasting storage is necessary to observe the aforementioned legitimate interests.
If the latter is the case, a deletion will take place upon shortfall of the purpose of processing.

2. Data protection with special applications

2.1 Online orders

When you use our online ordering system, we receive from you the data required for processing of the
order and performance of the services agreed. Data fields through which the data required for processing
of the business transaction is collected, are always marked separately (with an asterisk).

If you provide additional, voluntary data, for example on particular specialist interests, we can send
you targeted specialist information even before an event. This means that, by entering this data, you
yourself decide which data we receive from you on you and your company.

In addition, we offer you the possibility of correcting or altering the data collected during
registration. These changes can be made simply by calling up your user profile, clicking on the ?Edit?
link and carrying out the alterations to your own data which are then displayed in the form. Users can
alter this information at any time and as frequently as necessary.

2.2 Surveys

We make it possible to participate in interactive surveys so that users can exchange their opinions with
other users easily and discover the thoughts of our users on important subjects. Surveys are also used
to enable even more precise adaptation of the content and services to our customer base. In this
respect, we use a system which ?marks? users following the casting of their vote, thus preventing them
from voting more than once on a specific question. There is no correlation between this marking and
information on individual users. Exercising our own discretion, we forward the demographic information
collected during these surveys to the other users of the portal, but never your person-related data.

2.3 Message Boards / Forums

Message boards and forums enable lively, non-chaired conversations on a variety of topics. We require
users to register on a personal and company basis in order to prevent misuse of this platform.

2.4 Electronic Newsletters

We enable the ordering of electronic newsletters on various subject areas. For this, we record the
e-mail addresses of those users who voluntarily register as subscribers. The users can delete themselves
from the circulation list by following the instructions including in every dispatch.

2.5 Prize competitions, loyalty programmes

If we organise loyalty programmes or prize competitions, all rules and information on the respective
procedure and the use of person-related data are stated clearly during the full period of the programme.
The information collected is also used for verification of the user identity and to inform the winners.
Here too, the policy of Messe Düsseldorf GmbH is not to forward information on specific persons to third
parties.

2.6 Google Applications

We use services provided by Google Ireland Limited (hereinafter referred to as „Google“) based in the
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

2.6.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses
“cookies”, which are text files placed on your computer to help the website analyse how visitors use the
site. The information generated by the cookie about your use of the website (including your IP address)
will be transmitted to and stored by Google on its servers. Google will use this information for the
purpose of evaluating your use of the website, compiling reports on website activity for website
operators and providing other services relating to website activity and internet usage. Google may also
transfer this information to third parties where required to do so by law, or where such third parties
process the information on Google’s behalf. Google will not associate your IP address with any other
data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your
browser, however please note that if you do this you may not be able to use the full functionality of
this website. By using this website, you consent to the processing of data about you by Google in the
manner and for the purposes set out above.

You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing
the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en.

2.6.2 Google Analytics for Firebase

To improve our understanding of user behaviour in our apps and to optimise our service, we use Google
Analytics for Firebase (hereinafter „Firebase“). This involves anonymised user data being transmitted to
Firebase. We also make use of other Firebase functions that enhance user guidance, assess the reasons for
errors within the apps, and enable push notifications. Firebase is a real-time database, which is used to
embed real-time information in a website. We employ Firebase in the pursuit of legitimate interests on the
basis of a balancing of interests according Article 6 section 1 letter f. of the European General Data
Protection Regulation (Regulation (EU) 2016/679, GDPR).Firebase is a subsidiary company of Google and is
headquartered in San Francisco (CA), USA. To view the Firebase Privacy Policy, visit https://www.firebase.com/terms/privacy-policy.html
.

If you wish to permanently deactivate Firebase on your device, you may anytime make respective adjustments
in the app’s settings.

