Data protection information of Messe München GmbH

Messe München GmbH, represented by the Managing Directors Mr. Klaus Dittrich, Dr. Reinhard Pfeiffer and Mr. Stefan Rummel

Trade Fair Center
81823 Munich
Germany
Phone: +49 89 949-20720
Fax: +49 89 949-20729
E-mail: newsline@messe-muenchen.de

Messe München GmbH
Data Protection Officer
Trade Fair Center
81823 Munich
Germany
Phone: +49 89 949-20045
Fax: +49 89 949-20069
E-mail: datenschutz@messe-muenchen.de

Personal data is individual information about the personal or factual circumstances of a specific or identifiable natural person. This includes information such as your name, postal or e-mail address, as well as access data in the context of the use of our website and our other digital content and products. Personal data is only stored by us in addition to access data if you provide it to us voluntarily, e.g. as part of a registration, a survey, a competition, a contact request, a newsletter registration or to place an online order. Furthermore, personal data will only be used to the extent necessary and only for the purpose you have consented to or for the legally permissible purpose. For the secure transmission of your data, Messe München GmbH uses encryption procedures in secured areas. This means that communication between your browser or terminal device and, for example, our ordering system cannot be read by others on the Internet. Use of our ordering system also constitutes consent to the storage and use of your data by Messe München GmbH and its partners. We collect image recordings from you as part of the trade show photos and other personal data that you provide to us in connection with the trade show photos (e.g. name, telephone number, e-mail address, postal address).

When you access our Internet pages, Messe München GmbH receives access data that is stored for security purposes and generally permits identification:

• the name of your Internet service provider
• the country you come from
• the website from which you are visiting us
• the search term if you came to our site via a search engine
• the web pages you visit on our site
• the user tool (web browser, operating system) you used to access files you downloaded from our site (e.g. PDF or Word documents)
• the duration and
• the date and time of your visit

(1) Provision of our website

The provision of this website requires the handling of personal data, such as the IP address for retrieving the content displayed on this website.

This data is evaluated by Messe München GmbH and enables us to optimize our offerings as a whole and to specifically personalize the content for you, e.g. to recognize you as a repeat visitor to our website. If you have an existing data record, the new data can in many cases be assigned to it. The IP address of the computer from which access is made is stored for a period of one month for backup purposes only.

JavaScript, ActiveX or other control elements and script languages in web pages that contain executing elements can be deactivated at any time via your browser for security reasons. Our website remains navigable even without JavaScript.

You also have the option of contacting us via our contact form. For this purpose, we collect the personal data that you enter in the contact form.

(2) Legal basis

The handling of your personal data for the provision of this website and for communication via this website is based on our legitimate interest. For the provision of this website, it is technically necessary that we process certain personal data (e.g. the IP address). For your communication with us, it is necessary that we handle respective personal data.

(3) Weighing of interests

Within the framework of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in the provision of this website and in contacting you in each case. Your interest in confidentiality takes a back seat in both cases. Otherwise, we would not be able to provide you with this website or respond to your contact request.

(4) Recipient categories

We use service providers to provide our website. For this purpose, we transmit personal data to these service providers. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.

These service providers are subject to the same strict data protection regulations and are also integrated into Messe München GmbH's data protection concept.

Personal data is only transferred to state institutions and authorities within the scope of legal or judicial obligations.

(1) Facebook and other social media offerings.

You have the option of following us on Facebook and on other social media platforms of third party service providers (e.g. LinkedIn, XING). For this purpose, we handle the personal data that you provide to us in each case or which is provided to us by the respective platform operator about you, insofar as it is provided to us. You can control the privacy settings yourself within the framework of a social media platform.

(1.1) Legal basis

Our handling of your personal data within the scope of our social media offerings is based on our legitimate interest pursuant to Art. 6 (1) f) DSGVO. For the provision of our social media offers, it is technically necessary that we process certain personal data (e.g., the IP address; personal data that you have provided to the respective platform operator or to us).

As part of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in the provision of our social media offerings in each case. Your interest in confidentiality takes a back seat. Otherwise, we would not be able to offer you our social media services.

(1.2) Recipient categories

We use service providers to provide our social media offers (e.g. Facebook, LinkedIn, XING). The data you transmit to us as part of our social media offerings is also automatically transmitted to the respective social media platform operator.

(2) When you use our blog

You can use blog functions as part of our website. For this purpose, we process the personal data that you provide to us in each case. You will find additional terms of use and further information as required in the context of such a blog.

(2.1) Legal basis

The handling of your personal data for the provision of such a blog is based on our legitimate interest. For the use of the respective blog function, it is necessary that we process certain personal data (e.g. the IP address).

(2.2) Weighing of interests.

As part of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in providing the blog function in each case. Your interest in confidentiality takes a back seat. We would otherwise not be able to provide you with the blog function.

(3) If you use our Instagram channel

(3.1) Community functions

We offer various community functions on our Instagram channel with which you can interact with other users.

Please note that these areas are publicly accessible and any personal information you post in them or provide when signing up can be viewed by others. We cannot control how other users of our Instagram channel use this information. In particular, we cannot prevent unsolicited messages from being sent to you.

We collect all data entered as part of the Community features in order to provide you with the Community features as intended. Without this data, we are not able to provide you with the corresponding community functions. This data is processed on the basis of legal regulations that allow us to process personal data insofar as it is necessary for the use of a service or the fulfillment of a contract (Section 15 (1) TMG; Art. 6 (1) lit. b DS-GVO), or because we have an overriding legitimate interest in making the use of the offer as easy and efficient as possible (Art. 6 (1) lit. f DS-GVO). If you require further information on the balancing of interests to be carried out in accordance with Art. 6 (1) f DS-GVO, please contact us using the contact details provided in this privacy policy.

Content posted in community areas can be stored for an unlimited period of time. If you wish to have any posted content removed, please contact us using the contact details provided in this privacy policy.

(3.2) Event invitations

Events are occasionally announced on our Instagram channel, which may require you to register for. If you register for an event, we process the personal data you provided when registering, such as name and address, as well as contact and communication data such as phone number and email address, and, if applicable, the other information you provided, in order to hold the respective event (for example, to create the guest list, accreditation and admission control, room and staff planning, and catering planning), as well as to send you your invitation and notifications about the respective event; furthermore, we may use this information for abuse detection and legal defense.

