Messe Friedrichshafen is aware of the considerable significance of data protection, data security and confidentiality. Messe Friedrichshafen wishes to strengthen the confidence of the users in the Internet and therefore discloses how personal data are handled. You will be informed here what information is collected and how the information is used.
1. General
As a general rule, protecting your privacy is of utmost importance for Messe Friedrichshafen. Therefore, compliance with legal data protection provisions is a matter of course for us. Moreover, it is important for us to let you know at any time, when we store data, which data are stored and how we will use them.
Messe Friedrichshafen assures that your information will be treated confidentially and in accordance with applicable German data protection regulations.
When you access our websites, our web servers will store by default the name of your Internet Service Provider, the website from which you are accessing us, the websites you are accessing, as well as the date and term of your visit. By accessing the websites Messe Friedrichshafen receives usage data that are stored for back-up purposes and might enable identification (e.g. IP address, date, time and pages accessed).
The data stored will exclusively be evaluated for statistical purposes. Disclosure to a third party - for commercial or non-commercial purposes - will not take place.
2. Data protection officer
If you have queries or comments as to data protection with Messe Friedrichshafen or wish to object to the use of your personal data for advertising, market and opinion research, please send a letter to:
Messe Friedrichshafen GmbH
Neue Messe 1
88046 Friedrichshafen
Germany
P.O. Box 2080
88010 Friedrichshafen
Germany
Telephone +49 7541 708-0
Telefax +49 7541 708-110
Or send an e-mail to: datenschutz@messe-fn.de
3. Personal data
Personal data will only be collected by Messe Friedrichshafen, if you actively contact us, e.g. via e-mail. Moreover, personal data will only be stored, if you enter them freely, e.g. in line with a registration, survey or competition.
All personal data arising in this context shall be processed and used only in accordance with applicable provisions for the protection of personal data for contact handling and safeguarding legitimate vested business interests with regard to customer/visitor service.
Your data will be treated confidentially and will not be disclosed to a third party without your express consent.
4. Right of access and right to object
You shall have the right at any time to obtain free and immediate information on the data collected about you. You shall have the right to request at any time the correction, deletion and blocking of your personal data stored by us by a statement/sending an e-mail to us under datenschutz@messe-fn.de.
Furthermore, you shall have the right to object to the use of your data with effect for the future, which you may exercise at any time vis-à-vis us by a statement/sending an e-mail to us under datenschutz@messe-fn.de
5. Session cookies / cookies
If you access our websites, automatically generated information will be incidentally collected (this means not via registration), that cannot be assigned to a certain person (e.g. by means of an Internet browser or an operating system, domain name of websites from which access is made via a web link; number of accesses, average dwell times; web pages accessed). We will use this information to improve and update our websites on an ongoing basis, as well as to increase attractiveness.
If you access one of our websites, it may occur that information initiated by us is stored in your computer in the form of a “session cookie”, which will automatically identify your computer when you next access our websites.
One characteristic of cookies is that they enable us to customize a website or save your password so that you must not enter it again and again. If you do not want us to recognize information about your computer, set your Internet browser that all cookies are deleted from your hard drive, all cookies are blocked or you are alerted before a cookie is saved.
6. External links
Our offer contains links to external websites of a third party, the content of which we have no influence upon. We do not assume responsibility for the contents of other websites you may access via our links.
7. Use of so-called social plug-ins
7.1. Use of Google Analytics
7.1.1. Moreover, our website uses Google Analytics, a web analysis service of Google Inc. (“Google“). Google Analytics uses so-called “cookies”, text files stored on your computer, enabling the analysis of how you use the website. The information about how you use this website (including your IP address) generated by the cookie is sent to a Google server in the United States and stored there. Google will use this information to evaluate how you use the website, to compile reports of the website activities for website operators and render further services related to the website and web usage. Google will also transfer this information to a third party, if necessary and provided that it is statutory or if a third party processes these data on behalf of Google. In no case will your IP address be related to other data of Google. You can prevent the installation of cookies in your browser software setting; nevertheless we wish to point out that in this case you might not be able to fully use all functions of this website. By using this website you agree to the processing of your data collected by Google in the manner and circumstances and the purpose already described and mentioned. The collection and storage of data can be objected to at any time with effect for the future. In view of the discussion as to the use of analysis tools with complete IP addresses we wish to point out that this website uses Google Analytics with the add-on “_anonymizelp()” and therefore all IP addresses are processed in an abbreviated form only to prevent direct reference to an individual.
Furthermore, we wish to point out that Google has provided a browser add-on for disabling Google Analytics. The browser add-on for disabling Google Analytics provides the website user with greater control over which data of websites will be collected by Google Analytics. The add-on informs JavaScript (ga.js) of Google Analytics that no information about the website visit shall be transferred to Google Analytics.
Add-on: https://tools.google.com/dlpage/gaoptout?hl=en.
7.1.2. You can prevent collection of your data by Google Analytics by clicking on the following link: An opt-out cookie is set which will prevent the collection of your data when you visit this website in future:
7.1.3. We have concluded an agreement for data processing with Google and completely comply with the stringent defaults of German data protection authorities when using Google Analytics.
7.2. Use of Google Adsense
Moreover our website uses Google Adsense, a web ads service of Google Inc., USA (“Google”). Google Adsense uses so-called "cookies”, text files stored on your computer and enabling the analysis of how you use the website. Google Adsense also uses so-called “web beacons” (small invisible graphics) to collect information. By using the web beacon simple actions, such as visitor traffic of the website, can be recorded and collected. The information about how you use this website (including your IP address) generated by the cookie and/or web beacon is sent to a Google server in the United States and stored there. Google will use this information to evaluate how you use the website as to ads, to compile reports of the website activities and ads for website operators and render further services related to the website and web usage. Google will also transfer this information to a third party, if necessary and provided that it is statutory or if a third party processes these data on behalf of Google. In no case will Google relate your IP address to other data of Google. You can prevent cookies being saved on your hard drive and web beacons being displayed by selecting in your browser setting “don’t accept cookies” (in MS Internet Explorer under “Extras” > Web options > Data protection > Settings”; in Firefox under “Extras > Settings > Data protection > Cookies”).
However, we wish to point out that in this case you might not be able to fully use all functions of this website. By using this website you agree to the processing of your data collected by Google in the manner and circumstances and the purpose already described and mentioned.
7.3. Use of Google Plus
Our website also uses the so-called “G +1” button of the social network Google Plus which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CS 94043 United States (“Google”). The button is identified by the symbol “G +1”. If you are registered with Google Plus, you can express your interest in our website via the button “G +1” and share contents from our website in Google Plus. In this case Google will save the information that you have marked one of our contents with “G +1” and also the information you viewed at the same time. Your “G +1” may be displayed together with your name (where appropriate with a photo, if available) in Google Plus with further Google services, such as Google search or your Google profile.
