Hamburg Messe und Congress GmbH is responsible for processing information on our webpages.
Hamburg Messe und Congress GmbH (HMC)
The safety of your data and your personal rights when we collect, process and use your personal information is very important to us. We are therefore fully committed to complying with all legal privacy protection requirements, in particular the General Data Protection Regulation (GDPR) of the European Union and the German Data Protection Act (BDSG). Below please find a brief summary of what we do to protect your data, and what using our (online) services entails for you.
We typically collect personally identifiable information when you contact us, i.e. by visiting our fairs, using our online portals and services, or visiting our websites (Hamburg Messe company website, CCH company website, webpages dedicated to events organised by us). In addition, we also process contact data that was not collected directly from the person concerned and, if necessary, saves this data to existing data records. For this purpose, we research contact data of potential customers from public directories for promotional customer contact.”
Personally identifiable data includes any data referring to an identified or identifiable natural person, such as the person’s name, residential address, e-mail address etc.
The explanations below provide you with an opportunity to get fully informed about your legal rights and the way Hamburg Messe und Congress processes your data. Feel free to contact us personally if you have any further questions regarding data privacy.
Status: Februar 2020
Hamburg Messe und Congress GmbH is responsible for processing information on our webpages.
Hamburg Messe und Congress GmbH (HMC)
We have appointed a Data Protection Officer for our company’s business operations.
Datenschutzbeauftragte/Data Protection Officer
Hamburg Messe und Congress GmbH
ph.: +49 40 3569-0
According to the GDPR, you as a Data Subject have the following rights:
If you have given your consent to your data being processed, you may revoke your consent at any time. Your revocation will apply to any future processing of your personally identifiable data from the time you submit your revocation to us. Any processing of your data on the basis of other legal provisions, if applicable, shall likewise remain unaffected. To the extent that your consent was the sole legal basis for processing your data, provided there is no legitimate interest on our part in processing your data pursuant to GDPR, Art. 6(1), p.1 (f), we will promptly erase your data upon receiving the revocation of your consent.
To the extent that we process your personally identifiable data based on a balancing of interests (GDPR, Art. 6(1), p.1 (e) or (f)), you may, on grounds arising from your particular situation, make an objection against the processing of your data. This may apply in particular if data-processing is not necessary to perform a contract with you as explained below. When you exercise your right of objection we request that you explain your grounds for prohibiting us from continuing to process your personally identifiable data. Upon receiving your well-reasoned objection, we will review the facts and either stop processing your data, or limit the extent of our data-processing, or explain to you the compelling reasons meriting protection for our continued processing of your data.
Notwithstanding the above you may at any time object to your personally identifiable data being processed for purposes of advertising and data analytics, without incurring any costs other than the costs of transmission according to applicable base rates.
You may direct any further questions regarding this as well as any other privacy protection matters to the Company Data Protection Officer at privacy(at)hamburg-messe(dot)de.
You have the right to lodge a complaint to the supervisory authority if you believe your data is being processed in an unlawful manner. The address of the supervisory authority responsible for us is as follows:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
20097 Hamburg, Germany
If required, we will transfer your personally identifiable data from contract preparation or contract execution (master data, contact information) to third parties supporting us in performing our contractual duties or working with us or performing necessary activities, provided that you have requested this cooperation or transfer. Since these third parties may vary depending on the particular services, we will notify you of any such data processing on a case-by-case basis. However, we generally assume that your interest is consistent with our interest in performing the contract. In these cases we cannot enable contract performance without transferring your data to third parties.
We may contract external service providers to perform some processing of personally identifiable data. We have selected and commissioned these providers carefully. They are under obligation to adhere to our instructions and are monitored on a regular basis. They may include the following categories of data recipients:
The following are categories of potential recipients of your personally identifiable data:
Your personally identifiable data will not be disclosed to anyone for advertising purposes.
In fulfilment of contractual purposes or to perform pre-contractual activities with potential or confirmed exhibitors as well as potential or confirmed visiting companies from third countries (GDPR, Art. 6(1)(b)), we will transmit personally identifiable data to our Foreign Representatives in the relevant country. This applies to the following personally identifiable data: Company information including address, name of the contact person, communication information, industry, product interest, contract and billing information where applicable, exhibitor-/ product interest, payment information.
In the case of industry fair representatives or visiting companies from foreign countries, the name of the visitor may be transmitted to the company in the foreign country, as well unless such transmission is expressly objected to. The registration data of a company visiting industry fairs whose representative contacts an exhibitor may – with the visitor's consent – be transmitted to the exhibitor being visited, whether the exhibitor's domicile is in Germany, the EU or any other country.