The data is processed on the basis of legal regulations that permit data processing because it is necessary for the implementation of the registration process as well as your participation in the respective event (Art. 6 para. 1 lit. b DS-GVO) or because we have a legitimate interest in the prevention of fraud and, if applicable, effective legal defense (Art. 6 para. 1 lit. f DS-GVO). If you require further information on the balancing of interests to be carried out pursuant to Art. 6 (1) lit. f DS-GVO, please contact us using the contact details provided in this Privacy Policy.

(3.3) Recipient categories

A transfer of your personal data takes place to Instagram in order to enable the operation of our Instagram channel. The transfer of your data is insofar based on Art. 6 para. 1 lit. b DS-GVO, as this is necessary to enable you to use our Instagram channel.

(1) Newsletter order

You can register on our website for our newsletter by giving the appropriate consent. For this purpose, we collect the personal data that you enter in the registration form. Furthermore, we analyze the usage behavior in order to be able to design our newsletters in an even more target group-oriented manner.

(2) Legal basis

Your consent is the legal basis for the subscription to the respective newsletter. You can revoke your consent at any time with effect for the future.

The legal basis for the evaluation of usage behavior is the legitimate interest of Messe München GmbH in newsletters tailored to the addressees. This coincides with the interest of recipients in only receiving information that is of interest to them. Your rights and freedoms have been weighed against this interest and take a back seat. You can object to the analysis of usage behavior at any time by sending an e-mail to the following address: datenschutz@messe-muenchen.de.

(3) Recipient categories

We use service providers to send our newsletter. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.

(1) Online application

You can apply to us online via our career portal. To do this, you can first register for our career portal. However, this is not a mandatory requirement for your application. If you register for our career portal, the personal data that you enter in the registration form will be processed for this purpose.

In principle, the personal data that you provide with or without registration and which you make available to us as part of your application, e.g. your application documents, will be processed.

(2) Legal basis

(a) The processing of your personal data within the framework of the career portal is carried out for the initiation, implementation and execution of the corresponding user contract.

(b) The processing of your personal data in the context of your application is carried out for the initiation of the employment contract in accordance with Art. 6 Para. 1 b) DSGVO in conjunction with § 26 BDSG.

(c) The processing of your application for a longer period of time will only take place if you give us your corresponding consent. You may revoke your consent at any time with effect for the future.

(3) Recipient categories

In the context of application procedures, we transmit personal data to service providers as part of the provision of services. Your documents will only be reviewed for other vacancies at Messe München GmbH or transferred to other companies in our group of companies if you give us your consent to do so. You can revoke your consent at any time with effect for the future.

(4) Deletion periods

If no further storage of your application data is permitted, it will be deleted after 6 months.

(1) Provision of the ISPO Digitize Summit Portal.

If you as a visitor, representative of the press, exhibitor, partner, sponsor or speaker would like to use our ISPO Digitize Summit Portal at https://ispo-digitize.converve.io or order tickets in the associated ticket store, it may be necessary for you to provide your personal data, for example when you register with our portal or place an order. The mandatory data required for processing the registration to the portal or an order for tickets are mandatory, further data within the scope of the portal are voluntary. We process the data you provide exclusively in order to be able to offer you the services of our ISPO Digitize Summit Portal.

In the ISPO Digitize Summit Portal, we offer you the following services:

• Registration for the ISPO Digitize Summit Portal
• Processing of your ticket order for the ISPO Digitize Summit
• Creation of a profile to use the portal functions, such as booking workshops, using the news function, etc.
• Registration for so-called Match Up Sessions
• Creation of individual event programs
• Receiving personalized messages about event proposals
• Provision of networking functions and other ways of contacting other ISPO Digitize Summit participants.
• Insofar as you wish to use our portal, you must register by providing your e-mail address and a freely chosen password.

(2) Legal basis

If you use our portal, we store your data required for the fulfillment of the contract until you finally delete your access. The processing of this data is based on legal regulations that allow us to process personal data insofar as it is necessary for the use of a service or the fulfillment of a contract (§ 15 para. 1 TMG; Art. 6 para. 1 lit. b DS-GVO).

Furthermore, we store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all networking profile details in the protected customer area. The legal basis in this respect is our overriding legitimate interest in the use of the data that you voluntarily provide to us (Art. 6 para. 1 p. 1 lit. f DS-GVO).

If you wish to place an order in our ticket store in the ISPO Digitize Summit portal, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide exclusively for processing your order. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO.

If you place an order with us in the ticket store, we will send you information emails for similar offers in the future. You can request at any time to no longer receive such information e-mails from us. To do so, please contact us by e-mail at datenschutz@messe-muenchen.de or click on the link at the end of the information e-mails. In doing so, you will not incur any costs other than the transmission costs according to the prime rates. The legal basis for this is our overriding legitimate interest in sending you information e-mails with news of interest to you for as long as you wish (Art.6 para. 1 p. 1 lit. f DS-GVO). If you require further information on the balancing of interests to be carried out in accordance with Art. 6 para. 1 lit. f DS-GVO, please contact us using the contact details provided in this privacy policy.

We offer various networking features on our portal that allow you to interact with other ISPO Digitize Summit participants, such as by exchanging messages. If you use these functions, please note that we cannot then prevent potentially unsolicited messages from being sent to you in the process.

Furthermore, you have the option of creating a networking profile and stating your main areas of interest. You can then use the so-called matchmaking function to get in touch with other participants. In addition, you have the option of receiving event information tailored to your own interests, creating an individual event program or registering for match-up sessions. All data voluntarily provided by you within the scope of these portal functions will be used exclusively to provide you with the aforementioned portal functions as intended. Without this data, we are not able to provide you with our corresponding offer.

Your personal data is processed to fulfill the contract for the provision of the networking functions. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO. Upon termination of this contractual relationship, the processing of your personal data is based on our legitimate interests. The legal basis for this is Art. 6 para. 1 p. 1 lit. f DS-GVO.

(3) Weighing of interests

As part of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in the provision of the networking functions in each case. Your interest in confidentiality takes a back seat. Otherwise, we would not be able to provide you with the networking functions.

(4) Recipient categories

Our ISPO Digitize Summit portal is operated by an external service provider who also has access to the data collected via the portal for this purpose. This service provider only has access to the data it needs to fulfill its tasks as specified by Messe München. It is contractually obligated not to use the data for other purposes, in particular not for its own purposes, and must protect the data - as provided for in these data protection notices and the relevant data protection laws.

If you decide to participate in the ISPO SDG Summit, we will process the data you provide to us during registration to provide you with an access ticket to the event. The legal basis is Art. 6 (1) lit b DSGVO ("performance of contract").

