Data Protection Information

All rights reserved. All forms of publication only with exclusive permission given by Messe Berlin GmbH and the BDLI as rightsholder.

Messe Berlin GmbH data protection notice for websites and online offers/presence and marketing.

Go to data protetaction ILA App

Controller within the meaning of the General Data Protection Regulation (GDPR): Messe Berlin GmbH, Messedamm 22, 14055 Berlin, Germany, e-mail: info@messe-berlin.de

Data protection officer: group data protection officer of Messe Berlin (address: as before; e-mail: datenschutz@messe-berlin.de).

Messe Berlin processes the following personal data for the websites and its online offers/presence: 

  • Newsletter registration/surveys, competitions (marketing): e-mail address and, if applicable, first name, surname, date and time of consent, type of newsletter, survey and competition and, if applicable, information on interests and answers to questions and communication. 
  • Contact requests: surname, first name, position, company/organisation, e-mail address, date and time of the enquiry and subsequent communication with Messe Berlin, as well as other information provided in the course of the enquiry. 
  • Comment function: in addition to the name of the user, the comments posted, the date and time of the comment and technical data such as the IP address of the user’s equipment. 
  • Social Media Profile: use of and interaction with profiles and content of the various Messe Berlin events on social media such as Facebook, Twitter, LinkedIn, Instagram, YouTube, Xing and TikTok. Comments, shares and likes can be processed.
  • Registration/Log in: some websites and online offers/presence are only accessible after previous registration or to a restricted group of persons. As a rule, the name, e-mail address and date/time of registration/log-in or any consent given are processed for this purpose and the identity of the user is verified. For further details, see the individual registration/log-in process.
  • Logfiles: When using the websites and online offers/presence, information are automatically sent from the end device of the user to the server of the website. This information is stored for a limited time in a so-called log file and includes the following data: Internet browser type and version, operating system, IP address, referrer URL and host name of the accessing end device, timestamp and duration of use, activities performed and result.
    Log files have a storage period of 30 days.
  • Technical data: Cookies or similar tracking technologies automatically collect data when using the websites. For details, see the information on cookies and tracking technologies here.

Messe Berlin processes the following data for e-mail marketing purposes:

  • Open, click and bounce rates.

The users themselves are the source of the personal data. Otherwise, the data are collected automatically or, in individual cases, transmitted by third parties (especially if the registration is carried out by another person). Mandatory information’s are marked as such in online forms. Unless otherwise stated, in such cases the information is required for the conclusion of a contract or for access to a specific online offer/presence. In individual cases, data from other providers (website operators) are transmitted to Messe Berlin and processed. In particular, this may be data containing information on the origin of the user, i.e., the source from which the user was directed to the Messe Berlin website. When users provide details for (another) person(s) (hereinafter referred to as "third party(ies)") or provide their data, users must ensure and assure that they are authorised to provide Messe Berlin with such third party(ies)' data, that Messe Berlin may lawfully process such data for the purposes mentioned in section 3, and that the third party/ies concerned have been sufficiently informed by the users about the processing of the personal data pursuant to this notice.

Messe Berlin processes the personal data mentioned in section 2 for the following processing purposes on the basis of the legal bases specified below:

3.1 Direct marketing, newsletter, market research, surveys and competitions (marketing)

Users can voluntarily register for newsletters or participate in (opinion) surveys or competitions on some of Messe Berlin's websites and online offers/presence. In these cases, the personal data will be processed for the purpose of contacting the user by e-mail or post and sending the electronic or postal newsletter or participating in and carrying out surveys or competitions. This includes the periodic or event-related electronic dispatch of information about Messe Berlin and its subsidiaries and affiliates, trade fair/event-related information about Messe Berlin's own and guest events, including about exhibitors, sponsors, association and other cooperation partners of the respective event as well as their respective products and services, and information about opening, accompanying and subsequent events. Subsequent events also include other trade fairs and events organised or held by Messe Berlin or other Messe Berlin group companies in Germany and abroad. The personal data are also processed for market research purposes, for online surveys and for direct marketing purposes (e.g., individualised online advertising). The legal basis for the processing of data for these marketing purposes is the consent (Art. 6 (1) (a) GDPR).

For information on the rights, in particular the right to object to the processing and use of data for marketing purposes, see section 7.