2.6.3 Google Re-Marketing

This website uses Google Re-Marketing. Google Re-Marketing is an advertising service delivered by Google,
which enables us to provide you with targeted advertising to meet your supposed interests, based on your
usage patterns on previous visits. Such advertising is only presented in Google advertising space – either
Google AdWords or the Google Display Network. Users are identified via a cookie in the web browser. The
collection, storage and editing of collected data is based on the Google Analytics details and users’ IP
addresses. Google Re-Marketing does not involve any combination of IP addresses or personal details with any
further Google data, especially usage data. Each Re-Marketing cookie continues to be used for 18 months. You
may veto Google Re-Marketing or edit your settings on the Google Ads Settings page https://www.google.com/settings/u/0/ads?hl=en.
Alternatively, you can prevent Re-Marketing by disabling cookies in your browser settings. This website uses
Google Analytics reports to identify demographic features based on interest-related Google advertising as
well as on third-party details of site visitors (e.g. age, gender and interests).

2.6.4 Google-DoubleClick

We use cookies from DoubleClick in order to quantify the effectivity of our advertising campaigns, to limit
the frequency with which you are shown a specific advertisement and to only display advertising that is
interesting and relevant to you.

If an advertisement is to be displayed on a browser, DoubleClick can check using the browser’s cookie ID to
see which DoubleClick advertisements have already been displayed on this specific browser. With the help of
cookie IDs, DoubleClick can also identify conversions that bear reference to advertisement enquiries. This
is the case when a user sees a DoubleClick advertisement and then, at a later time and with the same
browser, goes to the advertiser’s website and purchases something on it.

DoubleClick cookies do not contain any personal data.

You will find further information at https://support.google.com/adsense/answer/2839090?hl=de.
The cookies from google DoubleClick and google Remarting can be deactivated at any time using the
advertising setting https://www.google.de/settings/u/0/ads?hl=de.

2.7 Social Media Plug-ins

2.7.1 Facebook

In order to create awareness for our services and in order to communicate with you as a visitor and user
of our internet presence we rely – inter alia – upon Facebook services as we attend to legitimate
interests under Article 6 section 1 letter f. of the European General Data Protection Regulation
(Regulation (EU) 2016/679, GDPR).

2.7.1.1 Facebook membership

If you are a member of the social network Facebook, Facebook will be able to track your internet
activities automatically. Messe Düsseldorf has no influence on this. For more information, please refer
to the privacy policies of Facebook. Our Internet presence uses social plug-ins (“plug-ins”) of the
social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
(“Facebook”). The plug-ins are labelled with the Facebook logo or the addition “Facebook social
plug-in”. If you access a Messe Düsseldorf GmbH website that includes such plug-ins, your browser
connects directly to the Facebook servers by clicking on the button. The content of the plug-in is
transmitted to your browser by Facebook, which also embeds information in the website. Through embedding
the plug-in, Facebook receives the information that you have accessed the corresponding page of our
website. If you are logged into Facebook, Facebook can assign your visit to your Facebook account. If
you interact with the plug-ins, e.g. click the “like” button or add a comment, your browser transmits
the corresponding information directly to Facebook, where it is stored. Please refer to the privacy /
data protection information issued by Facebook to learn about the purpose and scope of the data
collection and the further processing and use of the data by Facebook. You will also find information
about your rights and your settings options to protect your privacy. If you do not wish Facebook to
collect data about your visit to our website when using this plugin, please log out of your Facebook
account before accessing our site. Wherever possible, our website uses a system called Two Clicks for
More Data Protection, developed by heise.de.