Furthermore, we process your personal data on the basis of Art. 6 (1) lit f DSGVO ("legitimate interests") in order to assign you to a suitable working group within the framework of the ISPO SDG Summit and to inform you (in conjunction with §7 UWG) about content-related events and offers of Messe München. Your rights and freedoms have been weighed against these interests and take a back seat in this regard. You can object to the processing of your personal data for advertising purposes at any time by sending an e-mail to datenschutz@messe-muenchen.de.

If you would like Messe München to organize travel for the event, you can give us your consent for this in accordance with Art. 6 (1) lit a DSGVO. This consent is voluntary and can be revoked at any time with effect for the future. The same applies if you should be interested in matchmaking with other participants of the Summit and for this purpose you should agree to a disclosure of your answers in the visitor survey for the other participants in the closed visitor area.

Within the framework of the ISPO SDG Summit, we work together with partners who are obligated as processors pursuant to Art. 28 DSGVO to process your personal data only for the above-mentioned purposes and exclusively on behalf of Messe München GmbH. Your data will not be passed on to third parties or to a third country.

We will process your data until the above-mentioned purposes no longer apply or until the statutory retention periods for this purpose have expired.

(1) Purpose and legal basis

In order to be able to offer you a virtual tour of the ICM, your IP address and accompanying technical information (including time, language of the device, operating system, browser version) are recorded. The aim is to give you as realistic an online impression as possible of the ICM premises on site so that you can decide whether the ICM is a suitable location for your event.

The legal basis for processing the above-mentioned personal data is Article 6 (1) b DSG-VO ("pre-contractual measures"). Should you only wish to obtain an impression of the ICM without any potential collaboration, the legal basis for processing your data is Messe München GmbH's legitimate interest in a realistic representation of its premises pursuant to Art. 6 (1) lit. f DSGVO. Your rights and freedoms will be adequately taken into account in this context.

Some elements of the configurator are realized with the help of external technology partners. If one of the offers requires the transfer of personal data to third parties, we will obtain your consent for this in advance pursuant to Art. 6 (1) (a) DSGVO (see point 2, Recipient categories).

(2) Recipient categories

The above-mentioned personal data is transferred to a processor pursuant to Art. 28 DSGVO as part of the provision of the ICM Configurator.

Some aspects of the configurator are furthermore processed with the help of the partner Matterport, Inc, 352 E. Java Dr., Sunnyvale, CA 94089, USA. If one of the offers requires the transmission of personal data to this company, we will obtain your consent for this in advance in accordance with Art. 6 Para. 1 lit. a DSGVO. You can find the privacy policy of Matterport here.

(1) Purpose and legal basis

If you are a member of the network and have agreed to the publication of your personal profile, it will appear in the protected member area. The purpose of the publication is to make it easier for the members of the initiative to contact each other. The basis for this publication is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO.

The data in the members' area is only accessible to other logged-in members of the initiative. You can have your personal profile deleted at any time by sending an e-mail to info@frauen-verbinden.de, thereby revoking your consent.

In addition, Messe München GmbH will inform you about selected events that may be of relevance to members of the network. The legal basis for this is Messe München GmbH's legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in offering network members events of interest to them. In doing so, your rights and freedoms will be appropriately taken into account. You can object to invitations to these events at any time by sending an e-mail to info@frauen-verbinden.de.

If you use the matchmaking offer of Frauen Verbinden, the information you provide for this purpose will be processed by the processor Chemistree GmbH in accordance with Art. 28 DSGVO. Your personal data will be processed exclusively for the purposes of Frauen Verbinden. The legal basis is Messe München GmbH's legitimate interest in being able to recommend contacts within the network that are of interest to the registered members of Frauen Verbinden. In doing so, your rights and freedoms will be appropriately taken into account. You can find more information about matchmaking at Chemistree here. You can object to the processing of your data for this purpose at any time or request deletion. To do so, simply write an email to info@frauen-verbinden.de.

(2) Recipient categories

Messe München GmbH does not transmit personal data from the member portal to third parties, but only to order processors, insofar as this is necessary to provide the above-mentioned offers.

(3) Deletion of your data

As long as you are a member of the initiative, your personal data will be stored for the above-mentioned purposes. After you leave the initiative, the data will be deleted immediately.

(1) General information about cookies

Cookies are small text files that are used by many websites worldwide and in Germany. Cookies are created during your visit to our website and stored on your hard drive by our server. Our cookies do not contain any personal information. Cookies stored by our servers can also only be read again by us and not by any other website. Most browsers are set to accept cookies automatically. If you do not wish to take advantage of cookies, you can deactivate this function in your browser. Please refer to the individual setting options of your browser. Of course, you can also view our website without cookies. However, this may lead to functional restrictions of our offers.

(2) Legal basis

The legal basis for our handling of your personal data to provide our website is in each case our legitimate interest. Within the framework of the necessary balancing of interests, we have in each case weighed up your interest in keeping your personal data confidential against our interest in providing this website (including its functions). In each case, your interest in confidentiality takes a back seat.

(3) Conversion tracking using third-party providers

On this website, third-party tools are used for analysis purposes. These tools measure the effectiveness with which users are addressed by advertisements (so-called "conversion tracking").

When you click on advertisements of a third-party provider mentioned below, a cookie for conversion tracking is placed on your computer. If you now visit a certain website, the third-party provider and we can recognize that you have clicked on the ad and have been redirected to this page. This enables us to collect data that is relevant for our advertising measures. We may learn the total number of users who clicked on an ad, the duration of the visit, the operating system, the device model, the location, payment transactions carried out and to what extent mobile apps were used. No personal information about the identity of the user is disclosed to us in this context.

If you do not wish to participate in this conversion tracking process, you can refuse the setting of a cookie required for this - for example, via a browser setting that generally deactivates the automatic setting of cookies. To do this, use the "Do not track" option ("DNT") of your internet browser, for example.