The purpose and scope of data collection and further processing and use of the data by Google, as well as your rights and setting options for protection of your privacy can be had in the privacy notice of Google:
https://www.google.com/intl/de/policies/privacy/
7.4. Use of Google Remarketing and “Similar Audiences” function of Google Inc.
Our website uses the Remarketing or “Similar Audiences” function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 United States (“Google”). This way you can be addressed purposefully by advertisements by placing personalized and interest-related ads when you access other websites on the so-called “Google display network”. “Google Remarketing” or the function “Similar Audiences” uses so-called “cookies”, text files stored on your computer, enabling the analysis of how you use the website. Via these text files your visits, as well as anonymized data of how you use the website are collected. Personal data will not be saved in this context. If you access another website in the so-called “Google display network” ads may be displayed which very likely consider product and information sectors previously accessed in our website.
You can prevent “Google Remarketing” or the “Similar Audiences” function by stopping the saving of cookies via the respective setting of your browser software. However, we wish to point out that in this case you might not be able to fully use all functions of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website to Google, as well as the processing of these data by Google, by downloading and installing the browser plug-in available via the following link: https://support.google.com/ads/answer/7395996. Moreover, you can disable the use of cookies by third-party suppliers by accessing the disabling page of the network initiative (Network Advertising Initiative) under http://www.networkadvertising.org/choices/ and implement detailed information how to opt out. The privacy statement of Google as to Remarketing with further information can be had here: https://policies.google.com/technologies/ads?hl=en.
7.5. Use of Google Adwords Conversion Tracking by Google Inc.
This website uses the “Google AdWords Conversion Tracking” function of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 United States (“Google”). Google AdWords Conversion Tracking uses so-called "cookies”, text files stored on your computer, enabling the analysis how you use the website if you clicked on the Google ad. The cookies are valid for a maximum of 90 days. Personal data will not be saved in this context. As long as the cookie is valid, Google and we, as the website operator, can recognize that you really clicked on an ad and were forwarded to a certain target site (e.g. order confirmation page, newsletter registration). These cookies may not be tracked via several websites by different AdWords participants. In “Google AdWords” conversion statistics are created via the cookie. These statistics record the number of users who clicked on one of our ads. Besides the number of users is counted who accessed a target page equipped with a “conversion tag”. However, the statistics do not contain data with which you can be identified.
You can prevent that cookies are saved on your hard drive by selecting “don’t accept cookies” in your browser setting (in MS Explorer under “Extras” > Web options > Data protection > Settings”; in Firefox under Extras > Settings > Data protection > Cookies); however, we wish to point out that in this case you might not be able to fully make use of all functions of this website.
By using this website you agree to the processing of your data collected by Google in the manner and circumstances and the purpose already described and mentioned. You can find further information how Google uses conversion data, as well as the privacy statement of Google under: https://support.google.com/adwords/answer/93148?ctx=tltp, https://policies.google.com/privacy?gl=de&hl=en.
7.6 Use of Google Fonts
We use Google Fonts from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website. Google Fonts are used without authentication and no cookies are sent to the Google Fonts API. If you have a Google Account, none of your Google Account information will be transmitted to Google while using Google Fonts. Google only records the use of CSS and the fonts used and stores this data securely. You can find out more about these and other questions at https://developers.google.com/fonts/faq.
You can find further information about Google collecting data at https://policies.google.com/privacy?hl=en.
This website uses “fonts.com”, a font service provided by Linotype GmbH, Werner- Reimers-Strasse 2-4, 61352 Bad Homburg ("fonts.com"). Upon loading this website data is retrieved from a "fonts.com" server in order to display text that contains a specific font. Your IP address can be transferred to a server of "fonts.com" and saved in the context of the usual weblog. Further processing of this information is the responsibility of "fonts.com", the corresponding conditions and setting options can be found in the Privacy Policy Statement of "fonts.com".
7.7. Use of Facebook
Our website uses plug-ins of the provider Facebook.com which are provided by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA. Users of our website with the Facebook plug-in (“Like” button) installed will be referred to the fact that a connection to Facebook is established via the plug-in, by which transfer is made to your browser to have the plug-in displayed in the website.
Moreover, data are submitted to the Facebook servers by the use containing information about the websites you have visited in our home page. This means for logged-in Facebook users that the usage data are assigned to your personal Facebook account.
When you, as a logged-in Facebook user use the Facebook plug-in actively (e.g. by clicking on the “Like” button or using the comment function), these data are transferred to your Facebook account and published. You may only bypass this by previously logging out of your Facebook account.
For further information as to the use of data by Facebook go to the Facebook data protection regulations under https://www.facebook.com/policy.php.
7.8. Use of the web message service twitter.com
We also integrated into our website the web message service twitter.com. It is provided by Twitter Inc., 1355 Market St, Suite 900 San Francisco, CA 94103, USA. Twitter offers the so-called “Tweet” function. This allows you to publish messages with a length of 140 characters on your own twitter account, also with links to websites. If you use the “Tweet” function of Twitter in our websites, the respective website is linked to your twitter account and published there if necessary. In this context data are also transferred to Twitter.
We do not have knowledge of the content of the data transferred and their usage by Twitter. Therefore go to the privacy statement of Twitter for further information: https://twitter.com/en/privacy
With the following link Twitter offers you to make data protection settings on your own: http://twitter.com/account/settings.
7.9. Use of the XING recommendation function
This website makes use of functions of XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you access our website which is equipped with such a function, it is triggered that the browser used by you connects with servers of XING. According to our knowledge, personal data retrieved by accessing our website will not be saved. XING will also not save IP addresses. Usage behavior via the use of cookies in relation to the “XING share button” will also not be evaluated. For further information on data protection with the “XING share button” go to: https://www.xing.com/app/share?op=data_protection.
7.10. Use of YouTube
Our website uses plug-ins of YouTube operated by Google. The operator of the websites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you access one of our websites equipped with a YouTube plug-in, a connection to the YouTube servers will be established. In doing so, the YouTube server is informed about the websites you have accessed.
If you logged in with your YouTube account, you enable YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging-out of your YouTube account.
Further information how to process user data can be had in the privacy statement of YouTube under: https://policies.google.com/privacy?hl=en&gl=de.
7.11. Use of LinkedIn
Our website uses functions of the LinkedIn network. Provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time you access one of our websites containing functions of LinkedIn a connection to LinkedIn servers will be established. LinkedIn is informed that you accessed our websites with your IP address. If you click on the “Recommend Button” of LinkedIn and have logged in on your LinkedIn account, LinkedIn will be able to assign your visit to our website to you and your user account. We wish to point out that we, as the provider of the website, do not have knowledge of the content of the data transferred and the use of such by LinkedIn.
Further information can be had in the privacy statement of LinkedIn under: https://www.linkedin.com/legal/privacy-policy.