2.7.1.2 Facebook Insights

By virtue of the so called “Insights” Facebook provides us with statistical data of different
categories. These statistics are generated and provided by Facebook. As the operator of our
Facebook-page (as a so called fanpage) we do not have any influence on the generating and layout. We are
unable to deactivate said functionality or prevent the recording and further processing of said data.
For a selectable time frame and each time for the categories “fan”, “subscribers”, “persons reached”,
and “interacting persons” with respect to our Facebook-pages we are provided by Facebook with the
following data: Total number of page views, “I like”-information, page activities, interaction with
postings, range, videos viewed, range of postings, commentaries, shared content, answers, proportion of
women and men, age, origin relating to country and city, language, page views and clicks in the shop,
clicks in trip planners, clicks on telephone numbers, type of terminal devices employed. Also, in doing
so, data on Facebook groups linked to our Facebook pages are provided to us. This takes place in the
scope of a joint controllership (in terms of Article 26 GDPR) between us and Facebook Ireland Limited, 4
Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Due to the ongoing development of Facebook
the availability and the processing of said data is subject to constant change. Therefore for further
details we allude to data protection information issued by Facebook the referred to above. We use this
data made available in an aggregated (i.e. anonymized) form, in order to make our content and activities
on our Facebook pages more attractive. In this way, for example, we use the proportional distribution by
age and gender for an adjusted addressing and we use the preferred visiting times of users for a
temporal optimized planning of our content releases. Information about the kind of terminal devices used
by visitors of our Facebook pages help us to adjust the looks and the design of our content. In line
with the Facebook Terms of Use each user has consented to in the scope of settings up her / his Facebook
profile, we are able to identify our subscribers and fans of our Facebook-pages and we may view their
profiles and further information shared therein by them.

2.7.2 Twitter

Our Internet presence uses social plug-ins (“plug-ins”) of the social network twitter.com, operated by
Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The plug-ins are labelled
with a Twitter logo.
If you access a Messe Düsseldorf GmbH website that includes such plug-ins, your browser connects directly to
the Twitter servers when clicking on the button. The content of the plug-in is transmitted to your browser
by Twitter, which also embeds information in the website.

Through embedding the plug-in, Twitter receives the information that you have accessed the corresponding
page of our website. If you are logged into Twitter, Twitter can assign your visit to your Twitter account.
If you interact with the plug-ins, e.g. forward a tweet or add your own comment, your browser transmits the
corresponding information directly to Twitter, where it is stored.

Please refer to the data protection information issued by Twitter to learn about the purpose and scope of
the data collection and the further processing and use of the data
by Twitter. You will also find information about your rights and your settings options to protect your
privacy.
If you do not wish Twitter to collect data about your visit to our website when using this plugin,, please
log out of your Twitter account before accessing our site.

2.7.3 XING

Our Internet presence uses social plug-ins (“plug-ins”) of the social network xing.com (XING), operated
by XING AG, Gänsemarkt 43, 20354 Hamburg , Germany. The plug-ins are labeled with a XING logo. If you
access a Messe Düsseldorf GmbH website that includes such plug-ins, your browser connects directly to
the XING servers when clicking on the button. The content of the plug-in is transmitted to your browser
by XING, which also embeds information in the website.

Through embedding the plug-in, XING receives the information that you have accessed the corresponding
page of our website. If you are logged into XING, XING can assign your visit to your XING account. If
you interact with the plug-ins, e.g. click the “like” button or add a comment, your browser transmits
the corresponding information directly to XING, where it is stored. Please refer to the data protection
information issued by XING to learn about the purpose and scope of the data collection and the further
processing and use of the data by XING. You will also find information about your rights and your
options to protect your privacy. If you do not wish XING to collect data about your visit to our website
when using this plugin, please log out of your XING account before accessing our site.

2.7.4 Google+

Our Internet presence uses social plug-ins (“plug-ins”) of the social network operated by plus.google.com
(Google+), Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. The plug-ins are
labeled with the Google+ logo or the addition ” Google+ social plug-in”.

If you access a Messe Düsseldorf GmbH website that includes such plug-ins, your browser connects directly to
the Google servers. The content of the plug-in is transmitted to your browser by Google, which also embeds
information in the website.

Through embedding the plug-in, Google receives the information that you have accessed the corresponding page
of our website. If you are logged into Google+, Google can assign your visit to your Google+ account. If you
interact with the plug-ins, e.g. add a comment, your browser transmits the corresponding information
directly to Google, where it is stored.

Please refer to the data protection information issued by Google to learn about the purpose and scope of the
data collection and the further processing and use of the data by Google. You will also find information
about your rights and your options to protect your privacy.

If you do not wish Google to collect data about your visit to our website when using this plugin, please log
out of your Google account before accessing our site.