We work with the following third-party providers in the context of conversion tracking:

• bing Ads Conversion Pixel
  For more information on privacy and cookies from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, please click here.
• Ligatus Conversion Pixel
  Further information on data protection and cookies from Ligatus GmbH, Hohenstaufenring 30-32, 50674 Cologne, Germany, can be found here.
• etracker
  Further information on data protection and cookies from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, can be found here. Data collection and storage within the framework of etracker can be objected to at any time with effect for the future.
• Outbrain Conversion Pixel
  Further information on data protection and cookies from Outbrain Inc, 39 West 13th Street, 3rd floor, New York, NY 10011, USA, can be found here.
• "DoubleClick by Google" (Accuen Conversion Pixel) / Google Adwords Conversion Pixel.
  "DoubleClick by Google" is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). "DoubleClick by Google" uses cookies to present you with advertisements that are relevant to you. In the process, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads were displayed in your browser and which ads were called up. The cookies do not contain any personal information. The use of the "DoubleClick" cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. A transfer of data by Google to third parties only takes place due to legal regulations or within the framework of order data processing. Under no circumstances will Google combine your data with other data collected by Google.
  You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the collection of data generated by the cookies and related to your use of the websites, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link under the item "DoubleClick" deactivation extension. Further information on data protection and cookies from Google can be found here.
• Twitter Conversion Pixel
  Further information on data protection and cookies from Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be found here.
• Seeding Alliance Conversion Pixel
  Further information on data protection and cookies of Seeding Alliance GmbH, Lichtstr. 25, 50825 Cologne, Germany, can be found here. Data collection and storage by Seeding Alliance can be objected to at any time with effect for the future.
• LinkedIn Conversion Pixel
  Further information on data protection and cookies from LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale CA 94085, USA, can be found here.
• Pinterest Conversion Pixel
  Further information on data protection and cookies of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland can be found here.
• ORACLE ELOQUA
  Further information on data protection and cookies from ORACLE Deutschland B.V. & Co. KG, Riesstraße 25, 80992 Munich, can be found here.
• Sizmek Conversion Pixel
  Further information on data protection and cookies of Sizmek, Inc., USA, can be found here.
• Facebook Conversion Pixel
  Further information on data protection and cookies of Facebook, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, can be found here.
• Aumago Retargeting Pixel
  Further information on data protection and cookies of Aumago GmbH, Neue Schönhauser Str. 20, 10178 Berlin, Germany, can be found here. Users can either delete cookies directly in the browser at any time, manage cookie preferences at www.networkadvertising.org/choices/ or disable cookies from Aumago at www.krux.com/krux_privacy/consumer_choice/.
• Quantcast Conversion Pixel
  Further information on data protection and cookies from Quantcast Deutschland GmbH, Leopoldstrasse 23, 80802 Munich, can be found here. Users can also switch off cookies from Quantcast at any time at www.quantcast.de/opt-out.
• Revive Ad Pixel
  More information on privacy and cookies from Revive Software and Services BV, Jonkersvaart 36, 9366 TC Jonkersvaart, The Netherlands, can be found here.

(4) Other tools for marketing and optimization purposes.

We also use the following tools for marketing and optimization purposes:

Google Adwords Remarketing Pixel
By means of the remarketing or "similar target groups" function of Google Inc ("Google"), we can target website visitors with advertising by serving personalized, interest-based ads to visitors to our website when they visit other websites in the Google Display Network. To carry out the analysis of website usage, which forms the basis for the creation of the interest-based advertisements, Google uses so-called "cookies". For this purpose, Google stores a small file with a sequence of numbers in the browsers of the website visitors. This number is used to record visits to the website as well as anonymized data about the use of the website. No personal data of the website visitors is stored.

If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas. You can permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: www.google.com/settings/ads/plugin/. Alternatively, you can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at www.networkadvertising.org/choices/ and implementing the further information on opting out provided there.

Further information on Google Remarketing as well as Google's privacy policy can be found at: www.google.com/privacy/ads/.

Google Tag Manager
Google Tag Manager is a solution that allows us to manage various website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Use of Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc ("Google"), on our websites. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the websites, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Disable Google Analytics

We continue to use Google Analytics to analyze data from Double-Click-Cookie and also AdWords for statistical purposes. If you do not wish to do so, you can deactivate this via the Ads Preferences Manager https://adssettings.google.com/authenticated?hl=de.

You can find the data protection information on Google here: https://policies.google.com/privacy?hl=de

Quantcast Remarketing Pixel
Quantcast provides us with a service for user measurement and advertising purposes. Using Quantcast Remarketing, we can target our website visitors with advertising. Quantcast associates information about your website visit or app usage with a unique identifier (your cookie ID), not your name, email address, or phone number. You can find more information in Quantcast's privacy policy. You can opt-out of Quantcast's advertising and data collection at any time: www.quantcast.de/opt-out/

For more information about Quantcast and to review Quantcast's privacy policy, please visit: www.quantcast.de/datenschutz.

Eloqua
We use the service Eloqua for optimal communication to our customers. The Eloqua servers of the provider ORACLE Deutschland B.V. & Co. KG, Riesstrasse 25, 80992 Munich are located in the EU. Within the scope of support and administration services, it cannot be ruled out in individual cases that individual employees of Oracle Corporation outside the EU may also have access to user data within the scope of their contractual service provision. As a precaution, we have ensured an appropriate level of data protection at Oracle Corporation by providing sufficient guarantees in accordance with the German Federal Data Protection Act. Eloqua places a permanent cookie on the respective login page, unless an Eloqua cookie is already present on your device. If you have already used a website that uses Eloqua, you may already have an Eloqua cookie. We may use the Eloqua cookie to analyze your use of our sites so that we can continually improve them. Emails sent using Eloqua use tracking technologies. We use this information primarily to determine what topics are of interest to you by tracking whether our emails are opened and what links you click. We then use this information to improve the emails we send you and the services we provide, and to combine it with existing tracking or profiling information. If you wish to prevent the use of Eloqua cookies on your device in the future, this is possible via the following link: www.oracle.com/legal/privacy/privacy-policy.html#opt-out.

If you do not want us to recognize your computer (hard drive cookies), you can additionally set your browser to delete cookies from your computer hard drive, block all cookies, or warn you before a cookie is stored. If you do not accept cookies, you will not be able to use some of our services. In general, cookies allow us to determine who you are and thereby provide you with better and more personalized services.

SalesViewer
This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes. From this data, user profiles can be created under a pseudonym. For this purpose, so-called tracking scripts are used to collect company-related data. The data collected with these technologies will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.

The data collection and storage can be objected to at any time with effect for the future in order to prevent the collection by SalesViewer® within this website in the future. In doing so, an opt-out cookie for this website will be placed on your device. If you delete your cookies in this browser, you must click this link again.

FINDOLOGIC
(1) Purpose and legal basis
For product discovery, in particular for searching and navigating in our webshop, we use the services of FINDOLOGIC GmbH, Jakob-Haringer-Str. 5a, 5020 Salzburg, Austria, a technology company that uses data analysis to try to address personal needs and preferences when searching for and purchasing products in the webshop. The goal is to align search queries and product ads more closely with the interests of our users. The cooperation with FINDOLOGIC constitutes commissioned processing pursuant to Art. 4 (8) DSGVO and is regulated pursuant to Art. 28 DSGVO. The data is processed exclusively for the purposes of Messe München GmbH.

