The Controller as defined under the data protection laws is
- Koelnmesse GmbH
Our Data Protection Officer can be contacted as follows: firstname.lastname@example.org .
2. Your rights as data subject
If your personal data are processed, you are a data subject as defined in the GDPR and you have the following rights with respect to the Controller:
Right of objection
You have the right to file an objection at any time against processing of your personal data, carried out on the basis of Art. 6 (1) lit. e or f GDPR, for reasons resulting from your particular situation. This also applies to any Profiling based on these provisions.
The Controller will then no longer process your personal data, unless he/she can demonstrate compelling reasons for the processing warranting protection, and these prevail over your interests, rights and liberties, or if the processing is for the purpose of asserting, exercising or defence of legal entitlements.
If your personal data are processed in order to carry out direct advertising, you have a right to file an objection at any time against the processing of your personal data for the purpose of such advertising. This also applies to Profiling insofar as it is connected with such direct advertising.
If you object to processing for the purpose of direct advertising, your personal data will no longer be processed for these purposes.
In connection with the use of services of the information society and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right of objection via automated procedures that use technical specifications.
You can demand information on whether we process personal data concerning you. If such processing is carried out, you can demand further information on this processing, in particular the purposes, categories of personal data, recipients or the categories of recipients, planned storage duration etc.
You have a right to correction and/or completion of your data
You can demand the restriction of the processing of your personal data under certain circumstances: If the processing of your personal data has been restricted, these data — with the exception of their storage — can only be processed with your consent, or for the assertion, exercise or defence of legal entitlements, or to protect the rights of another natural or legal person, or for reasons of an important public interest on the part of the EU or a member state.
Under certain circumstances, you can demand the erasure of the personal data concerning you. If the Controller has made your personal data public and is obliged to erase them, he/she shall, with consideration for the available technology and implementation costs, take appropriate measures, including of a technical nature, to inform Controllers, responsible for the data processing and processing the personal data, that you, as data subject, have demanded that they delete all links to these personal data, or have demanded the deletion of copies or replications of these personal data.
If you have asserted the right of rectification, erasure or restriction of processing with respect to the Controller, the latter is obliged to inform all recipients, to whom your personal data have been disclosed, of this rectification or erasure of the data or of the restriction of processing, unless this proves to be impossible or involves disproportionate expense. You have a right with respect to the Controller to be informed of these recipients.
You have a right to receive your personal data, provided by you, in a structured, commonly-used and machine-readable format. You also have a right to insist that these data be transferred directly to another controller, insofar as this is technically possible. Liberties and rights of other persons must not be impaired as a result.
You have the right to revoke your data protection declaration of consent at any time. Revocation of the consent shall not affect the legality of the processing, carried out on the basis of the consent, up until the revocation.
Within certain limits, you have the right not to be subjected to a decision, based exclusively on automated processing — including Profiling — that is legally effective against you or that significantly impairs you in a similar manner.
3. Right to complain to a supervisory body
Notwithstanding any other administrative-law or judicial remedy, you have a right to complain to a supervisory authority, in particular in the member state of your residence, your place of work or the place of the suspected violation, if you are of the opinion that the processing of your personal data violates the GDPR.
The supervisory body with which the complaint has been filed, will inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
4. Information in the event of data collection via third parties
If we collect your personal data via third parties, this can involve the following categories of personal data: name, contact data as well as further information, for example concerning your responsibilities.
If we do not receive these contact data directly from you, we receive them from the company for which you work and/or with which we are in contact. This can involve in particular an exhibitor or another cooperation partner with which we exchange services.
The possibility also exists of us receiving your contact data from commercial agents working for us.
5. Purposes and legal basis of the processing
We process your data in order to provide you with the accreditation for this event. If you have given your consent during accreditation, your data will be used to send you press information. To do so, your data will be stored in our database even after the event is over
The legal basis for the handling of your data is Art. 6 (1) lit. b) GDPR, if this handling concerns the con-tractual exchange of services with you.
We also process data for other purposes that are in our interests, specifically in order to:
- provide you with product information concerning relevant services.
- carry out measures aimed at improving and developing services and products, so as to be able to approach you individually with customised offers and products.
- carry out market and opinion research, or have this carried out by market and opinion research institutes. This enables us to obtain an overview of the transparency and quality of our products, services and communication, and to align or design these in the interests of our customers.
- Through press mailing lists, we will send you press releases and similar publications to inform you about us.
The legal basis for this handling of your data is Art. 6 (1) lit. f) GDPR as well as Art. 6 (1) lit. a) GDPR, provided you have issued consent. You can revoke any such consent at any time with effect for the future.
6. Justified interest
If we use data within the framework of the above weighing-up of interests, our justified interest lies in enabling direct advertising (see Recital 47 GDPR), provided your privacy-law interests do not outweigh our advertising interests in each individual case.
7. Recipients of your data
If and insofar as you have issued us with corresponding consent, we shall forward your data within the limits of this consent.
We shall also forward your data to service providers who are bound by instructions and whose work supports the provision of our services for you, on our behalf and in accordance with our instructions. These can be IT service providers, print service providers, call centres if you call in, and similar service providers.
In individual cases we also forward your data to third parties who use the data on their own responsibility: finance and tax authorities, police and investigation authorities (given the existence of a legal basis), official registration bodies (if forwarding is prescribed by law), insurance companies, banks and lending institutions (payment processing), market partners, commercial agents, auditors, lawyers, accountants or similar third parties.
8. Transfer of data to a third country
The transfer of data to third countries is planned if this is necessary for fulfilment of a contract, or if you issue us with express consent to forward the data to third parties.
If we transfer your data to service providers or group companies outside the European Economic Area (EEA), the transfer will only be made if the third country has been certified by the EU Commission as having an adequate level of data protection (Art. 45 (1) GDPR), or given the existence of other adequate data protection guarantees as defined in Art. 47 GDPR.
9. Duration of the storage of your data
We store your data for the above-mentioned purpose and delete this data again when the contractual relationship with you is terminated, all mutual claims are settled, and there are no other statutory reten-tion obligations or legal reasons for storing this data. If you give your consent to receive press infor-mation, we will store your data until you revoke your consent.
Retention obligations exist in particular under the German Commercial Code (HGB) and the German Tax Code (AO). If such obligations apply and concern documents with your data, we shall erase your data upon expiry of the statutory retention obligations. As a rule therefore ten years from the end of the year in which the contractual relationship with you has ended.
10. Necessity of providing your data
You must to provide this data and we are required to collect it in order to issue the accreditation. We cannot provide you with your accreditation without this data.
11. Automated decisions in individual cases or Profiling measures
No automatic decision making or profiling is carried out to justify or establish the contractual relationship with you.