Messe Berlin GmbH data protection notice for websites and online offers/presence and marketing

Messe Berlin GmbH (hereinafter “Messe Berlin”) attaches great importance to data protection. This data protection notice informs about the processing of personal data of website visitors or users (hereinafter referred to as "users") in connection with the use of the websites and the associated sub-pages (hereinafter referred to as "websites") as well as the online offers/presence of Messe Berlin and marketing. For particular processing activities there will be separate information notices, where necessary.

1. Controller and data protection officer

Controller within the meaning of the General Data Protection Regulation (GDPR): Messe Berlin GmbH, Messedamm 22, 14055 Berlin, Germany, e-mail: info@messe-berlin.de.

Data protection officer: group data protection officer of Messe Berlin (address: as before; e-mail: datenschutz@messe-berlin.de).

2. Categories and sources of personal data

Messe Berlin processes the following personal data for the websites and its online offers/presence:

  • Newsletter registration/surveys, competitions (marketing): e-mail address and, if applicable, first name, surname, date and time of consent, type of newsletter, survey and competition and, if applicable, information on interests and answers to questions and communication.
  • Contact requests: surname, first name, position, company/organisation, e-mail address, date and time of the enquiry and subsequent communication with Messe Berlin, as well as other information provided in the course of the enquiry.
  • Comment function: in addition to the name of the user, the comments posted, the date and time of the comment and technical data such as the IP address of the user’s equipment.
  • Social Media Profile: use of and interaction with profiles and content of the various Messe Berlin events on social media such as Facebook, Twitter, LinkedIn, Instagram, YouTube, Xing and TikTok. Comments, shares and likes can be processed.
  • Registration/Log in: some websites and online offers/presence are only accessible after previous registration or to a restricted group of persons. As a rule, the name, e-mail address and date/time of registration/log-in or any consent given are processed for this purpose and the identity of the user is verified. For further details, see the individual registration/log-in process.
  • Logfiles: When using the websites and online offers/presence, information are automatically sent from the end device of the user to the server of the website. This information is stored for a limited time in a so-called log file and includes the following data: Internet browser type and version, operating system, IP address, referrer URL and host name of the accessing end device, timestamp and duration of use, activities performed and result.
  • Technical data: Cookies or similar tracking technologies automatically collect data when using the websites. For details, see the information on cookies and tracking technologies here.

Messe Berlin processes the following data for e-mail marketing purposes:

  • Open, click and bounce rates.

The users themselves are the source of the personal data. Otherwise, the data are collected automatically or, in individual cases, transmitted by third parties (especially if the registration is carried out by another person). Mandatory information’s are marked as such in online forms. Unless otherwise stated, in such cases the information is required for the conclusion of a contract or for access to a specific online offer/presence. In individual cases, data from other providers (website operators) are transmitted to Messe Berlin and processed. In particular, this may be data containing information on the origin of the user, i.e., the source from which the user was directed to the Messe Berlin website. When users provide details for (another) person(s) (hereinafter referred to as "third party(ies)") or provide their data, users must ensure and assure that they are authorised to provide Messe Berlin with such third party(ies)' data, that Messe Berlin may lawfully process such data for the purposes mentioned in section 3, and that the third party/ies concerned have been sufficiently informed by the users about the processing of the personal data pursuant to this notice.

3. Purposes of subsequent processing and legal basis

Messe Berlin processes the personal data mentioned in section 2 for the following processing purposes on the basis of the legal bases specified below:

3.1 Direct marketing, newsletter, market research, surveys and competitions (marketing)

Users can voluntarily register for newsletters or participate in (opinion) surveys or competitions on some of Messe Berlin's websites and online offers/presence. In these cases, the personal data will be processed for the purpose of contacting the user by e-mail or post and sending the electronic or postal newsletter or participating in and carrying out surveys or competitions. This includes the periodic or event-related electronic dispatch of information about Messe Berlin and its subsidiaries and affiliates, trade fair/event-related information about Messe Berlin's own and guest events, including about exhibitors, sponsors, association and other cooperation partners of the respective event as well as their respective products and services, and information about opening, accompanying and subsequent events. Subsequent events also include other trade fairs and events organised or held by Messe Berlin or other Messe Berlin group companies in Germany and abroad. The personal data are also processed for market research purposes, for online surveys and for direct marketing purposes (e.g., individualised online advertising). The legal basis for the processing of data for these marketing purposes is the consent (Art. 6 (1) (a) GDPR).