Insofar as the processing serves to improve the search for or presentation of products in the store, the legal basis is Art. 6 (1) lit b DSGVO (pre-contractual measures). If the processing serves to optimize the store as a whole, the legal basis is Art. 6 (1) lit f DSGVO (legitimate interests). Messe München GmbH has a legitimate interest in a customer-friendly design of its store. Your rights and freedoms are appropriately taken into account in this context. In this context, cookies are used to store information about the website user and various data are transferred to the order processor. These include, in particular, the user's IP address and browser identification, as well as associated behavioral data such as search queries, categories visited, selected filters, products viewed and purchased. This helps us to understand which products interest our users most and to optimize the shopping experience for them.

Furthermore, FINDOLOGIC only invoices Messe München GmbH for transactions that were made by real customers (and not, for example, by bots). This can be verified with the help of the IP address, which is stored and processed for this purpose. The legal basis for this is also Art. 6 (1) lit f DSGVO: Messe München GmbH has a legitimate interest in correct billing by the order processor. Your rights and freedoms are appropriately taken into account in this balancing process. A combination of the IP address with other data or processing for other purposes does not take place.

(2) Recipient categories
The above-mentioned personal data will not be transferred to third parties, but only to the order processor and, if applicable, its sub-processors, for the above-mentioned purposes.

(3) Deletion periods
Your search results and preferences will be deleted immediately after the session ends. The IP address of the respective transaction is stored securely in accordance with Art. 32 DSGVO. After 6 months, the addresses are finally anonymized.

(1) Online tickets and legal basis

You can purchase online tickets for trade fairs and congresses on our website. For this purpose, we process the personal data that you enter in the order form. Your personal data is processed for the purpose of initiating, executing and handling the corresponding contract.

Messe München processes personal data in this context only for the exercise of Messe München's business purposes. These are the performance of trade fair and exhibition tasks in the economic, scientific and cultural fields. The tasks include, in particular, the organization of trade fairs, exhibitions, congresses and similar events, the representation of the exhibition interests of the City of Munich and the Free State of Bavaria in Germany and abroad, the promotion of the economy through the organization of trade fairs, exhibitions, congresses and similar events, and the operation, maintenance and further development of the trade fair center in Munich, Messestadt-Riem.

To this end, Messe München maintains trade fair and exhibition facilities, congress and conference rooms, which it uses or rents out for events. Messe München also operates this Internet site and separate Internet sites for specific events.

Personal data is processed in particular for the purpose of handling business processes in connection with the above activities, for your information and for advertising our events and services (on the basis of Section 7 (3) of the German Unfair Competition Act (UWG)), for their optimization and for market and opinion research.

In the case of e-mails, we analyze usage behavior on the basis of Section 7 (3) of the German Unfair Competition Act (UWG) in order to be able to address our events and services in a more target group-oriented manner. The legal basis for this is Messe München GmbH's legitimate interest in direct advertising tailored to the target group. This coincides with the interest of e-mail recipients in receiving only information that is of interest to them. Your rights and freedoms have been weighed up against this interest and take a back seat.

You can object to the sending of e-mails and the analysis of usage behavior at any time by sending an e-mail to the following address: datenschutz@messe-muenchen.de.

We organize certain trade fairs, congresses and events together with partners. For this purpose, we, together with the respective partner, have a joint ticket management (e.g. combination tickets for visiting certain events). In this case, we and the respective partner are jointly responsible for data collection during ticket purchase and for further processing in the context of contract initiation, contract implementation and contract execution. In addition, we and the respective partner process the data for our own advertising purposes within the legal framework (on the basis of Section 7 (3) UWG).

You can contact both us and the respective partner to object to the use of advertising. Your objection will be forwarded in each case if you no longer wish to receive advertising. In case of doubt, Messe München and the respective partner will assume that you no longer wish to receive advertising overall.

(2) Registration as exhibitor or visitor and legal basis

You can register on our website as a visitor, trade visitor, exhibitor or user of our other services. For this purpose, we process the personal data that you provide to us as part of your registration.

Your personal data is processed for the purpose of initiating, executing and handling the corresponding user contract.

You do not have to register in order to participate in events organized by Messe München and its subsidiaries. You can, of course, buy an anonymous ticket at the ticket counters without registering. Our hosts and hostesses as well as our Service Center and the trade fair project management will assist you in this process.

Without registration, we are unfortunately unable to provide you with services such as online advance ticket sales or simplified repeat ticket purchases, match-making, networking functions as part of our Connect app, travel services or other Messe München services.

Something else only applies to you as a visitor

• for trade visitor-only trade shows (currently ISPO MUNICH, INHORGENTA MUNICH). In this case, we require the data necessary to ensure that you are a trade visitor; and
• if you wish to redeem a voucher. In this case, we require your name and contact details for the reasons stated below under "Exhibitor".

Specifically, we process your personal data for the following purposes:

• Purchase of (partly discounted) tickets for our events;
• Redeeming vouchers, tickets and Print@home tickets with which you can avoid possible waiting times at the entrance to the trade fair;
• Registration of future tickets "with one click";
• Delivery and payment of other Messe München offers (e.g. trade fair directories and catalogs);
• Verification of trade visitor status, as some of our events are reserved for a trade audience (e.g. ISPO MUNICH, INHORGENTA MUNICH);
• You can better plan your trade show visit in advance because we can provide you with announcements, trade information and other materials for the events that interest you in advance and recommend specific exhibitors or services to you;
• If you are an exhibitor, the data helps us to ensure that your trade fair appearances run smoothly, to offer you a selection of individually tailored service packages, and to present Messe München's products, services and marketing offers to you;
• Your voluntary participation in our market and opinion research helps us to improve our events and service offerings;
• Prevention or detection of misuse and fraud, especially with regard to vouchers and free tickets;
• If applicable, easy updating of your personal data via the Internet.
• If applicable, processing of your personal data within the scope of our Connect app. (cf. section 3.(c)).

Data entered later will also be assigned to the customer account. This includes, for example, the data recorded when ordering a ticket, the number of the voucher of an exhibitor inviting you Email addresses of other persons for whom you also order tickets at the same time as your order,

You may have several customer accounts if you are registered with different e-mail addresses.

