Privacy Policy

Privacy policy

We use this privacy policy to inform you about the personal data we record when you use this website (the stand configurator) and the purposes for which this data is used.

1. Data controller/contact

a. The data controller responsible under German data protection legislation is

Koelnmesse GmbH
Messeplatz 1
50679 Köln
Germany

b. Data Protection Officer:

Koelnmesse GmbH
Data protection officer
Messeplatz 1
50679 Köln
Germany
e-mail: datenschutz-km@koelnmesse.de

2. Subject of the data protection

Personal data in the sense of this privacy policy are any individual pieces of information relating to your personal or material circumstances. This includes in particular your name, your e-mail address and your telephone number.

Personal data in the sense of this privacy policy also includes information about your use of our website (“access data”). In addition to the access data, personal data are only stored by us when you freely provide us with this information, e. g. in the context of the task of fulfilling your orders. Personal data are also only processed to the extent necessary and only for the purposes to which you have given consent or for legally permissible purposes.
SSL/TLS encryption
This site uses SSL/TLS encryption for reasons of security and for protecting the transmission of confidential information, such as those related to orders or inquiries that you send to us, the operator of this site. You can recognize an encrypted connection by the protocol in the browser’s address bar switching from “http://” to “https://” and the padlock symbol appearing in the browser’s address bar.
Whenever SSL/TLS encryption is activated, any data you send us cannot be viewed by third parties.

3. Collection and use of your data

3.1 Collection of access data

When you access our website, your terminal automatically transfers data and information from your computer system. More specifically, this information consists of the following:
•    The type and version of the browser used
•    The operating system used
•    The referrer URL
•    The host name of the accessing computer
•    The time of the server query
•    The IP address (abbreviated)
This data is stored in server log files and deleted after 14 days. Only in exceptional cases is the data stored for longer periods (e. g. if misuse or fraud is suspected). In these cases, the log files are stored until the matter is cleared up and any subsequent measures that might become necessary are completed.
In order to offer our website and the associated services, we avail ourselves of service providers who process your data mentioned in this privacy policy only at our behest and in accordance with our instructions (“processors” pursuant to Article 28 GDPR).
We require the access data for technical reasons so that we can display the website to you and ensure its stability and security. The legal basis for this is Article 6 (1) (f) of the GDPR, because we have a legitimate interest in providing you our services in a technically flawless, secure and optimized manner.
As part of the required balancing of interests, we balanced your interest in keeping your personal data confidential against our interest in providing you with this website. Your interest in privacy is outweighed in both cases. If this were not the case, we would be unable to provide this website or to react to your order query.

3.2 Customer login

If you, as an exhibitor, decide to use our stand configurator, we will enable you to login to the system in order to configure your trade fair stand and place your order at this website.

With the provision of your login information, you declare your consent to the storage of your data and its processing for the purpose of fulfilling the contract (Article 6 (1) (a) GDPR and Article 6 (1) (b) GDPR). Which personal data is transferred to those responsible for the processing is determined by the respective dialogues, which are used for the login process.

We forward the collected data for processing to the respective (i.) in-house departments as well as to (ii.) external service providers (e. g. stand constructers) in order to fulfil your orders and ensure this website’s technical operability.

We store the data that are collected during the logins for as long as you are registered at our website. This enables you to access configurations and data for subsequent trade fair events without having to register again.

Registered persons may change the personal data provided during the process of registration or, subject to the exemptions in Item 3.5, obtain its complete erasure from the pool of data stored by the data controller.

3.3 Transfer of data

The data are transferred to external service providers for the purpose of fulfilling the contract. These service providers are tasked with the construction and furnishing of any trade fair stand that is ordered (e. g. provision of furniture).

You will receive an e-mail from us after you have placed a binding order via the shopping basket. Your order is then forwarded to the external service providers.

3.4 Duration of the storage

To enable you to access the shop system and the information in your customer account at any time, we store your login data until you cancel or change your registration. You can edit the data in your customer account at any time. Unless prohibited by a retention obligation, you can also send a request to have your account deleted to standbau-services@koelnmesse.de.

3.5 Possibility of objection and erasure

If the data are required for the fulfilment of a contract or the carrying out of pre-contractual measures, a premature erasure of the data is only possible insofar as it is not opposed by a contractual or legal obligation.

4. Cookies

We use cookies in order to continually improve our website. Cookies enable us to statistically record and analyse the user behaviour of our visitors. The data are analysed in an anonymized form.