The registration data of a company whose representative contacts an exhibitor at its exhibition stand may – unless the visitor objects to his data being scanned from the barcode of his admission ticket – be transmitted to the exhibitor being visited, whether the exhibitor's domicile is in Germany, the EU or any other country.
If we transmit personally identifiable data to third parties outside the European Union or the European Economic Area, we will ensure data transmission does not occur unless the data recipient enters into a contractual agreement with us to apply equivalent data protection and data security standards; an adequate level of data protection exists on the recipient's side; you have given your consent to the transmission of your data; or the transmission of your data is legally permissible for other reasons, for example upon your request to prepare and/or perform a contract with you.
Two review a list of all our international offices, please visit our web page
Your personally identifiable data will be erased as soon as the reason for their storage ceases to exist. Furthermore, your data may be stored if such storage is required under European or national legislation as per EU regulations, laws or other provisions applicable to the Data Controller, or if continued storage is necessary in individual cases where a claim is or may be raised against us in connection with a contract or pre-contractual activities. In the event that a legal retention obligation prevents us from deleting your data, we will initially block your data and delete them upon expiry of the legal retention period.
You are not under any legal or contractual obligation to transmit any personally identifiable data to us. However, in the event that you wish to enter into a contract with us, it will be necessary for you to provide personally identifiable data. If you choose not to transmit any personally identifiable data to us in a given case, you will not be able to enter into a contract with us.
We process your data in part automatically in order to inform you about our events in a relevant manner. This allows us to communicate with you and present you with advertisements based on your needs.
However, we only do so on condition of your express consent according to GDPR, Art. 6(1)(a). You may object to our processing of your data, or revoke your consent at any time.
When you use our webpages, various personally identifiable data items are collected. The provisions below explain what kinds of data we collect and how we use them.
Persons under the age of 16 should not transfer any personal data to us without the consent of their parents or guardians. We do not request personal data from children and adolescents. We do not knowingly collect such data and do not pass it on to third parties (Protection of minors).
The provider of our webpages collects and stores information automatically in so-called server log files which your browser programme transmits to us automatically. The information transmitted includes:
These data are not combined with any other data sources.
Data processing is based on GDPR, Art. 6(1)(f).
Most of the cookies we use are so-called Session Cookies which are deleted automatically when your visit ends. Other cookies remain on your device until you delete them. These cookies allow us to recognise your browser the next time you visit our webpages.
You have the option of adjusting your browser settings so you will be notified every time a cookie is about to be set, so that you can allow cookies in selected cases only, reject cookies in other cases or in general, and enable automatic deletion of cookies when you close your browser. Disabling cookies may restrict the functionality of our webpages.
Cookies that are required to perform electronic communication transactions or enable certain features you wish to use (e.g. the shopping basket feature) are stored on the basis of GDPR, Art. 6(1)(f).
The website operator has a legitimate interest in the storage of cookies which ensure that its services are provided in a technically error-free and optimised manner.
When you send us a request using our contact form or by e-mail, we will store your information provided on the enquiry form or in your e-mail message, including the contact information provided by you, for the purpose of responding to your enquiry and any potential follow-up questions. We will not disclose this information to anyone without your consent.
This means that the data you enter into the contact form or e-mail message will be processed exclusively on the basis of our legitimate interest (GDPR, Art. 6(1), p.1 (f). If the purpose of the e-mail or contact form correspondence is to enter into a contract, GDPR article 6(1), p.1 (b) provides an additional legal basis.
We process the information from the contact form or your e-mail message solely to arrange our interaction with you. This constitutes the required legitimate interest in processing the data. The data provided by you through the contact form or your e-mail message will be stored pursuant to Item I.6.
With your consent, you may subscribe to our newsletter which we distribute to inform you about our current programmes available to interested parties.
We use the so-called double-opt-in method for newsletter subscription registrations. If you would like to subscribe to our newsletter, which is offered on our webpages, we will need an e-mail address for you. Following your registration using your e-mail address we will send you an e-mail message to the address you provided. In this e-mail message we will ask you to confirm that you agree to receive the newsletter. If you do not confirm your registration within 7 days, your information will be temporarily blocked, and erased automatically no later than seven days thereafter. You will not be required to provide any further data but may do so voluntarily. We will use your data exclusively for the purpose of sending you the required information. We will not disclose your data to any third parties.