7.12. Use of Instagram
Functions of the Instagram service are integrated into our pages. These functions are offered by the Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you have logged in on your Instagram account, you may link the contents of our pages to your Instagram profile by clicking on the Instagram button. As a result Instagram may assign the access of our pages to your user profile. We wish to point out that we, as the provider of the pages, do not have knowledge of the content of the data transferred and the use of such by Instagram.
Further information can be had in the privacy statement of Instagram under: https://help.instagram.com/155833707900388.
7.13. Use of Vimeo
Our website also contains plug-ins of the video platform Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Every time you access a page offering one or several Vimeo video clips a direct connection between your browser and a Vimeo server in the USA will be established. As a result information on your visit and your IP address will be saved there. This information is also transferred to Vimeo and saved there by interactions with Vimeo plug-ins (e.g. clicking on the start button).
If you have a Vimeo user account and do not want to have personal data collected by Vimeo via this website and connected to the member data saved at Vimeo, you have to log out of Vimeo before accessing this website.
The privacy statement for Vimeo with further information on the collection and use of your data by Vimeo can be had under http://vimeo.com/privacy.
8. SSL encryption
For the purposes of security and safety and the protection of transferring confidential contents, such as inquiries sent to us as the website operator, this website uses SSL encryption. You can recognize an encrypted connection when the address line of the browser switches from “http://” to “https://” and via the lock symbol on your browser line.
When SSL encryption is activated, your data transferred to us cannot be read by a third party.
9. Objection to advertising mails
Hereby, an objection is in place as to the usage of the contact data published under the section obligation to provide masthead, provided that the contact data are used for sending advertisements and information material that had not been expressly demanded. We therefore shall expressly reserve the right to take legal action against the sender should such advertising information (for instance via spam e-mails) be sent to us.
10. Contact form
If you send queries via the contact form, your information from the contact form, including the contact data entered there, will be saved by us to process your inquiry and follow-up questions, if need be. However, the data saved will not be forwarded without your consent.
11. Newsletter data
If you want to subscribe to the newsletter offered in our website, we will need
a) Your e-mail address, as well as
b) Information enabling us to verify that you are the owner of the indicated e-mail and agree to receiving the newsletter.
We will use these data exclusively for sending the required information. Moreover, we will neither collect personal data, nor disclose the collected data to a third party.
12. Data privacy
To ensure best possible privacy of your personal data we have implemented a number of technical measures which are state-of-the-art and adapted on an ongoing basis.
13. Collection of general data and information
A series of general data and information is collected by the website of Messe Friedrichshafen GmbH every time the website is accessed by a data subject or an automated system. These general data and information are saved on the log files of the server. The following can be collected:
- browser types and versions used,
- the operating system used by the accessing system,
- the website from which an accessing system accesses our website (so-called referrers),
- the sub-websites which are triggered in our website by the accessing system,
- the accessing date and time of the website,
- an Internet Protocol address (IP address),
- the Internet service provider of the accessing system and
- other similar data and information for hazard prevention in the case of attacks to our information technology systems.
When using these general data and information Messe Friedrichshafen GmbH does not draw conclusions to the data subject. This information is rather used to (1) supply the contents of our website appropriately, (2) optimize the contents of our website, as well advertising for it, (3) guarantee permanent functionality of our information technology systems and technology of our website, as well as (4) provide the prosecution authorities in the case of a cyber attack with the information required for prosecution. Therefore, these anonymously collected data and information will be evaluated by Messe Friedrichshafen GmbH statistically and with the objective to increase data protection and data security in our company to finally ensure an optimum protection level for the personal data processed by us. The anonymous data of the server log files shall be saved separately from all personal data provided by a data subject.
14. Routine deletion and blocking of personal data
The controller responsible for processing processes and saves personal data of the data subject only for the period required for achieving the storage purpose or provided by the European directive and regulation legislator or another legislator in laws or regulations to which the controller responsible for processing is subject to.
If the storage purpose does not apply or the storage period determined by the European directive and regulation legislator or another responsible legislator expires, personal data shall be blocked or deleted routinely and in accordance with statutory provisions.
15. Rights of the data subject
a) Right to confirmation
Every data subject shall have the right granted by the European directive and regulation legislator to be provided by the controller responsible for processing with a confirmation whether personal data related to the data subject have been processed or not. If a data subject wants to exercise this right of confirmation, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time.
b) Right to information
Every data subject affected by processing personal data shall have the right granted by the European directive and regulation legislator to be provided at any time by the controller responsible for processing with free information on personal data saved on him or her, as well as with a copy of this information. Moreover, the European directive and regulation legislator has granted the data subject information on the following information:
The processing purposes
The categories of personal data being processed
The recipients or categories of recipients the personal data have or will be disclosed to, in particular recipients in third countries or of international organizations
If possible, the planned term, during which the personal data shall be saved or if this is not possible, the criteria for specifying this term
The existence of a right to rectification or deletion of the personal data related to him or her or restriction of processing by the controller or a right to object to this processing
The existence of a right to lodge a complaint with a supervisory authority
If the personal data are not collected with the data subject: all available information on the source of the data
The existence of automated individual decision-making, including profiling pursuant to Art. 22 (1) and (4) GDPR and - at least in these cases - significant information about the logic involved, as well as the significance and the effects of such processing hoped for the data subject
Moreover, the data subject shall have the right to be informed whether personal data have been transferred to a third country or an international organization. If this is the case, the data subject shall have the right to be provided with information on appropriate guarantees related to the transfer.
If a data subject wants to exercise this right of information, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time.
c) Right to rectification
Every data subject affected by the processing of personal data shall have the right granted by the European directive and regulation legislator to demand the immediate rectification of incorrect personal data related to him or her. Moreover, the data subject shall have the right to demand the completion of incomplete personal data - even by means of a complementary declaration - taking into account the processing purposes.
If a data subject wants to exercise this right of rectification, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time.
d) Right to deletion (“right to be forgotten”)
Every data subject affected by processing of personal data shall have the right granted by the European directive and regulation legislator to obtain from the controller the deletion of personal data concerning him or her without undue delay where one of the following grounds applies and processing is not required:
The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
The data subject withdraws consent on which the processing is based according to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR, and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
The personal data have been unlawfully processed.
The personal data have to be deleted for compliance with the legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
Provided that one of the aforementioned grounds applies and a data subject wants to initiate the deletion of personal data saved at Messe Friedrichshafen GmbH, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time. The data protection officer of Messe Friedrichshafen GmbH or another staff member shall initiate that the demand for deletion is complied with immediately.