Google Analytics
We use the web analytics service Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies, which are text files that are stored on your computer and make it possible to analyse how you are using the website. The information created by the cookie concerning your use of this website is normally transferred to a Google server in the USA and stored there.

The legal basis for the storage of Google Analytics cookies and the use of this analysis tool is Article 6 (1) (f) of the GDPR, because we have a legitimate interest in analysing and optimizing our website.

We have activated the IP anonymization function for this website. It ensures that Google abbreviates your IP address within the member states of the European Union or in other states that are signatories of the Agreement on the European Economic Area before the address is transmitted to the USA. Only in exceptional cases is the full IP address sent to a Google server in the USA, where it is then abbreviated. Google uses this information on behalf of the operator of this website to evaluate your use of the website, to create reports on the website activities, and to provide the website’s operator with additional services connected with the use of the website and the Internet. Google does not combine the IP address that is transferred by your browser as part of the operation of Google Analytics with any other information.

You can prevent the storage of the cookies by making a corresponding setting in your browser software. However, we expressly inform you that in this case you may not be able to use the full scope of all of the functions of this website. In addition, you can disable the recording of the data created by the cookie concerning your use of this website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin that is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the recording of your data by Google Analytics by clicking on the following link (Analytics opt-out). This results in the setting of an opt-out cookie that prevents the recording of your data when you visit this website in future. Deactivate Google Analytics.

You will find further information about the handling of user data by Google Analytics in Google’s privacy policy at https://support.google.com/analytics/answer/6004245?hl=de.

User and event level data that are stored at Google and linked to cookies or user designations (e. g. user ID) are anonymized or deleted after 14 months. You can obtain more details by clicking on the following link: https://support.google.com/analytics/answer/7667196?hl=de.

5. Contacting us

Personal data are collected as part of the process of making contact with us (e. g. via e-mail). These data are stored and used exclusively for the purpose of answering your enquiry and/or for the purpose of establishing contact and the associated technical administration. The legal basis of the data processing is our legitimate interest in the answering of your query pursuant to Article 6 (1) (f) GDPR. If the purpose of your contacting us is to conclude a contract, then an additional legal basis for the processing is provided by Article 6 (1) (b) GDPR. Your data are deleted after completion of the processing of your enquiry. This is the case when it is evident from the circumstances that the situation in question has finally been resolved and insofar as there are no legal retention obligations preventing such deletion.

6. International transfer of data

Insofar as you or one of the persons designated do not have your seat or residence outside the European Union (third country) we have no intention of transferring your data to a third country.

7. Your rights as an affected individual

7.1 Right to information

Pursuant to Article 15 GDPR, you have the right to obtain from us on application at any time on request information concerning personal data relating to you that we process. You can make this request by sending a postal letter or e-mail to the above address.

7.2 Right to rectification of incorrect data

You have the right to request us to immediately rectify your personal data if they are inaccurate. To do so, please contact the above addresses.

7.3 Right to erasure

You have the right to obtain from us the erasure of personal data on the grounds described in Article 17 GDPR. These grounds especially give you the right to erasure if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the personal data have been unlawfully processed, if we have received an objection to the processing, or the personal data have to be erased in compliance with a legal obligation in Union or Member State law to which we are subject. To exercise the aforementioned right, please contact the above addresses.

7.4 Right to restriction of processing

You have the right to request us to restrict processing pursuant to Article 18 GDPR. This right applies, in particular, to the following cases: When the accuracy of the personal data is contested between the user and ourselves, for a period enabling us to verify the accuracy of the personal data; the user has an existing right to erasure but opposes the erasure of the personal data and requests the restriction of their use instead; the data are no longer needed for our purposes, but they are required by the user for the establishment, exercise or defence of legal claims; the user has objected to processing pending the verification whether our legitimate grounds override those of the user. To exercise the aforementioned right, please contact the above addresses.

7.5 Right to data portability

You have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR. To exercise the aforementioned right, please contact the above addresses.

7.6 Right to object

Pursuant to Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning yourself which is based, among other things, on point (e) or (f) of Article 6 (1) GDPR. In that case, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

7.7 Right of appeal

If you have a complaint, you also have the right to appeal to the responsible regulatory authority. The responsible regulatory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
Tel.: +49 211/38424-0
Fax: +49 211/38424-10
e-mail: poststelle@ldi.nrw.de

8. Changes to this privacy policy

The current version of this privacy policy can always be called up under “Data Protection”.

Version: 16 May 2019