2.7.5 LinkedIn

Our Internet presence uses social plug-ins (“plug-ins”) of the social network operated by linkedin.com
(LinkedIn), LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The plug-ins are
labeled with the LinkedIn logo or the addition ” LinkedIn social plug-in”.

If you access a Messe Düsseldorf GmbH website that includes such plug-ins, your browser connects directly to
the LinkedIn servers when clicking on the link. The content of the plug-in is transmitted to your browser by
LinkedIn, which also embeds information in the website.

Through embedding the plug-in, LinkedIn receives the information that you have accessed the corresponding
page of our website. If you are logged into LinkedIn, LinkedIn can assign your visit to your LinkedIn
account. If you interact with the plug-ins, e.g. add a comment, your browser transmits the corresponding
information directly to LinkedIn, where it is stored.

Please refer to the data protection information issued by LinkedIn to learn about the purpose and scope of
the data collection and the further processing and use of the data by LinkedIn. You will also find information about
your rights and your options to protect your privacy.
If you do not wish LinkedIn to collect data about your visit to our website when using this plugin, please
log out of your LinkedIn account before accessing our site.

2.7.6 YouTube

Various websites at Messe Düsseldorf GmbH contain embedded videos on YouTube.com (YouTube). YouTube is a
service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
If you access a Messe Düsseldorf GmbH website that includes such plug-ins, your browser connects directly to
the Google servers when clicking on the link. The content of the plug-in is transmitted to your browser by
Google, which also embeds information in the website.

Through embedding the plug-in, Google receives the information that you have accessed the corresponding page
of our website. If you are logged into YouTube, Google can assign your visit to your YouTube account. If you
interact with the plug-ins, e.g. add a comment, your browser transmits the corresponding information
directly to Google, where it is stored.

Please refer to the privacy policy
information at Google for details about the purpose and scope of data collection and use by Google as well
as your rights and privacy options as a YouTube customer.

If you do not wish Google to collect data about your visit to our website when using this plugin, please log
out of your YouTube account before accessing our site.

2.8 Other Visitor Services

2.8.1 Messe Düsseldorf Social Sign-in

Description of application: Social Sign-in and/or Social Login is an application, which is used for the
registration process in a protected environment. Upon registration with a social media profile, the
information available about the user is automatically saved in the user administration of the website of
Messe Düsseldorf. A new user profile is created. At the time of logging in with the social network ID,
the API requests the personal data from the network and transfers this to the database of Messe
Düsseldorf. Through the connection to the social network, Messe Düsseldorf automatically receives the
data necessary for a registration process in the relevant system.

2.8.2 Chatbot

Users can communicate via a so-called chat widget named “kommunicate.io” using the chatbot
offered by Messe Düsseldorf GmbH. This chat widget is a product of Applozic Inc., a company domiciled at
Stanford Financial Square, 2600 El Camino Real, Suite 415, Palo Alto, CA 94306 United States. For the data
protection declaration of Applozic Inc. regarding kommunicate.io go to https://www.kommunicate.io/privacy-policy.
A platform makes it possible to connect service staff with end users. All end users are transferred to a
chatbot. To this end, the enquiries that users enter into the chat window are transferred via an interface
to dialogflow.com for an intent analysis (dialogflow is a service and/or software by Google; for Google’s
data protection declaration regarding dialogflow.com go to https://policies.google.com/privacy?hl=de).
Here the text entered by users is evaluated. The analysis performed here using Machine Learning technology
allows the software to identify the user’s intention and assign a pre-formulated answer to it. This answer
is sent back to kommunicate and displayed in the chat window. To improve the precision of the chatbot’s
replies, the chat records are saved and used to train the Machine Learning models underlying the chatbot.
This is the only way to enable and further optimise the ability of the chatbot to handle natural speech. In
the dialogue with the chatbot personal data are neither requested nor required at any point in time. Users
can therefore not be identified. Users have the possibility to delete individual conversations. For the
processing of personal data carried out within the legitimate interest of the controller we refer to Article
6 Sec. 1 lit. f. of the European General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).