If the personal data have been published by Messe Friedrichshafen GmbH and our company, as the controller pursuant to Art. 17(1) GDPR, is obliged to delete the personal data, Messe Friedrichshafen GmbH shall take appropriate measures, also technical ones - under consideration of available technology and implementation costs - to inform other data controllers who process the published personal data that the data subject demanded from those other data controllers to delete any and all links to these personal data or copies or replications of these personal data provided that processing is not necessary. The data protection officer of Messe Friedrichshafen GmbH or another staff member shall take the necessary steps on a case-by-case basis.
e) Right to restriction of processing
Every data subject affected by processing of personal data shall have the right granted by the European directive and regulation legislator to obtain from the controller restriction of processing where one of the following applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject opposes the deletion of the personal data and requests the restriction of their use instead.
The controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
The data subject has objected to processing pursuant to Art. 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Provided that one of the aforementioned grounds applies and a data subject wants to initiate the restriction of personal data saved at Messe Friedrichshafen GmbH, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time. The data protection officer of Messe Friedrichshafen GmbH or another staff member shall initiate the restriction.
f) Right to data portability
Every data subject affected by processing of personal data shall have the right granted by the European directive and regulation legislator to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she shall also have the right to transmit these data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR or another contract pursuant to Art. 6(1) lit. b GDPR and processing is carried out by automated means, provided that the processing is not required for the performance of a task carried out in the public interest or exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Art. 20(1) GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and the rights and freedoms of other persons are not impaired.
For the assertion of the right to data portability the data subject may contact at any time the data protection officer appointed by Messe Friedrichshafen GmbH or another staff member.
g) Right to object
Every data subject affected by processing of personal data shall have the right granted by the European directive and regulation legislator to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on Art. 6(1) lit. e or f GDPR. This shall also include profiling based on those provisions.
In the case of an objection to processing, your personal data will no longer be processed by Messe Friedrichshafen GmbH, unless we are able to prove compelling legitimate reasons for the processing that override the interests, rights and freedom of the data subject or the processing is for asserting, execution or defense of legal claims.
Where personal data is processed by Messe Friedrichshafen GmbH for direct marketing purposes, the data subject shall have the right to object to processing of personal data concerning him or her for such marketing at any time. This shall also include profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes vis-à-vis Messe Friedrichshafen GmbH, the latter shall no longer process the personal data for such purposes.
Furthermore, the data subject shall have the right for grounds based on his or her particular situation to object to processing of personal data concerning him or her by Messe Friedrichshafen GmbH for scientific or historical research purposes or statistical purposes pursuant to Art 89(1) GDPR, unless such processing is for fulfilling a task in the public interest.
For the assertion of the right to object, the data subject may directly contact the data protection officer of Messe Friedrichshafen GmbH or another staff member. Furthermore, in the context of using services of the information society the data subject shall be free to assert his or her right to object by means of automated processes using technical specifications notwithstanding directive 2002/58/EC.
h) Automated individual decision-making, including profiling
Every data subject affected by processing of personal data shall have the right granted by the European directive and regulation legislator not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning him or her or similarly significantly affects him or her, if this decision (1) is not necessary for entering into or fulfilling a contract between the data subject and the controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests or (3) is based on the data subject’s explicit consent.
If the decision (1) is necessary for entering into or fulfilling a contract between the data subject and the controller or (2) is based on the data subject’s explicit consent, Messe Friedrichshafen GmbH shall take appropriate measures to protect the rights and freedoms, as well as the legitimate interests of the data subject, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If a data subject wants to exercise rights referring to automated decisions, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time.
i) Right to revoke a declaration of consent under data protection law
Every data subject affected by processing of personal data shall have the right granted by the European directive and regulation legislator to revoke at any time the consent to the processing of personal data.
If a data subject wants to exercise his or her right to revoke the consent, he or she can contact our data protection officer or another staff member of the controller responsible for processing at any time.
16. Legal basis of processing
Art 6 I lit. a GDPR shall be the legal basis for processing for which we obtain consent to a certain purpose of the processing. If processing of personal data necessary for the performance of a contract to which the data subject is party, as for instance with processing for the supply of goods or rendering services or return services, processing shall be based on Art 6 I lit. b GDPR. The same shall be applicable for processing necessary for the performance of pre-contractual measures, such as inquiries as to our products and services. If a company is subject to a legal obligation which prompts the processing of personal data, such as compliance with tax obligations, processing shall be based on Art 6 I lit. c GDPR. In rare cases the processing of personal data might be necessary to protect the vital interests of the data subject or of another natural person. This would be the case if a visitor is injured in our company and as a result his or her name, age, health insurance data or other vital information would have to be forwarded to a physician, hospital or another third party. Then the processing would be based on Art. 6 I lit. d GDPR. In the end the processing could be based on Art. 6 I lit. d GDPR. Processing not covered by any of the aforementioned legal grounds is based on this legal basis if the processing is necessary to protect a vital interest of our company or a third party, unless interests, fundamental rights and fundamental freedom of the data subject prevail. We are entitled to such processing because they are explicitly mentioned by the European legislator. In this regard the latter’s opinion was that a legitimate interest could be assumed, if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).
17. Legitimate interests in the processing pursued by the controller or a third party
If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest will be the performance of our business activities in favor of the welfare of our staff members and our shareholders.
18. Storage period of personal data
The criterion for the storage period of personal data shall be the respective legal retention period. Upon expiry of the period the respective data shall be routinely deleted, provided that they are no longer necessary for the performance of the contract or contract initiation.
19. Legal or contractual provisions for the provision of personal data; necessity for the conclusion of a contract; obligation of the data subject to provide personal data; possible consequences of a non-provision
We inform you that the provision of personal data partially is prescribed by law (e.g. tax regulations) or may be a result of contractual provisions (e.g. information on the contractual partner). From time to time it may be necessary for the conclusion of a contract that a data subject provides us with personal data which subsequently must be processed by us. The data subject shall be obliged to provide personal data, if our company enters into a contract with him or her. The non-provision of personal data would mean that the contract with the data subject cannot be concluded. Prior to the provision of personal data by the data subject the latter must contact our data protection officer. Our data protection officer informs the data subject on a case-by-case basis whether the provision of personal data is prescribed by law or contract or necessary for the conclusion of the contract, whether there is an obligation to provide personal data and what consequences would have to be expected if personal data are not provided.
20. Automated decision-making
As a responsible company we waive automated decision-making or profiling.
This privacy statement shall be valid for the following social media and websites: facebook, Instagram, LinkedIn
Privacy Notice at a Glance (Summary)
Who is responsible?
Messe Friedrichshafen GmbH, Neue Messe 1, 88046 Friedrichshafen, Germany
Email: info@messe-fn.de
Data Protection Officer: datenschutz@messe-fn.de
What data do we process?
When you visit our website, we process in particular:
- technical connection data (e.g. IP address, browser type, time of access)
- server log files
- Information from contact forms
- Data provided when contacting us by email
- Data relating to booking appointments
- Data when purchasing tickets
- Cookie and usage data, provided you have given your consent
What do we use your data for?