For information on the rights, in particular the right to object to the processing and use of data for marketing purposes, see section 7.

3.2 Contact requests and comment function

Messe Berlin processes personal data in order to be able to process and respond to inquiries to Messe Berlin. This can also include information material for marketing purposes, insofar as this serves to answer the inquiry. The processing is based on the legitimate interest of Messe Berlin in responding appropriately to inquiries and, depending on the kind of addressees, also in press and public relations activities (legal basis: Art. 6 (1) (f) GDPR) or for the performance of a contract or for the implementation of pre-contractual measures, insofar as the inquiry relates thereto (legal basis: Art. 6 (1) (b) GDPR).

On some websites and online offers/presence there is the possibility to post comments. The personal data in this regard are processed on the basis of the consent of the user (legal basis: Art. 6 (1) (a) GDPR).

3.3 Social media and social media profiles

On the Messe Berlin websites, buttons for sharing and liking content via social networks are implemented using the "Shariff" software, which only transmits data to the respective operators of the networks when the buttons are clicked. Messe Berlin maintains publicly accessible profiles on social networks and social media channels for public relations, external presentation, customer acquisition, advertising and communication with participants of the social networks. The legal basis for data processing is the legitimate interest of Messe Berlin in a corresponding public presence and acquisition and maintenance of business contacts, also in the interest of the users (Art. 6 (1) (f) GDPR).

  • For further information on data protection, see the privacy notices of the providers of the social networks and social media channels and the information on cookies and tracking technologies (section 4) here: https://www.messe-berlin.de/en/extra-pages/cookies/

3.4 Operation, usability, operability and safety/security

The data in the log files are processed for the purposes of operation, usability, operability and safety/security, including troubleshooting, in the legitimate interest of Messe Berlin and users (legal basis: Art. 6 (1) (f) GDPR). Some cookies or other technologies used on the websites of Messe Berlin and online offers/presence also automatically collect data for these purposes. The subsequent processing of this data serves the aforementioned purposes in the legitimate interests of Messe Berlin and the users (legal basis: Art. 6 (1) (f) GDPR).

3.5 Registration and ticket shop

When users purchase a ticket for an event or register for it, or in order to use additional functionalities on the websites Messe Berlin or online services/presence, the personal data are processed for the purpose of establishing and implementing the contractual relationship with Messe Berlin (legal basis: Art. 6 (1) (b) GDPR). For further information on data protection, please see the separate data protection notices in the ticket shop or on the website of the respective event.

3.6 Analysis, optimisation and personalised marketing

Cookies or other technologies used on the Messe Berlin or online offers/presence help Messe Berlin to analyze the use of the websites or online offers, to measure performance and to optimise the websites or online offers (so-called functional technologies). The subsequent processing of this data for these purposes serves these legitimate interests of Messe Berlin (legal basis: Art. 6 (1) (f) GDPR). The email marketing data are processed for the purposes of analysing and improving the effectiveness of email marketing. Some technologies are used to display personalised ads that correspond to users' interests (so-called marketing technologies). The subsequent processing of this data for this purpose is based on the consent of the users (legal basis: Art. 6 (1) (a) GDPR).

3.7 Compliance with statutory or legal obligations

Messe Berlin also processes the data in order to comply with statutory or other legal obligations (in particular commercial and tax law in the case of contracts, business communication and payments, and data security) (legal basis: Art. 6 (1) (c) GDPR). Messe Berlin retains any data protection consents and other consents given by users in its legitimate interest (legal basis: Art. 6 (1) (f) GDPR) in providing evidence thereof, inter alia, to comply with its legal obligations (such as accountability under Art. 5 (2) GDPR).

4. Categories of recipients

When users register for newsletters or make an inquiry, the personal data are processed by the competent Messe Berlin departments (in particular Marketing & Media or Corporate Communication and the respective event team).

Where necessary, personal data (in particular contact details, trade fair/event-related data, status, ticket sales, interests) will be transmitted to other companies of the Messe Berlin group of companies or to the relevant foreign representative office for the purposes stated in section 3 (in particular, to respond to contact inquiries or, in the case of the foreign representative offices, so that they can serve as the first point of contact in the country of origin and provide support at local level throughout the entire (post-) sales process with respect to the participation in or presence at the trade fair/event, including visa matters, support before and after the trade fair/event (legal basis: Art. 6 (1) (b) GDPR).

When users post comments on Messe Berlin websites or online offers/presence, these can be accessed by all website visitors worldwide (legal basis: Art. 6 (1) (a) GDPR).