2.9 Candidate Management

1. Only the present data protection regulations apply to the application procedure and thus insofar to the
   relationship between the candidate and Messe Düsseldorf GmbH.
2. Any data to be submitted by the candidate will be processed by our service providing data processor, the
   Haufe-Lexware Services GmbH & Co. KG in a computer center within Germany in accordance with any
   applicable laws. Any data processing is carried out on behalf and by order of Messe Düsseldorf GmbH.
3. Only those staff members of Messe Düsseldorf GmbH who are bound to maintain the secrecy of data and who
   have been trained according to the applicable data protection laws have access to the candidate’s
   personal data.
4. Any data is being collected, saved and used exclusively for purposes of conducting the application
   procedure. Data storage is carried out exclusively within the boundaries of the law. Upon lapse of six
   months upon a contingent rejection the candidate’s data is being deleted. Data will not be passed on to
   any third parties including allied companies of Messe Düsseldorf GmbH.
5. Messe Düsseldorf offers a job-offer subscription service. This service consists in a subscription for
   searching and offering jobs, whereas the subscription is directly linked to a specific recruitment
   market informing candidates about new open jobs. Persons who are interested in working with Messe
   Düsseldorf may sign-up online for such a subscription. The interested candidate is required to enter her
   / his e-mail address and a password she / he chooses. Moreover the candidate may select which kind of
   job ads she / he wishes to receive. The registration for the subscription follows the double opt-in
   procedure. If a candidate makes use of the offered service “Jobagent”, the candidate`s data will upon
   successful sign-up and upon confirmed registration be saved and used in the scope of the services until
   the candidate revokes her / his consent.
6. The transfer of any data is encoded (https) so that unauthorized persons cannot read, copy, change or
   delete it.
7. The permission to use data may anytime be revoked here.

2.10 Website Tracking

For marketing and optimisation purposes this website uses products and services provided by WiredMinds GmbH
(www.wiredminds.de). This involves collecting, processing and storing data which adds up to a usage profile,
saved under a pseudonym. Wherever this is possible and reasonable, usage profiles are kept completely
anonymous. Cookies may be used for this purpose. Cookies are small text files which are saved to the
visitor’s internet browser and are subsequently used for the identification of the internet browser. The
data material that is collected may also include personal details which are either sent to WiredMinds or
collected by WiredMinds directly. WiredMinds may use details which are placed by visitors on the website for
the purpose of creating anonymous usage profiles. Any data material collected in this way is not used for
the personal identification of site visitors without their special consent; neither is such data combined
with the personal details associated with the pseudonym. Any IP addresses are anonymised immediately upon
collection by deleting the last group of digits. Data collection, processing and storage may be stopped by
you at any time and will not be applied again from that point onward.

Exclude from website tracking

2.11 Adserver Technologies

On this website data may be collected and saved in anonymised form by means of technologies used by such
adserver providers as Adform for marketing and optimisation purposes. To this end cookies can also be used
but you can change your browser settings in such a way that you receive a message upon receipt of a cookie
and/or if the reception of the cookie is to be refused. For the respective settings please refer to Item
1.1. For further information on Adform‘s Data Protection Rules go to: http://www.adform.com/site/privacy-policy.
On this site you can also object to your data being collected and saved at any time and with effect for the
future and access your cookie data if need be. The data is evaluated by the media agency CROSSMEDIA GmbH.
CROSSMEDIA GmbH aggregates the anonymised data furthermore, so that Messe Düsseldorf GmbH cannot infer any
personal data from this.

2.12 Use of the conversion pixel by Adform

This website uses Adform conversion tracking. The cookie for conversion tracking is created once a user gets
in touch with an ad placed by Adform. These cookies do not contain any information allowing users to be
personally identified. Users who do not want to take part in the tracking can deactivate Adform‘s cookie via
their Internet browser. For further information on Adform‘s data protection regulations go to http://www.adform.com/site/privacy-policy.
You can change your browser settings so that you receive a message upon receipt of a cookie and/or if the
receipt is to be refused. For the relevant settings please refer to Item 1.1.