(3) Combination tickets for certain trade fairs, congresses and events

We organize certain trade fairs, congresses and events together with partners. For this purpose, we, together with the respective partner, have a joint ticket management (e.g. combination tickets for attending certain events). In this case, we and the respective partner are jointly responsible for the collection of data during the ticket purchase and for further processing in the context of contract initiation, contract implementation and contract execution.

For this purpose, we have concluded a data protection agreement on joint responsibility with the partner in each case. We would like to provide you with the essentials of a corresponding agreement below:

• We and the respective partner collect your personal data jointly within the scope of ticket management. This means that we forward your personal data to our respective partner when you purchase a combination ticket in our ticket store to attend a specific event that we jointly organize with the respective partner.
• We and the respective partner jointly process your personal data for the initiation, execution and settlement of the corresponding purchase contract. You become a contractual partner of us and the respective partner.
• Each party has to ensure the fulfillment of the information obligations under data protection law itself.
• Each party is responsible for processing and responding to requests to exercise the rights of data subjects (so-called "data subject rights"). If a data subject approaches one party regarding data subject rights, that party is obligated to forward the data subject's request to the other party as jointly responsible party for the fulfillment of data subject rights, to the extent necessary.
• Each party is itself and solely responsible for any further processing of personal data (e.g. for advertising use).

(4) Recipient categories

We share data with third parties only to the extent described below. Some recipients are located outside the European Economic Area (EEA). Please refer to the following section for more information.

• Group companies: Messe München may transfer the personal data of its exhibitors to its group companies if they wish to provide information about their events and services. The group companies are obligated in accordance with the requirements of data protection. The group companies of Messe München can be found on our homepage at https://messe-muenchen.de/en/privacy-policy/
  Personal data of visitors is only passed on to group companies for visitors who have been referred by the respective group company. In a larger group of companies such as Messe München, it cannot be ruled out that individual companies, parts thereof or the rights to events may be sold to third parties or acquired by Messe München. In such transactions, customer data is usually transferred at the same time. Your personal data will be protected in accordance with data protection requirements.
• Foreign representatives of Messe München: Messe München may transfer data on visitors and exhibitors from its respective representative area to Messe München's foreign representatives who act as sales partners for Messe München, e.g. when ordering and paying for tickets for foreign visitors via our foreign representatives. The transfer of personal data to foreign representatives only takes place for exhibitors and visitors who come from the respective representative area of the respective foreign representative. You can find Messe München's foreign representatives on our homepage at https://messe-muenchen.de/de/unternehmen/internationales-netzwerk/auslandsvertretungen/.
• Promotions: At times, we send out offers to groups of visitors or exhibitors ourselves or on behalf of third parties, or organize prize draws. In this case, the client does not receive your name, address or other personal data unless you voluntarily give your consent.
• Exhibitors: If you redeem a voucher, we transmit your data to the exhibitor who invites you to visit his stand with the voucher. This is for billing purposes between Messe München and the respective exhibitor. We also want to ensure that you can properly use the voucher intended for you.
  In addition, exhibitors can use a lead tracking service with which the individual exhibitor scans the barcode on your ticket and thus receives your contact details - similar to a business card. These are in detail: Company name, title, first and last name, function, mailing address, country, phone number(s), email address, and any other information you provide about interests and/or your company. If you give an exhibitor your visitor or exhibitor badge - like a business card - to scan, the exhibitor will have access to the above information. There will be no unnoticed data collection without your involvement. In accordance with the international character of the trade fair (or congress), exhibitors are also represented who are based outside the European Union and therefore outside the scope of the European data protection laws. Here, too, you can object or consent to the transfer of your data in individual cases by withdrawing or offering your admission ticket for scanning. Messe München GmbH receives information about the industry sector of the exhibitor to whom you have provided your data and uses this information to tailor future promotional approaches to you even more appropriately. The legal basis for this is our legitimate interest in direct advertising tailored to the addressee. This coincides with the interest of visitors in only receiving information that is of interest to them. Your rights and freedoms have been weighed against this interest and take a back seat. You can object to this evaluation by sending an e-mail to datenschutz@messe-muenchen.de.
• Service providers: We commission service providers to perform tasks for us, e.g. sending e-mails, processing payments (credit card, direct debit and purchase on account), maintaining data, analyzing data, providing customer service. These service providers only have access to the data they need to fulfill their tasks as specified by Messe München. They are contractually obligated not to use the data for other purposes, in particular not for their own purposes, and must protect the data as provided for in this data protection declaration and the relevant data protection laws.

(5) Special data protection information

The transfer of data to the extent described above may in some cases take place to countries outside the European Economic Area (EEA). In some cases, these countries do not have a level of data protection that is comparable to the level of protection within the EU (e.g. USA, China or India). To protect your data, our Group companies located outside the EEA and contractual partners to whom data is to be transferred, such as foreign representatives, are obliged to ensure adequate data protection on the basis of the EU standard contractual clauses for the transfer of personal data to third countries.

You can find the EU standard contractual clauses at the following link:
https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_de

You can also find information on international data protection at the following link:
https://www.lda.bayern.de/de/international.html

As part of the app we provide for certain trade fair events ("Connect app"), you will receive access to the information we make publicly available about the current trade fair event, as well as access to the so-called networking functions of the Connect app when you purchase a corresponding authorization.

(1) Provision of this Connect app; communication with Messe München via the Connect app.

The provision of the Connect app requires the handling of personal data, such as the IP address for the retrieval of the content displayed in the Connect app, in the case of inquiries made by you or in our online service and function areas. You also have the option of contacting us via our contact form or the support chat function (if provided by us). For this purpose, we collect your e-mail address and user name as well as the data provided for the creation of your user account: Last name, first name, company, job title, position and country.

The handling of your personal data in the context of providing the Connect app, its functions and for communication is based on our legitimate interest. For the provision of the Connect app, it is technically necessary that we process certain personal data (e.g., the IP address). For your communication with us, it is necessary that we process the personal data mentioned above. As part of the necessary balancing of interests, we have weighed your interest in the respective confidentiality of your personal data and our interests in providing the Connect app and contacting you in each case. Your interest in confidentiality takes a back seat in both cases. We would otherwise not be able to provide you with the Connect app (including its functions) or respond to your inquiries.

(2) Networking functions

If you are also granted access to the so-called networking functions of the Connect app, you have the possibility to communicate with other users of the Connect app by posting messages and comments via a public feed. You may also create private channels with other users to communicate individually without being visible to anyone other than your designated participants in the respective private channel. Furthermore, you may be contacted individually by other users through a private channel.
For the purpose of making these networking functions available, we process your personal data, in particular your data within the scope of your user account (last name, first name, company, job title, position and country) as well as your messages and comments posted in the channels.