We process personal data in particular for:
- the provision and security of our website
- processing your enquiries
- processing ticket orders
- to arrange appointments
- analysing and optimising our online services
- measuring the effectiveness of our marketing activities
- Displaying embedded content such as videos or maps
Cookies and consent
Our website uses technically necessary cookies and – subject to your consent – analytics, marketing and convenience features.
Your consents are managed via the Usercentrics consent management platform. You may withdraw your consent at any time with future effect.
Which service providers do we use?
To provide and optimise our services, we use, amongst others:
- Platform.sh (hosting)
- Usercentrics (consent management)
- Friendly Captcha (protection against spam and bots)
- Google Analytics
- Microsoft Clarity
- Meta Pixel
- Axess Ticket Shop
- YouTube
- Google Maps
- Mapbox
- OpenStreetMap
Is data transferred to third countries?
Some of the services used may transfer data to recipients outside the European Union, in particular to the USA.
Where necessary, this is done exclusively in accordance with the legal requirements of Articles 44 et seq. of the GDPR and with the implementation of appropriate safeguards.
How long is data stored?
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations. The data is subsequently deleted or anonymised.
Your rights
You have the right to:
- Access
- Rectification
- Erasure
- Restriction of processing
- Transferability
- Objection to processing
- Withdrawal of consent
- Lodging a complaint with a data protection supervisory authority
Right to lodge a complaint
Competent supervisory authority:
The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI BW)
https://www.baden-wuerttemberg.datenschutz.de
You can find detailed information on the processing of your personal data in the privacy policy below.
Privacy Policy for the MESSE FRIEDRICHSHAFEN GmbH
Date: July 2026
1. General information
The protection of your personal data is a matter of great importance to Messe Friedrichshafen GmbH. We treat your personal data as confidential and process it exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telecommunications and Digital Services Data Protection Act (TDDDG) and other relevant statutory provisions.
This privacy policy provides you with comprehensive information on what personal data is processed when you visit our website, the purposes for which the processing takes place, the legal basis on which the processing is carried out, who may receive your data, how long your data will be stored, what rights you have as a data subject, and what technical and organisational measures we implement to protect your data.
This Privacy Policy applies exclusively to the Messe Friedrichshafen website at www.messe-friedrichshafen.com, including all associated subpages and online services.
Where our website contains references to or links to websites operated by other providers, the privacy policies of the respective operators apply exclusively to these external sites. Despite careful monitoring, we accept no responsibility for the content or data protection practices of external websites.
We are constantly developing our website. Similarly, legal requirements, technical procedures or the services we use may change. For this reason, it may be necessary to update this privacy policy from time to time. The current version published on our website shall always apply.
2. Data Controller
The data controller within the meaning of Article 4(7) of the GDPR is:
Messe Friedrichshafen GmbH, Neue Messe 1, 88046 Friedrichshafen, German
Telephone: +49 (0)7541 708-0
Email: info@messe-fn.de
Data Protection Officer
If you have any questions regarding data protection or the processing of your personal data, you can contact our Data Protection Officer at any time.
Email: datenschutz@messe-fn.de
3. Definitions
This privacy policy uses the definitions set out in the General Data Protection Regulation (GDPR). To make it easier to understand, we explain the key terms below.
Personal data
Personal data is any information relating to an identified or identifiable natural person. This includes, for example: name, address, telephone number, email address, IP address, location data, online identifiers, customer or ticket numbers.
Processing
Processing refers to any operation or set of operations performed on personal data, whether or not by automated means. This includes, in particular: collection, recording, storage, organisation, structuring, transmission, retrieval, use, erasure, destruction.
Data subject
A data subject is any natural person whose personal data is being processed.
Data controller
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data processor
A data processor is a natural or legal person who processes personal data exclusively on behalf of the data controller.
4. Principles of data processing
The processing of personal data is carried out exclusively in accordance with the principles set out in Article 5 of the GDPR. In particular, we observe the following principles: Lawfulness, processing in good faith and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, accountability.
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access or other unlawful processing.
5. Provision of the website and server log files
Every time you visit our website, information is automatically transmitted to our website’s server by the browser you are using. This information is temporarily stored in so-called server log files.
Nature and scope of processing
In particular, the following information may be processed: IP address of the requesting device, date and time of access, name and URL of the file accessed, referrer URL (previously visited website), browser used and browser version, operating system used, hostname of the accessing computer, amount of data transferred, HTTP status code, access status.
This data is not, as a matter of principle, combined with other data sources.
Purposes of processing
The data is processed for the following purposes: Ensuring the website connects without disruption, ensuring system security and stability, analysing errors and resolving faults, defending against attempts at misuse and attacks, and the technical administration of the website.
Legal basis
Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
Our legitimate interest lies in the secure, stable and efficient provision of our online services.
Retention period
Server log files are generally only stored for as long as is necessary to fulfil the stated purposes. The data is then deleted or anonymised, provided there are no statutory retention obligations to the contrary.
6. Hosting provider
Our website is hosted on the hosting platform of Platform.sh GmbH or its affiliated companies.
Provider:
Platform.sh GmbH, Augsburger Straße 746, 70329 Stuttgart, Germany
Nature and scope of processing
As part of the hosting service, the following data in particular is processed: server log files, IP addresses, technical usage data, communication data, website content, and system and diagnostic data.
Processing is carried out exclusively for the technical provision, maintenance, administration and security of our website.
Data processing on behalf of the controller
A data processing agreement has been concluded with the hosting service provider in accordance with Article 28 of the GDPR.
7. Content Delivery Networks (CDN)
We use Content Delivery Networks (CDN) to optimise our website’s loading times, availability, reliability and security.
Provider
Fastly, Inc., 475 Brannan Street, Suite 300, San Francisco, CA 94107, USA
and
Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg
Amazon CloudFront is used in particular for the technical provision of the CDN service.
Nature and scope of processing
When using a CDN, the following data in particular may be processed: IP address, browser information, device information, timestamps, requested content and files, referrer URL, usage data, technical connection data, log and diagnostic data.
The data is processed in order to deliver content from our website more quickly via geographically distributed servers, to increase the availability of our online service, and to detect and ward off attacks and unauthorised access to the IT infrastructure.
Purposes of processing
- Improving the website’s loading speed and performance
- Optimising availability and reliability
- Protection against overload and cyber-attacks
- Secure and efficient delivery of website content
- Technical fault analysis and system monitoring
Legal basis
Processing is carried out on the basis of Article 6(1)(f) of the GDPR.
Our legitimate interest lies in the secure, stable and high-performance provision of our website.
Transfers to third countries
In connection with the use of Fastly and Amazon CloudFront, the processing of personal data in third countries, in particular the USA, cannot be ruled out.
Where personal data is transferred to third countries, this is carried out exclusively in accordance with Articles 44 et seq. of the GDPR and with appropriate safeguards in place, in particular on the basis of adequacy decisions by the European Commission or appropriate contractual safeguards.