3. Public Process Directory

3.1 Name of the responsible body

Messe Düsseldorf GmbH

3.2 Management

Werner Matthias Dornscheidt (CEO)
Hans Werner Reinhard
Wolfram N. Diener
Bernhard Johannes Stempfle

3.3 Address of the responsible body

Messeplatz, Stockumer Kirchstrasse 61, D-40474 Düsseldorf

3.3.1 Address of the Data Protection Officer

Data Protection Officer
Michael Mohr
Messe Düsseldorf GmbH
Stockumer Kirchstr. 61
D-40474 Düsseldorf
Email: datenschutz@messe-duesseldorf.de

3.4 Purpose of the collection, processing or use of data / legitimate interests pursued by
Messe Düsseldorf GmbH

The purpose of the Messe Düsseldorf GmbH company is the promotion of economic activity through the
organisation of trade fairs and exhibitions at home and abroad, through the organisation or
implementation of congresses and conferences, and through all activities related to the trade fair,
exhibition, congress and conference business. Our work focuses particularly on the organization of
industry sector specific events addressing narrowly defineable target groups to be identified on the
basis of their respective professional fields of activity. For the fulfilment of this purpose, we
maintain trade fair and exhibition centres as well as congress and conference facilities which we use
for events or rent out in return for appropriate payment. To this end we process personal data
particularly of exhibitors, Professional exhibition visitors, exhibition visitors, journalists, service
providers, suppliers, cooperation partners (respectively of the employees, legal representatives, or
other agents) as well as of persons with a close relationship to our company due to personal ties. Any
data processing is either based on the data subject’s consent (particularly in case of electronic direct
marketing measures or with the use of photos and video footage for advertising purposes) or on another
legal permission as stipulated in Article 6 of the European General Data Protection Regulation
(Regulation (EU) 2016/679, GDPR) and serves the express purposes of the company, in particular the
implementation of our events offered, the handling of any relevant business processes and for assuring
and improving the quality of our trade fair events such as for purposes of providing our customers (see
below cipher 3.5, category A, B, F) with information prior to and after a certain event about the very
event and about follow-up events. In doing so we pursue the legitimate interest to make our professional
exhibitions accessible exclusively to professional exhibition visitors with a professional relation to
the subject of the respective event. This shall serve the purpose to enhance the quality of the
professional discussion among attendants. Follow-up events may include other subject-related events
organized or implemented by Messe Düsseldorf GmbH within Germany or abroad. Members of trade fair clubs
will also receive promotional information on offers corresponding to their stated interests from Messe
Düsseldorf. Your personal data will not be transmitted to any third parties for advertising purposes,
unless such data disclosure is part of a contractual service provided by Messe Düsseldorf GmbH (as e.g.
in the scope of the admission ticket barcode scanning service, see below cipher 3.6, bullet 8). When you
present your visitor’s badge the data stored on this badge may thus be retrieved and therefore also
stored and used by third parties. In such cases the data protection terms of the third party shall apply
in the third party’s own responsibility as data controller.

3.5 Description of the groups of persons concerned and of the corresponding
data or categories

For the fulfilment of the purposes stated under 3.4, the following person-related data is collected,
processed and used for each group of persons:

Group of persons	Data	Category
Representatives of exhibiting companies	Company data with addresses, contact persons and communication data, information on branch of industry, product data, contract and settlement data	A
Professional exhibition visitors (representatives of companies visiting trade exhibitions)	Registration data such as company data with addresses, contact persons and communication data, calendar day of voucher redemption, information on branch of industry, product interests as well as contract and settlement data	B
Exhibition visitors (public events without status as professional visitor)	Name, address, communication data, exhibitors of interest, payment data, calendar day of voucher redemption	C
Exhibitors of interest (potential new customers)	Company data with addresses, contact persons and communication data, information on branch of industry, product data, interests	D
Contact persons of suppliers, service providers, other business partners	Company data or data on institutions with addresses, contact persons and communication data, information on products and services, contract and settlement data	E
Club Members	Name, address, communication data, exhibitors of interest, personal data (date of birth, household income, purchasing behaviour, calendar day of voucher redemption)	F

Video surveillance is used in the exhibition centre for the purpose of managing traffic/visitor flows and
for security purposes. No evaluation is carried out for other purposes.