Your personal data is processed in order to fulfill the contract for the provision of the networking functions. Upon termination of this contractual relationship, the processing of your personal data is based on our legitimate interests. Within the framework of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in the provision of the networking functions in each case. Your interest in confidentiality takes a back seat in both cases. Otherwise, we would not be able to provide you with the networking functions.

(3) Camera access

We need access to your camera to record image notes. The data will be stored on your device. You can revoke access at any time in the settings of your operating system. Please note that individual functions may not be available if you do not allow access.

(4) Data processing in the period between purchase and first login in the Connect app.

If you have acquired an authorization to use the networking functions (e.g. by purchasing a corresponding online ticket or networking-only ticket or if you have a corresponding exhibitor authorization) and if you have given your express consent to this at the time of purchase, we will process your personal data as part of your user account as a user profile (surname, first name, company, job title, position and country) in our Connect app from the time you acquire the authorization (regardless of whether you have already downloaded the Connect app or have already registered) until the time you first log in to the Connect app. In this case, your user profile will be displayed to other users of the Connect app; for third parties who use the app without registering there, only the first name will be visible.

You can revoke this consent given at the time of purchase at any time with respect to us (e.g. via datenschutz@messe-muenchen.de) for the future. The revocation of consent only takes effect for the future and does not affect the lawfulness of the processing carried out until the revocation.

(5) Recipient categories

We only share data with third parties to the extent described below. Some recipients are located outside the European Economic Area (EEA). Please refer to the following section for more information.

• Infinum d.o.o: Infinum d.o.o is our IT service provider for the provision of the Connect app.
• Smile Family, Inc. d.b.a. SendBird: Smile Family, Inc. is our group communication service provider and provides all user communication functions as part of the networking features.
• BridgingIT GmbH: Bridging IT GmbH provides the hall maps within the Connect app.
• jl.medien GmbH and Neureuter Fair Media GmbH: jl.medien GmbH and Neureuter Fair Media GmbH are our partners for marketing the advertising space within the app.
• Use of Google Analytics: The Connect app uses Google Analytics, an analytics service provided by Google Inc ("Google"). The information generated about your use of this app is usually transmitted to a Google server in the USA and stored there. We only use Google Analytics with IP anonymization activated. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Under the terms of the commissioned data agreement that we have concluded with Google Inc., Google will use the information collected to evaluate your use of the Connect app, to compile reports on app activities and to provide us with other services related to the use of the Connect app. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The transmitted IP address of the user is not merged with other data from Google. The processing of personal data enables us to analyze the usage behavior of our Connect app by users. This data is evaluated in order to continuously optimize our Connect app, its content and its user-friendliness. These purposes represent our legitimate interest in data processing and the processing is thus based on the legal basis of Art. 6 (1) lit. f DSGVO. The deletion of personal data takes place after 26 months. You can prevent the collection and processing of your data related to your use of the Connect app by Google by turning off the function in the app settings. For more information on the terms of use and data protection of Google Analytics, please visit: https://www.google.com/analytics/terms/de.html
• Use of Firebase: The connect app uses Firebase, an analytics service provided by Google Inc ("Google"). With the help of Firebase, we collect data on how and which functions were used within the apps. This includes, for example, search queries, clicks on advertising banners and which product groups and exhibitor entries are called up in the app and with what frequency. The information collected about your use of this app is usually transferred to a Google server in the USA and stored there. We only use Firebase with IP anonymization activated. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Under the terms of the commissioned data agreement that the app operators have concluded with Google Inc., Google will use the information collected to evaluate your use of the app, to compile reports on app activities and to provide us with other services related to the use of the app. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The transmitted IP address of the user is not merged with other data from Google. The processing of personal data enables us to analyze the usage behavior of our app by users. This data is evaluated in order to continuously optimize our app, its content and its user-friendliness. These purposes represent our legitimate interest in the data processing and the processing is thus based on the legal basis of Art. 6 (1) lit. f DSGVO. The deletion of personal data takes place after 26 months. You can prevent the collection and processing of your data related to your use of the app by Google by turning off the function in the app settings. For more information about Firebase's terms of use and privacy policy, please visit: https://firebase.google.com/terms?authuser=0.

(1) Device information and events

We process device data to send you push messages, to synchronize your favorites, and for so-called crash reporting to determine the error in case of an app crash. This includes the following data: the device ID, the device model, the name of the device, the operating system, the timestamp and the cause of the error. The processing of the data in the context of the favorite synchronization and the sending of the push messages is necessary for the fulfillment of the contract with you and the legal basis for the data processing is accordingly Art. 6 para. 1 lit. b DSGVO. The data is required in the context of crash reporting in order to analyze and fix errors or crashes of the app. This purpose represents our legitimate interest in data processing and the processing is thus based on the legal basis of Art. 6 (1) lit. f DSGVO. The data is deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. In the case of push notifications, the data will be deleted as soon as the request has been processed. You can switch off the push notification service and thus object to the processing of the data concerning you. Provided you do not use the favorites synchronization, no data is collected. For more information on favorite synchronization, see section h. The data is mandatory for crash reporting, you cannot object to the processing. In case of a desired objection, we ask you to uninstall the app. The crash data will be deleted as soon as it is no longer needed for analysis and troubleshooting.

(2) Location data

We need access to the location of your device for so-called location-based services. This service is used to provide you with helpful information in the context of the respective event depending on your location. Your location data is determined by means of GPS data, identifiers of WLAN networks in the vicinity, mobile phone data and Bluetooth and is only used for the technical execution of the corresponding functions. Your location data will not be used to create movement profiles beyond your current location and will therefore not be logged or stored by us. You can revoke access at any time in the settings of your operating system. Please note that individual functions may not be available if you do not allow access.

(3) Calendar access

We require access to your calendar in order to offer you the option of saving the dates of your trade fair visit planning in your calendar. In doing so, no personal data from your calendar will be read by us or stored by us. You can revoke access at any time in the settings of your operating system. Please note that individual functions may not be available if you do not allow access.

(4) Address book access

We require access to your address book in order to provide you with the option of storing contacts received via the exhibitor directory. In doing so, no personal data from your address book will be read by us or stored by us. You can revoke access at any time in the settings of your operating system. Please note that individual functions may not be available if you do not allow access.

(5) Camera access

We require access to your camera to record image notes. The data is stored on your device. You can revoke access at any time in the settings of your operating system. Please note that individual functions may not be available if you do not allow access.