Privacy policies of the providers
https://www.fastly.com/privacy
https://aws.amazon.com/privacy
Content Delivery Networks (CDNs) may be used to optimise our website’s loading times, availability and security.
A CDN is a network of geographically distributed servers that enables content from our website to be delivered to users more quickly.
8. Cookies and similar technologies
Our website uses cookies and similar technologies to store information on your device or to access information that has already been stored.
Cookies are small text files stored by your browser.
In addition, similar technologies may be used, such as: local storage, session storage, pixel technologies, web beacons, tags, SDKs, and similar identification and tracking technologies.
Types of cookies
Technically necessary cookies
These cookies are strictly necessary for the website to function.
In particular, they enable: page navigation, security features, form functions, load balancing the storage of privacy settings
Without these cookies, the website cannot function properly.
Analytics cookies
Analytics cookies help us to better understand how our website is used and to continuously improve our service.
Marketing cookies
Marketing cookies enable the display of personalised advertising and the measurement of the success of advertising campaigns.
Functional cookies
Functional cookies are used to provide additional convenience and personalisation features.
Retention period
Cookies may either:
- be deleted at the end of the browser session (session cookies)
- or remain stored on the device for a defined period (persistent cookies)
The retention period depends on the service in question.
9. Consent Management
We obtain the necessary consent from users prior to the activation of certain cookies, analytics and marketing services.
We use the Usercentrics consent management platform to manage and document the consents given by users.
Provider:
Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany
Nature and scope of processing
As part of consent management, the following data in particular may be processed: Consent status, date and time of the decision, IP address, device information, browser information, consent ID, log data.
Purposes of processing
Obtaining valid consents, providing evidence of consents given, fulfilling statutory record-keeping obligations, managing withdrawals of consent
Legal basis
Processing is carried out on the basis of:
Article 6(1)(c) of the GDPR
Article 6(1)(f) of the GDPR
Section 25 of the TDDDG
Withdrawal of consent
Consent that has been given may be withdrawn at any time with effect for the future.
Such withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.
10. General legal bases for data processing
Unless a more specific legal basis is stated in this privacy policy, the processing of personal data is carried out on the basis of one or more of the following legal bases:
Article 6(1)(a) of the GDPR
Consent of the data subject.
Article 6(1)(b) of the GDPR
Performance of a contract or the implementation of pre-contractual measures.
Article 6(1)(c) of the GDPR
Compliance with legal obligations.
Article 6(1)(f) of the GDPR
Protection of the legitimate interests of our company or third parties, provided that the interests or fundamental rights of the data subject do not take precedence.
11. Analytics, tag management and marketing services
In order to continuously improve our website, measure its reach, monitor the effectiveness of advertising campaigns and tailor our website to your needs, we use analytics, tracking and marketing services from various providers – where technically necessary and subject to your consent.
These services are generally only used if you have consented to the relevant data processing via our consent management system, provided there is no other legal basis.
Depending on the service, personal data may be transferred to servers within or outside the European Union. Where data is transferred to a third country, this is done exclusively in accordance with the requirements of Articles 44 et seq. of the GDPR.
11.1 Google Analytics
Provider
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA
Nature and scope of processing
Google Analytics is a web analytics service used to statistically analyse the use of our website.
In particular, the following data may be processed: truncated IP address (where IP anonymisation is enabled), browser information, device information, operating system, language settings, screen resolution, referrer URL, pages visited, time spent on the site, click paths, scrolling behaviour, session duration, interactions, cookie IDs, online identifiers.
Google Analytics uses this data to create pseudonymised user profiles.
Purpose
The processing is carried out in particular for the purposes of statistical analysis of the website, optimising our website, improving user-friendliness, measuring the success of individual content, error analysis and measuring reach.
Legal basis
Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG
Retention period
The retention period is determined by the settings we have selected in our Google Analytics account. Once the relevant period has expired, personal data is automatically deleted or anonymised.
Transfers to third countries
The transfer of personal data to servers operated by Google LLC in the USA cannot be ruled out.
Where data is transferred to the USA, this is done on the basis of an adequacy decision by the European Commission (EU-US Data Privacy Framework), provided the recipient is certified accordingly, or on the basis of appropriate safeguards in accordance with Article 46 of the GDPR.
Withdrawal
You may withdraw your consent at any time with future effect via our consent management system.
The provider’s privacy policy
https://policies.google.com/privacy
11.2 Microsoft Clarity
Provider
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Nature and scope of processing
Microsoft Clarity enables the analysis of user behaviour on our website.
The following data, amongst other things, may be processed: mouse movements, scrolling behaviour, click paths, time spent on the site, page views, browser information, screen size, device type, IP address (truncated or pseudonymised), technical usage data.
It is not our intention to directly identify individual visitors.
Purpose
To improve user-friendliness, analyse website usage, identify technical issues, optimise navigation and improve conversion rates
Legal basis
Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG
Retention period
The data is stored in accordance with the configuration of our Clarity account and is subsequently deleted or anonymised.
Transfers to third countries
Personal data may be transferred to the USA.
Microsoft implements appropriate safeguards in accordance with Article 44 et seq. of the GDPR.
Privacy Notice
https://privacy.microsoft.com/de-de/privacystatement
11.3 Google Tag Manager
Provider
Google Ireland Limited
Legal basis
The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR.
Our legitimate interest lies in the efficient, secure and centralised management of the scripts and tags used on our website.
Where analytics, marketing or other services requiring consent are integrated via Google Tag Manager, these are activated only after the necessary consent has been given in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.
Privacy Notice
https://policies.google.com/privacy
11.3 Meta Pixel
Provider
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
Nature and Scope of Processing
We use the Meta Pixel and the Meta Conversions API provided by Meta Platforms Ireland Limited ("Meta") on our website. These technologies enable us to measure the success of our advertising campaigns on Facebook and Instagram, analyze user interactions, and optimize our marketing activities.
If you access our website via a Facebook or Instagram advertisement, Meta may recognize which actions are performed on our website (e.g., page views, downloads, form submissions, or other conversion events). This allows us to measure and improve the effectiveness of our advertising activities.
Processed Data
Depending on the respective event, the following data may be processed in particular: IP address, Browser and device information, Pages visited and interactions performed, Referrer URL, Timestamps, Event data (e.g., lead, download, contact request, purchase), Facebook identifiers such as _fbp and _fbc, Where applicable, hashed identifiers (e.g., email address) if used to improve the attribution of conversions.
Purposes of Processing
- Measuring the success of advertising campaigns
- Conversion tracking
- Reach and performance analysis
- Audience creation
- Remarketing
- Optimization of our marketing activities
Legal Basis
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Consent is obtained through our consent management platform Usercentrics. Without your consent, neither the Meta Pixel nor the Meta Conversions API will be activated for marketing purposes.