3.2 Contact requests and comment function

Messe Berlin processes personal data in order to be able to process and respond to inquiries to Messe Berlin. This can also include information material for marketing purposes, insofar as this serves to answer the inquiry. The processing is based on the legitimate interest of Messe Berlin in responding appropriately to inquiries and, depending on the kind of addressees, also in press and public relations activities (legal basis: Art. 6 (1) (f) GDPR) or for the performance of a contract or for the implementation of pre-contractual measures, insofar as the inquiry relates thereto (legal basis: Art. 6 (1) (b) GDPR). 

On some websites and online offers/presence there is the possibility to post comments. The personal data in this regard are processed on the basis of the consent of the user (legal basis: Art. 6 (1) (a) GDPR).

3.3 Social media and social media profiles

On the Messe Berlin websites, buttons for sharing and liking content via social networks are implemented using the "Shariff" software, which only transmits data to the respective operators of the networks when the buttons are clicked. Messe Berlin maintains publicly accessible profiles on social networks and social media channels for public relations, external presentation, customer acquisition, advertising and communication with participants of the social networks. The legal basis for data processing is the legitimate interest of Messe Berlin in a corresponding public presence and acquisition and maintenance of business contacts, also in the interest of the users (Art. 6 (1) (f) GDPR). 

  • For further information on data protection, see the privacy notices of the providers of the social networks and social media channels and the information on cookies and tracking technologies (section 4) here: https://www.messe-berlin.de/en/extra-pages/cookies/

3.4 Operation, usability, operability and safety/security

The data in the log files are processed for the purposes of operation, usability, operability and safety/security, including troubleshooting, in the legitimate interest of Messe Berlin and users (legal basis: Art. 6 (1) (f) GDPR). Some cookies or other technologies used on the websites of Messe Berlin and online offers/presence also automatically collect data for these purposes. The subsequent processing of this data serves the aforementioned purposes in the legitimate interests of Messe Berlin and the users (legal basis: Art. 6 (1) (f) GDPR). 
Logfiles have a storage period of 30 days.

3.5 Registration and ticket shop

When users purchase a ticket for an event or register for it, or in order to use additional functionalities on the websites Messe Berlin or online services/presence, the personal data are processed for the purpose of establishing and implementing the contractual relationship with Messe Berlin (legal basis: Art. 6 (1) (b) GDPR). For further information on data protection, please see the separate data protection notices in the ticket shop or on the website of the respective event.

3.6 Analysis, optimisation and personalised marketing

Cookies or other technologies used on the Messe Berlin or online offers/presence help Messe Berlin to analyze the use of the websites or online offers, to measure performance and to optimise the websites or online offers (so-called functional technologies). The subsequent processing of this data for these purposes serves these legitimate interests of Messe Berlin (legal basis: Art. 6 (1) (f) GDPR). The email marketing data are processed for the purposes of analysing and improving the effectiveness of email marketing. Some technologies are used to display personalised ads that correspond to users' interests (so-called marketingtechnologies). The subsequent processing of this data for this purpose is based on the consent of the users (legal basis: Art. 6 (1) (a) GDPR).

3.7 Compliance with statutory or legal obligations

Messe Berlin also processes the data in order to comply with statutory or other legal obligations (in particular commercial and tax law in the case of contracts, business communication and payments, and data security) (legal basis: Art. 6 (1) (c) GDPR). Messe Berlin retains any data protection consents and other consents given by users in its legitimate interest (legal basis: Art. 6 (1) (f) GDPR) in providing evidence thereof, inter alia, to comply with its legal obligations (such as accountability under Art. 5 (2) GDPR).

When users register for newsletters or make an inquiry, the personal data are processed by the competent Messe Berlin departments (in particular Marketing & Media or Corporate Communication and the respective event team). 

Where necessary, personal data (in particular contact details, trade fair/event-related data, status, ticket sales, interests) will be transmitted to other companies of the Messe Berlin group of companies or to the relevant foreign representative office for the purposes stated in section 3 (in particular, to respond to contact inquiries or, in the case of the foreign representative offices, so that they can serve as the first point of contact in the country of origin and provide support at local level throughout the entire (post-) sales process with respect to the participation in or presence at the trade fair/event, including visa matters, support before and after the trade fair/event (legal basis: Art. 6 (1) (b) GDPR).

When users post comments on Messe Berlin websites or online offers/presence, these can be accessed by all website visitors worldwide (legal basis: Art. 6 (1) (a) GDPR). 