(6) Memory access

We require memory access to store the trade show visit data you generate on your device. You can revoke access at any time in the settings of your operating system. Please note that individual functions may not be available if you do not allow access.

(7) Google Analytics

This app uses Google Analytics, an analytics service provided by Google Inc ("Google"). With the help of Google Analytics, we collect data on how and which functions were used within the apps. This includes, for example, search queries, clicks on advertising banners and which product groups and exhibitor entries are called up in the app and with what frequency. The information collected about your use of this app is usually transferred to a Google server in the USA and stored there. We only use Google Analytics with IP anonymization activated. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. As part of the agreement on the commissioned data agreement, which the app operators have concluded with Google Inc., Google will use the information collected to evaluate your use of the app, to compile reports on app activities and to provide us with further services associated with the use of the app. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The transmitted IP address of the user is not merged with other data from Google. The processing of personal data enables us to analyze the usage behavior of our app by users. This data is evaluated in order to continuously optimize our app, its content and its user-friendliness. These purposes represent our legitimate interest in the data processing and the processing is thus based on the legal basis of Art. 6 (1) lit. f DSGVO. The deletion of personal data takes place after 26 months.You can prevent the collection and processing of your data related to your use of the app by Google by turning off the function in the app settings. For more information on the terms of use and data protection of Google Analytics, please visit: www.google.com/analytics/terms/de.html.

(8) Other

In addition to the accesses mentioned above, we only process personal data in the context of the use of individual functions of the app. As long as you do not use them, we do not collect any further personal data. To enable synchronization of the favorites created in the app with the watch lists in the online exhibitor catalog at exhibitors.bauma.de, an e-mail address is transferred to the online exhibitor catalog as an identifying feature for your user account in addition to the favorites during synchronization. You must enter the e-mail address yourself in the app before the first synchronization. The e-mail address is stored in the app to simplify subsequent synchronization processes. Synchronization only takes place when you press the "Synchronize favorites" button in the app. According to Art. 6 para. 1 lit. f DSGVO, the processing of your data serves to improve user-friendliness. The data for the favorites synchronization will only be used to process the request and will be deleted afterwards.

If you register as a contact person for your company in our TrustedTargeting Campaign Creator (hereinafter: "Creator"), we process the personal data that you provide to us during registration in order to send you a campaign offer by email and to provide you (as a representative of your company) with the services of the Creator. The legal basis in both cases is Art. 6 (1) lit b DSGVO (contractual or pre-contractual measures).

Furthermore, we process your personal data on the basis of Art. 6 (1) lit f DSGVO ("legitimate interests") for the purpose of product and contract optimization in order to provide our customers with the best possible service. Likewise, we want to ensure that our customers receive the right support for future contract fulfillment and can operate our tool independently. In addition, we process your data for market and opinion research and for direct advertising for similar topics and products of Messe München (in the case of addressing by e-mail: in conjunction with Section 7 (3) UWG). Your rights and freedoms have been weighed against these interests and take a back seat in this regard. You may object to the processing of your personal data for these purposes at any time by sending an e-mail to datenschutz@messe-muenchen.de.

We work with partners who, as order processors pursuant to Article 28 DSGVO, are obliged to process your personal data only for the above-mentioned purposes and exclusively on behalf of Messe München GmbH. Your data will not be passed on to third parties. In the event of a transfer of data to a third country, the necessary legal requirements will be met (e.g. conclusion of EU standard contractual clauses).

We will process your data until the above-mentioned purposes no longer apply or until the statutory retention periods for this purpose have expired.

(1) Sweepstakes

You can participate in competitions within the scope of our website or via our social media offers. For this purpose, we process the personal data that you provide to us in the context of a competition. You will find additional terms of use and further information as required in the context of such a sweepstakes.

(2) Legal basis

Your consent is the legal basis for our data processing. You may revoke your consent at any time with effect for the future.

(3) Recipient categories

We cooperate with third parties in the context of competitions. For this purpose, we transmit personal data to these third parties.

(1) Processing purposes

We process trade show photos (including, if applicable, other personal data that you provide to us in connection with the trade show photos) to document our trade shows. In addition, we process, in particular through publication and use, trade fair photos for press and advertising purposes in all media (in particular print (e.g. brochures) and online (websites, social media, etc.). This includes publication, use and processing for the purposes of press and public relations work, editorial reporting and advertising and marketing purposes in connection with Messe München GmbH and the trade fairs, events and other occasions it organizes.

(2) Legal basis

The legal basis for the creation and use of trade fair photos is Art. 6 (1) f) DSGVO (legitimate interest in documenting the trade fairs we hold and our legitimate interests in connection with the above-mentioned processing purposes). Your personal rights will be adequately taken into account in the necessary balancing of interests.

If we wish to publish and use photographic material of you, in which you are prominently recognizable, for press and advertising purposes, we will obtain your consent to do so. The legal basis is then your consent pursuant to Art. 6 (1) a) DSGVO.

Within the scope of application of the German Art Copyright Act ("KUG"), we may also disseminate, use and otherwise process trade fair photographs pursuant to Section 23 (1) KUG for the following purposes:

1. Portraits from the area of contemporary history;
2. Pictures in which the persons appear only as an accessory next to a landscape or other location;
3. Pictures of meetings, processions and similar events in which the persons depicted have participated;
4. Portraits that are not made to order, provided that the dissemination or display serves a higher interest of art.

(3) Categories of recipients

The trade fair photos taken may be transmitted to journalists, media companies, press and photo agencies as well as platforms, also abroad, for the above-mentioned purpose of press and public relations work, editorial reporting as well as for advertising and marketing purposes and may be published by us. We also use service providers by way of order processing in the provision of services, in particular for the creation of trade fair photos. These service providers are contractually obligated by us to exercise the same care in handling personal data as we do ourselves.

You have the following rights vis-à-vis us regarding the personal data concerning you:

• You have the right to request information about all personal data we process about you at any time.
• If your personal data is incorrect or incomplete, you have the right to have it corrected and completed.
• You may request the deletion of your personal data at any time, unless we are legally obliged or entitled to continue processing your data.
• If the legal requirements are met, you may request restriction of the processing of your personal data.
• You have the right to object to the processing insofar as the data processing is carried out for the purpose of direct marketing or profiling. If the processing is carried out on the basis of a balancing of interests, you may object to the processing by stating the reasons arising from your particular situation.
• If the data processing is carried out on the basis of your consent or within the framework of a contract, you have a right to transfer the data you have provided, provided that this does not affect the rights and freedoms of other persons.

If you have given us consent to process your personal data, you can revoke your consent at any time with effect for the future.