Google Consent Mode
We use Google Consent Mode. The preferences you select via our consent banner are transmitted to the tracking and marketing services we use. Marketing-related data processing will only take place if the corresponding consent has been granted.
Recipients
The recipient of the data is Meta Platforms Ireland Limited.
Third-Country Transfers
A transfer of personal data to Meta Platforms, Inc. in the United States cannot be ruled out.
Where data is transferred to countries outside the European Union or the European Economic Area, such transfer takes place in accordance with the data protection safeguards provided by Meta and in compliance with Articles 44 et seq. GDPR.
Further information on Meta's data processing practices can be found at:
https://www.facebook.com/privacy/policy/
11.4 Google Marketing Platform
Purpose
The Google Marketing Platform is used to manage, deliver and measure the success of digital marketing campaigns.
Data processed
Cookie IDs, IP address, browser data, device information, usage data, campaign data
Legal basis
Article 6(1)(a) of the GDPR
Transfers to third countries
Possible to the USA.
Privacy notice
https://policies.google.com/privacy
12. Contact, communication and contract fulfilment
Our website offers you various ways to get in touch with us or to make use of our services. These include, in particular, , contact forms, email communication, booking appointments, ordering tickets and other digital services.
Your personal data will be processed only to the extent necessary and solely for the purposes described below.
12.1 Contact form
Nature and scope of processing
When you use our contact form, we process the personal data you enter.
This includes, in particular: Title, first name and surname, company (optional), email address, telephone number (optional), subject, content of your message, date and time of the enquiry, technical metadata (e.g. IP address, browser information).
Mandatory fields are marked accordingly in the relevant form.
Purposes of processing
Processing is carried out in particular for the purposes of process your enquiry, contact you, answer your questions, prepare for or carry out pre-contractual measures, and document the communication.
Legal basis
Depending on the content of your enquiry, processing is carried out on the basis of:
Article 6(1)(b) of the GDPR, insofar as the enquiry relates to the conclusion or performance of a contract;
Article 6(1)(f) of the GDPR, insofar as we have a legitimate interest in the efficient processing of general enquiries.
Recipients
Within our organisation, access to your data is restricted to those departments that require it to process your enquiry.
Where necessary, IT and hosting service providers may be engaged as data processors in accordance with Article 28 of the GDPR.
Retention period
Your data will be deleted as soon as the processing of your enquiry has been completed and there are no statutory retention obligations or legitimate interests preventing its deletion.
12.2 Contact via email
Nature and scope of processing
If you contact us by email, we will process the personal data you provide.
This may include, in particular: Name, email address, signature data, content of communications, attachments, time of communication, technical transmission data.
Purpose
The processing is carried out to handle your enquiry and to facilitate the requested communication.
Legal basis
Article 6(1)(b) of the GDPR
Article 6(1)(f) of the GDPR
Note
Please note that sending unencrypted emails may pose security risks. Where possible, confidential information should only be sent via suitable, encrypted communication channels.
12.3 CAPTCHA to prevent misuse
We use Friendly Captcha to protect our forms against fraudulent or automated submissions.
Provider
Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany
Nature and scope of processing
When using Friendly Captcha, technical connection data – in particular the IP address, browser and device information, as well as security-related challenge and verification data – may be processed. This processing is carried out to protect against automated submissions, spam and misuse of our forms.
Purpose
Protection against spam, detection of automated access, ensuring system security, ensuring the proper use of our forms
Legal basis
Friendly Captcha processes technical connection data and security-related information for the purpose of bot detection. According to the provider, no tracking cookies are generally used for advertising or analytical purposes.
Art. 6(1)(f) GDPR
Article 6(1)(a) of the GDPR
Section 25(1) of the TDDDG
Transfers to third countries
Processing generally takes place within the European Union.
12.4 Ticket shop
The sale and administration of tickets are handled by our ticketing service provider, Axess.
Provider
Axess AG, Hofgasse 12, A-5630 Bad Hofgastein, Austria
Axess is a provider of visitor management, ticketing and access solutions for exhibition and conference centres, as well as other event venues.
Nature and scope of processing
When ordering, managing and using admission tickets, the following personal data in particular may be processed: First name and surname, billing address, delivery address (if different), email address, telephone number, payment details, order details, ticket details, booking history, customer number, event details, and admission and usage information relating to the use of the ticket.
Purpose
Processing is carried out in particular for the following purposes: Processing ticket purchases, fulfilling contractual obligations, processing payments, creating and sending electronic tickets, managing visitors and access, communicating with customers, handling complaints and support enquiries, and complying with statutory retention obligations.
Legal basis
Article 6(1)(b) of the GDPR
Article 6(1)(c) of the GDPR
Recipients
The recipients of the data are Axess AG and, where applicable, technical service providers, payment service providers and other partners engaged by Axess that are necessary for the performance of the contract.
Where personal data is processed on behalf of Axess, this is done on the basis of appropriate agreements in accordance with Article 28 of the GDPR.
Retention period
Data is retained in accordance with the statutory retention periods under commercial and tax law, and for as long as is necessary for the performance and fulfilment of the relevant contractual relationship.
The provider’s privacy notice
https://teamaxess.com/de/privacy-policy
12.5 Customer communication
Within the framework of existing contractual relationships or in response to enquiries, communication may take place via various channels, in particular via: email, telephone, contact form, post, video conference (where available).
Data processing is carried out solely for the purpose of conducting the relevant communication and on the basis of the applicable legal grounds under the GDPR.
13. Embedded content and external services
To display multimedia content, interactive maps and digital documents, content from external providers may be embedded on our website.
Depending on the technical implementation, a connection to the respective provider’s servers may be established as soon as a page containing embedded content is accessed. In doing so, personal data – in particular the IP address and technical information about the device and browser used – may be processed.
Where your consent is required for the integration of these services, processing will take place exclusively following your prior consent via our consent management system.
13.1 YouTube
Provider
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA
Nature and scope of processing
Content from the YouTube platform may be used to embed videos.
When a page containing an embedded YouTube video is accessed, the following data in particular may be processed: IP address, browser information, device information, referrer URL, date and time of page view, usage data, cookie IDs (where permitted), interaction data (e.g. starting or pausing a video).
Depending on the type of embedding, the so-called ‘enhanced privacy mode’ may be used. However, data may still be transferred to Google.
Purpose
Provision of multimedia content, improvement of user-friendliness, clear presentation of information and events
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Transfers to third countries
Personal data may be transferred to Google LLC in the USA. Where necessary, this is carried out on the basis of appropriate safeguards in accordance with Article 44 et seq. of the GDPR.
Privacy Notice
https://policies.google.com/privacy
13.2 Vimeo
Provider
Vimeo Inc., 330 West 34th Street, New York, NY 10001, USA
Nature and scope of processing
Videos from the Vimeo platform may be used to embed video content.