On some websites and online offers/presence of Messe Berlin, services and functions of third parties may be integrated in the form of external links. These links are marked. When users click on these links and use these offers (legal basis: Art. 6 (1) (a) GDPR), they leave the Messe Berlin website or online offer/presence and are redirected to the website of the respective third party, which may use its own cookies and tracking technologies. These third parties process the data as own controllers within the meaning of the GDPR. For more information, please refer to the data protection and cookie notices of the respective third party.

In order to carry out certain processing activities in connection with the purposes mentioned in section 3 (in particular some special services, shipping/mailings, market research/customer surveys, hosting and IT support, website and content management, data management), external service providers are used which process the personal data on behalf of Messe Berlin (so-called "processors“) or in case of telecommunications providers or postal/courier service providers as own controllers (legal basis: Art. 6 (1) (f) GDPR).

Personal data may be disclosed to authorities and public bodies if Messe Berlin is legally obliged to do so, whether on the basis of laws and regulations (e.g., as part of supervisory authority procedures or by court order, resolution, judgment and the like) (legal basis: Art. 6 (1) (c) or (e) GDPR). For compliance with tax and commercial laws and regulations, personal data are disclosed to the tax and other competent authorities and public institutions.

The categories of recipients of the personal data also include courts and lawyers in the context of litigation, legal disputes and for the purpose of legal advice as well as auditors (legal basis: Art. 6 (1) (c) and (f) GDPR.

Some of the foreign representative offices, companies of the Messe Berlin group of companies, processors, service providers and third-party providers of social media and social media channels, cookies and tracking technologies are located in third countries outside the EU, which do not provide the same level of data protection as the EU, in particular due to the absence of a legal framework, independent supervisory authorities or data protection rights and remedies. The transfer of personal data to those third countries takes place, if the European Commission has adopted a so-called adequacy decision in this respect (Art. 45 (3) GDPR) (see here) or otherwise where appropriate safeguards in accordance with Art. 46 GDPR have been provided, in particular standard data protection clauses adopted by the European Commission pursuant to Art. 46 (2) (c) GDPR (for the latest version see here) and, where necessary, supplementary measures. A copy of the safeguards can be obtained upon request (e.g., by e-mail – for contact details see section 1 above).

With regard to the transfer of data to companies of the Messe Berlin group of companies and other website visitors or users, the transfer of data to third countries is necessary for the performance of the contract (Art. 49 (1) (b/c) GDPR); otherwise, it takes place on the basis of explicit consent of the users despite the lack of adequate data protection in the third countries outside the EU and the associated risks (Art. 49 (1) (a) GDPR).

Stored personal data will be erased once they are no longer needed for achieving the relevant purpose of their processing. If users unsubscribe from the newsletter, the data stored for this purpose will be deleted. The comments and the associated data (e.g., IP address) remain on the websites and online offers/presence of Messe Berlin until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g., offensive comments).

Insofar as processing is based on consent or on the basis of the legitimate interest of Messe Berlin or a company of the Messe Berlin group of companies, the data in question will no longer be processed for the associated purpose after receipt of the withdrawal of consent or receipt of the objection to the processing and, if applicable, will be deleted, unless legal exceptions to this rule are met. Notwithstanding the foregoing, data with regard to which there are obligations to retain data under commercial or tax law (e.g., German Trade Act) will only be deleted after expiry of the statutory periods (generally 6 or 10 years). Evidence of consent given will be stored for a maximum of three years after the date on which the consent is revoked or otherwise becomes invalid. 

To exercise the following rights, users and other data subjects can contact the controller at any time (contact details see section 1 above).

Rights of the data subjects pursuant to Art. 12-21 GDPR: the right to access about personal data, the right to rectification, erasure and data portability as well as to restriction of processing. If consent has been given, this can be withdrawn at any time with effect for the future.

Rights of objection

Insofar as the processing is based on the legal basis of legitimate interest (Art. 6 (1) (f) GDPR) (see section 3 above), the data subject has the right to object to the processing of personal data at any time on grounds relating to the particular situation of the data subject. 

Furthermore, an objection to the processing and use of the data for advertising purposes can be lodged at any time with effect for the future. The newsletters also include an unsubscribe link.

If data subjects are of the opinion that the data processing violates data protection law, they have the right to lodge a complaint with the competent supervisory authority of their choice (Art. 77 GDPR in conjunction with section 19 of the German Federal Data Protection Act (Bundesdatenschutzgesetz)).