On some websites and online offers/presence of Messe Berlin, services and functions of third parties may be integrated in the form of external links. These links are marked. When users click on these links and use these offers (legal basis: Art. 6 (1) (a) GDPR), they leave the Messe Berlin website or online offer/presence and are redirected to the website of the respective third party, which may use its own cookies and tracking technologies. These third parties process the data as own controllers within the meaning of the GDPR. For more information, please refer to the data protection and cookie notices of the respective third party.

In order to carry out certain processing activities in connection with the purposes mentioned in section 3 (in particular some special services, shipping/mailings, market research/customer surveys, hosting and IT support, website and content management, data management), external service providers are used which process the personal data on behalf of Messe Berlin (so-called "processors“) or in case of telecommunications providers or postal/courier service providers as own controllers (legal basis: Art. 6 (1) (f) GDPR).

Personal data may be disclosed to authorities and public bodies if Messe Berlin is legally obliged to do so, whether on the basis of laws and regulations (e.g., as part of supervisory authority procedures or by court order, resolution, judgment and the like) (legal basis: Art. 6 (1) (c) or (e) GDPR). For compliance with tax and commercial laws and regulations, personal data are disclosed to the tax and other competent authorities and public institutions.

The categories of recipients of the personal data also include courts and lawyers in the context of litigation, legal disputes and for the purpose of legal advice as well as auditors (legal basis: Art. 6 (1) (c) and (f) GDPR.

5. Data transfers to third countries

Some of the foreign representative offices, companies of the Messe Berlin group of companies, processors, service providers and third-party providers of social media and social media channels, cookies and tracking technologies are located in third countries outside the EU, which do not provide the same level of data protection as the EU, in particular due to the absence of a legal framework, independent supervisory authorities or data protection rights and remedies. The transfer of personal data to those third countries takes place, if the European Commission has adopted a so-called adequacy decision in this respect (Art. 45 (3) GDPR) (see here) or otherwise where appropriate safeguards in accordance with Art. 46 GDPR have been provided, in particular standard data protection clauses adopted by the European Commission pursuant to Art. 46 (2) (c) GDPR (for the latest version see here) and, where necessary, supplementary measures. A copy of the safeguards can be obtained upon request (e.g., by e-mail – for contact details see section 1 above).

With regard to the transfer of data to companies of the Messe Berlin group of companies and other website visitors or users, the transfer of data to third countries is necessary for the performance of the contract (Art. 49 (1) (b/c) GDPR); otherwise, it takes place on the basis of explicit consent of the users despite the lack of adequate data protection in the third countries outside the EU and the associated risks (Art. 49 (1) (a) GDPR).

6. Storage period

Stored personal data will be erased once they are no longer needed for achieving the relevant purpose of their processing. If users unsubscribe from the newsletter, the data stored for this purpose will be deleted. The comments and the associated data (e.g., IP address) remain on the websites and online offers/presence of Messe Berlin until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g., offensive comments).

Insofar as processing is based on consent or on the basis of the legitimate interest of Messe Berlin or a company of the Messe Berlin group of companies, the data in question will no longer be processed for the associated purpose after receipt of the withdrawal of consent or receipt of the objection to the processing and, if applicable, will be deleted, unless legal exceptions to this rule are met. Notwithstanding the foregoing, data with regard to which there are obligations to retain data under commercial or tax law (e.g., German Trade Act) will only be deleted after expiry of the statutory periods (generally 6 or 10 years). Evidence of consent given will be stored for a maximum of three years after the date on which the consent is revoked or otherwise becomes invalid.

7. Data protection rights

To exercise the following rights, users and other data subjects can contact the controller at any time (contact details see section 1 above).

Rights of the data subjects pursuant to Art. 12-21 GDPR: the right to access about personal data, the right to rectification, erasure and data portability as well as to restriction of processing. If consent has been given, this can be withdrawn at any time with effect for the future.

Rights of objection

Insofar as the processing is based on the legal basis of legitimate interest (Art. 6 (1) (f) GDPR) (see section 3 above), the data subject has the right to object to the processing of personal data at any time on grounds relating to the particular situation of the data subject.

Furthermore, an objection to the processing and use of the data for advertising purposes can be lodged at any time with effect for the future. The newsletters also include an unsubscribe link.

If data subjects are of the opinion that the data processing violates data protection law, they have the right to lodge a complaint with the competent supervisory authority of their choice (Art. 77 GDPR in conjunction with section 19 of the German Federal Data Protection Act (Bundesdatenschutzgesetz)).