When you visit a page containing a Vimeo video, the following data may be processed in particular: IP address, browser data, device information, referrer URL, usage data, interaction data, cookie information (subject to your consent).
Purpose
Provision of video content, improvement of user-friendliness, presentation of trade fair and event content
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Transfers to third countries
Data may be transferred to third countries, in particular to the USA.
Privacy notice
https://vimeo.com/privacy
13.3 Instagram
Provider
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Nature and scope of processing
Content from our Instagram page may be embedded on our website.
When loading such content, the following data in particular may be processed: IP address, browser data, device information, cookie IDs, usage behaviour, interaction data.
Purpose
Display of current content, corporate communications, marketing, increasing reach
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Privacy notice
https://privacycenter.instagram.com/policy
13.4 Yumpu
Provider
i-magazine AG (Yumpu)
Nature and scope of processing
The Yumpu service may be used to display digital catalogues, brochures or magazines.
In particular, the following data may be processed: IP address, browser information, device information, usage data, referrer URL.
Purpose
Provision of digital publications, improvement of user-friendliness, display of trade fair documents
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Privacy notice
https://www.yumpu.com/de/info/privacy_policy
13.5 Google Maps
Provider
Google Ireland Limited
Nature and scope of processing
Google Maps may be used to display interactive maps and to make it easier to find our event venues.
When the maps are loaded, the following data may be processed in particular: IP address, location information (where shared), browser data, device information, usage data.
Purpose
Map display, route planning, location information
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Privacy notice
https://policies.google.com/privacy
13.6 Mapbox
Provider
Mapbox Inc., Washington, DC, USA
Nature and scope of processing
Mapbox map services may be used as an alternative to or in addition to Google Maps.
The following data may be processed: IP address, browser data, device information, location data (where shared), usage data
Purpose
Map display, navigation, optimisation of user-friendliness
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Privacy notice
https://www.mapbox.com/legal/privacy
13.7 OpenStreetMap
Provider
OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, United Kingdom
Nature and scope of processing
Data from OpenStreetMap may be used to display map material.
In particular, the following may be processed: IP address, browser information, device information, usage data, technical connection data.
Purpose
Provision of map data, display of event venues, improvement of user-friendliness
Legal basis
Article 6(1)(a) of the GDPR, in conjunction with Section 25(1) of the TDDDG
Privacy notice
https://wiki.openstreetmap.org/wiki/Privacy_Policy
13.8 Information on external content
External content is incorporated solely to enhance the information and services we provide. Although we select providers with care, we have no influence over the nature and scope of data processing carried out by the respective third-party providers.
For further information on the processing of personal data, please refer to the privacy policies of the respective providers.
Very good. Section 5 covers all embedded content and external services. These services are particularly relevant from a data protection perspective, as they frequently reload content from third-party providers and – depending on the technical implementation – may process personal data such as IP addresses or usage data.
13.9 Digital Asset Management
Provider
Bynder B.V., Max Euweplein 46, 1017 MB Amsterdam, Netherlands
Nature and scope of processing
We use the digital asset management platform Bynder to manage and provide images, videos, documents and other media content.
When accessing content provided via Bynder, the following data in particular may be processed: IP address, browser information, device information, referrer URL, timestamp, usage data, technical connection data.
Purpose
The processing is carried out for the purpose of: provide digital media content, managing image and video material, the technical delivery of downloads and multimedia content, optimising the availability and performance of our website.
Legal basis
Article 6(1)(f) of the GDPR
Our legitimate interest lies in the efficient and secure provision of media content on our website.
Where Bynder uses cookies or similar technologies for the storage or delivery of content, their use is carried out exclusively in accordance with the relevant legal provisions.
The provider’s privacy policy
https://www.bynder.com/de/legal/privacy-policy/
14. Recipients of personal data
14.1 Internal recipients
Within Messe Friedrichshafen GmbH, access to personal data is granted only to those departments that require it to fulfil their respective tasks (need-to-know principle).
These include, in particular: Event Management, Customer Service, Sales, Marketing, the IT Department, Financial Accounting, and the Legal and Data Protection Department.
Access is granted exclusively within the scope of the respective areas of responsibility and in compliance with data protection regulations.
14.2 External recipients
To the extent necessary to fulfil the aforementioned purposes, personal data may be transferred to external recipients.
These include, in particular: hosting service providers, IT service providers, ticketing service providers, payment service providers, analytics and marketing service providers, cloud service providers, public authorities in accordance with legal obligations, consultants and auditors, and delivery and communications service providers.
Where external service providers process personal data on our behalf, they do so exclusively on the basis of a data processing agreement in accordance with Article 28 of the GDPR.
15. Transfers to third countries
Some of the services described in this privacy policy are operated by companies based outside the European Economic Area or may require the transfer of personal data to third countries.
Any such transfer takes place exclusively in accordance with Articles 44 et seq. of the GDPR.
Where necessary, the transfer of data is based on:
- an adequacy decision by the European Commission,
- the EU Standard Contractual Clauses (SCCs),
- binding corporate rules,
- or other appropriate safeguards in accordance with the GDPR.
Further information on the respective safeguards can be found in the privacy notices of the relevant providers.
16. Retention period
Unless otherwise specified in this privacy policy, we generally retain personal data only for as long as is necessary to fulfil the relevant processing purposes.
In addition, retention periods may arise in particular from:
- retention obligations under commercial law,
- tax law retention obligations,
- statutory obligations to provide evidence,
- limitation periods,
- legitimate interests in legal defence.
Once the relevant time limits have expired, personal data will be deleted or anonymised.
17. Data security
We implement appropriate technical and organisational measures in accordance with Articles 24 and 32 of the GDPR to protect personal data against loss, destruction, manipulation and unauthorised access.
These include, in particular: Transport encryption using TLS, role-based authorisation models, access controls, data backups, logging of security-related events, regular updates to the systems in use, measures to detect and defend against cyber attacks, and regular reviews of technical and organisational measures.
Despite all security measures, it is not possible to guarantee completely watertight security when data is transmitted over the internet.
18. Rights of data subjects
Under the GDPR, you are entitled in particular to the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to Transferability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Article 7(3) of the GDPR)
- The right not to be subject solely to automated decision-making, including profiling (Article 22 of the GDPR), provided that the legal conditions are met.
To exercise your rights, you may contact us at any time using the contact details provided in Section 2.
19. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedies, you have the right under Article 77 of the GDPR to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection regulations.
The competent data protection supervisory authority for Messe Friedrichshafen GmbH is:
The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Telephone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de
In addition, you may also contact the data protection supervisory authority in your country of habitual residence, your place of work or the location of the alleged infringement.
20. Changes to this Privacy Policy
We reserve the right to amend this privacy policy should this become necessary due to technical developments, changes in the law or new or amended processing of personal data.
The current version published on our website shall apply at all times.