Messe Berlin uses various types of cookies and tracking technologies such as pixels and local stored objects on its telemedia services: 

  • "Cookies" are small text files that are stored on the user's terminal equipment in the web browser when visiting or using the telemedia services. 
  • "Web beacons " are small graphic files that are also stored on the user's device. 
  • Local storage" means that data is stored locally in the cache, i.e., in a kind of temporary memory of the user's browser. If the cache is not deleted, the data remains there even when the browser window is closed, and the program is terminated and can be read out further. 

These cookies and tracking technologies automatically record information such as the date of the page view and surfing behavior and are automatically accessed and read out by Messe Berlin and any third-party providers of cookies and tracking technologies. This information enables, among other things, the recognition of the users at the next time they access the telemedia services. The information collected differs according to the type of tracking technology used.

These automatically collected technical data, especially in connection with the IP address, some device information or online identifiers, can be used to identify data subjects. In this case these technical data amount to personal data.

 

Services and functions of third parties may be integrated on some Messe Berlin telemedia services in the form of external links. When users click on these links and use these offers, they leave the Messe Berlin telemedia services and are redirected to the website of the respective third party, which may use its own cookies or tracking technologies. This third party processes the data as a controller within the meaning of the GDPR. For further information, please refer to the data protection and cookie notices of the respective third party.

Social media

Data published in social media accounts are available to all users of the social media channels worldwide. It is also available to the providers of the social media channels (YouTube/Google, Facebook, Twitter, LinkedIn, Instagram, Xing), which have their own terms of use/general terms and conditions (GTCs) and privacy notices (see below). Users should note the options provided by these providers to restrict the processing of usage or traffic data. 

Cookies and other tracking technologies

On some telemedia services, first party cookies and other tracking technologies as well as third party cookies and other tracking technologies are used, which can be divided into the following categories:

Essential

The storage of information in the user's terminal equipment (e.g., laptop, computer, mobile phone) or access to information already stored in their terminal equipment by means of these technologies is absolutely necessary for the operation and usability of the telemedia services so that Messe Berlin can provide these telemedia services expressly requested by the user (legal basis: section 25 (2) TTDSG). This also includes technologies for the use of the Consent Management Tool. These technologies can therefore not be deactivated.

The subsequent processing of any personal data is based on the legitimate interest of Messe Berlin in the functioning, provision and maintenance of the operation, usability, operability and safety/security of the telemedia services (legal basis: Art. 6 (1) (f) GDPR).

For further information on the technologies used, see the Consent Management Tool here.

For further information on subsequent data processing, see the data protection notice for websites and online offers/presence and marketing of Messe Berlin 

Functional/marketing

Storing information in the terminal equipment of the users or accessing information already stored in their terminal equipment by means of these technologies help to analyse the use of the telemedia services, measure performance and optimise the telemedia services for the user and/or dynamically display advertising on own and external websites, personalise content and advertisements and display relevant information in a targeted manner (e.g., via individualised banners on websites) and measure the efficiency of the advertising (e.g., whether an advertisement was clicked on and subsequent actions on the websites). These technologies also provide information to the respective third-party technology provider or advertising partner and are used by them for their own purposes, if applicable, as explained in their privacy notices and cookie notices. The aforementioned storage or access to the information is based on the consent of the users (legal basis: section 25 TTDSG).

The subsequent processing of any personal data is based on the consent of the user (legal basis: Art. 6 (1) (a) GDPR). 

For further information on subsequent data processing, see the data protection notice for websites and online offers/presence and marketing of Messe Berlin.

Social Media Plugins

The Messe Berlin telemedia services integrate social media plugins. If users are logged in with their social media account, they can share content such as individual blog posts, products or news in the social media by clicking on the respective icon on the web pages. Among other things, the IP address of the user’s device is transmitted to the social networks. Users can be identified through the connection and the third-party providers can create a browsing history of their users. On the Messe Berlin websites the plugins are implemented with the software "Shariff", so that the data are only transferred to the respective operators of the networks when the user consciously clicks on the buttons (so-called 2-click solution - i.e., the social plugin is activated after the first mouse click and the functions can only be used after the second mouse click of the user). The data processing is based on the consent of the users (legal basis: Art. 6 (1) (a) GDPR).

For further information on subsequent data processing, see the data protection notice for websites and online offers/presence and marketing of Messe Berlin.