Personnel data on employees, applicants and service companies is used within the framework of internal
communication, servicing, administration and for settlement purposes.

3.6 Recipients or categories of recipient to whom the data can be
forwarded

• Public bodies given the existence of overriding legal regulations (category A-F)
• Companies within the Messe Düsseldorf Group (category A, B, C, F)
• Companies/Entrepreneurs who acquire an exhibition event from Messe Düsseldorf and implementation
  partners of Messe Düsseldorf (category A-D, F)
• Foreign representations if the registered company office of the person visiting the exhibition is
  abroad (category A, B, C, F)
• Order-data processors of Messe Düsseldorf (category A-D, F)
• Service providers for exhibition-accompanying services if the person inquires about corresponding
  services to Messe Düsseldorf (category A-D, F)
• Companies/Entrepreneurs who have issued vouchers for visitors will receive the visitor data (name,
  address, communication data, calendar day of voucher redemption) for the vouchers redeemed, provided
  this has been agreed by contract (category B, C, F)
• In addition, we offer exhibitors the option of accessing data on trade visitors and Club Members
  electronically. This service is subject to the visitor allowing the exhibitor to scan the barcode on
  their admission ticket. This means visitors themselves decide whether exhibitors have access to
  their electronic “visiting card”. Data transfer does not occur if the visitor objects to having
  their data passed on to the exhibitor (Category B, F).

In all cases, the forwarding of data is for fulfilment of the purposes stated under 3.4.

3.7 Normal periods for the barring/deletion of data

As a basic principle any personal data will be erased as soon as it is no longer needed to serve the
purposes it has been collected or otherwise processed for. A deletion will moreover be carried out in
cases such deletion is required by law and in cases, in which the data subject has revoked its consent
to the processing of its personal data or has objected to such processing. This does not apply, if and
as far as – despite of any revocation or objection – yet another legal basis or other overriding grounds
are on hand authorizing Messe Düsseldorf GmbH not to erase said personal data. This may for example be
the case, in cases in which legal periods of time for safeguarding apply (such as applicable for
business correspondence and booking documents).

3.8 Transmission of data abroad

To enable optimum servicing of our customers and business partners on a worldwide basis, we forward your
data to companies within the Messe Düsseldorf Group. The fulfilment of contractual purposes or the
performance of pre-contractual measures with potential exhibitors/exhibitors as well as with potential
visitors or visiting companies from third countries fundamentally necessitates the forwarding of data to
the international representation office of the corresponding third country. To this end, the
corresponding data as set out under 3.5 is forwarded to the responsible international representation
office

In the case of representatives of companies from third countries who visit a trade exhibition, the name
of the visitor can also be forwarded to the responsible international representation office, provided no
objection has been received concerning the forwarding. The registration data of a company whose
representative visits an exhibitor at his stand will be forwarded to the exhibitor visited – if the
visitor does not object to the scanning of his data on the barcode of his entrance ticket – irrespective
of whether the exhibitor is from Germany, the EU or another third country.

In all cases in which we ourselves arrange the transmission of person-related data to third countries
which do not have a sufficient level of data protection regulations, the data is only forwarded if the
recipient gives a contractual undertaking to adhere to equal standards of data protection and data
security as we ourselves.

3.9 Right of information

Each data subject has the right to obtain from Messe Düsseldorf GmbH a confirmation as to whether or not
personal data concerning her / him are being processed by Messe Düsseldorf GmbH. If such data processing
is being carried out, the data subject has the right to be granted access to her / his personal data
processed by Messe Düsseldorf GmbH. Moreover she / he has the right to have such personal data
rectified, erased, restricted in processing, to object to processing (see below cipher 4.) as well as to
data portability..

3.10 Right of appeal

Each data subject has the right to lodge a complaint with a supervisory authority.