The data you enter into the newsletter subscription form will be processed exclusively as agreed by you (GDPR, Art. 6(1), p.1 (a)). The legal basis for sending the newsletter following the sale of products or services is the German Unfair Competition Act (UWG), section 7(3).
You may at any time revoke your consent to the storage of your data and e-mail address and to their use for the purpose of sending you the newsletter, for example by using the link ABMELDEN/UNSUBSCRIBE found in the newsletter, or by sending an appropriate message to the contact address indicated in the Imprint. The legality of any data processing prior to your revocation will remain unaffected.
We will store the data you have provided for the purpose of receiving the newsletter until you cancel your newsletter subscription, and erase your data upon your cancellation as stipulated under Item I.6. Data stored by us for other purposes (e.g. e-mail addresses for the ticket shop or the Online Service Center) will remain unaffected.
(Ticket shop, Online Service Center, Wi-Fi, job applicant management, journalist accreditation, press mailing list)
You may register on our webpages for the use of additional website features. We will use the data entered by you exclusively for the purpose of enabling usage of the relevant services that you have registered for. The information required for registration must be provided in full. We cannot accept incomplete registration.
You may register for the purpose of purchasing online tickets. This will require you entering your personally identifiable data, which we need to process your ticket order. The information required for contract performance is marked appropriately. All additional information will be provided at your own discretion. You may also register with us using your Xing, LinkedIn or Facebook account. If you choose to do so, your Xing, LinkedIn or Facebook profile data will be transmitted to us, provided that you have given your consent. We will process the data provided by you or transmitted to us via Xing, LinkedIn or Facebook for the purpose of processing your order and maintaining your customer account.
The data you provide when you register will be processed on the basis of your consent (GDPR, Art. 6(1), p.1 (a)). You may revoke your consent at any time pursuant to Item I.3.b. You may do so in an informal e-mail message to us. The legality of any data processing performed previously will remain unaffected by your revocation.
To the extent that it is necessary to process personally identifiable data in fulfilment of a contract between ourselves and the Data Subject, Art. 6(1), p.1 (b) of the GDPR provides the legal basis. The same applies to any data processing that is necessary to perform certain pre-contractual activities.
Provided that processing your data is necessary for us to safeguard our legitimate interests, the alternative legal basis will be GDPR, Art. 6(1), p.1 (f). We process the information from the relevant contact form solely for the purpose of providing this or the relevant other service. This constitutes the required legitimate interest in processing the data.
In addition, we process your data so that we can put visitors in touch with suitable exhibitors or contact persons as part of our matchmaking service (matchmaking functionality, see II.7).
If you place an ORDER AS A GUEST, we will process your data exclusively for executing the purchasing contract. Your data will not be used for any further marketing purposes unless you have given your express consent to receiving customer messages from us (GDPR, Art. 6(1), p.1 (a)).
In the event of major changes to the services we offer, or any changes necessary for technical reasons, we will use the e-mail address you provided with your registration to notify you accordingly. We may also use your data for marketing purposes among our customer base.
The “Career” section of our website will take you to our job application portal were you may submit a job application to us.
Your personally identifiable data will be used and processed by us for the purpose of making a hiring decision about you.
The legal basis for processing your data will be GDPR in connection with the German Federal Data Protection Act (BDSG), sec. 26. Furthermore, personally identifiable data may be processed under other provisions of labour and social law as amended, in particular those pertaining to the rights of employees at their place of work. To the extent that processing personally identifiable data is required to fulfil a legal obligation of the Data Controller, the legal basis is Art. 6(1), p.1 (c) of the GDPR.
Personally identifiable data processed for the purpose of making a hiring decision will be deleted as soon as processing is no longer required to arrive at a hiring decision. This means that the duration of data storage depends on the duration of the decision-making process.
Applicants who have received a rejection message will be told upon completion of their application process that HMC would like to store their data for potential future job openings. If this is not desired, the data will be deleted.
If you have sent us an unsolicited application which does not respond to a specific job opening advertised by us, we will likewise process your personally identifiable data so as to make a hiring decision. The above stipulations apply mutatis mutandis. As a matter of principle, we will erase your data if we do not anticipate being able to make use of your personally identifiable data for making a hiring decision in the foreseeable future, or if you do not want us to store your data for potential future job openings.
Your personally identifiable data may be used to assert, exercise or defend legal claims, provided that you or we have or wish to assert any such legal claims.
The legal basis of data processing in these cases is GDPR, Art. 6(1), p. 1 (f). In such an event, the Data Controller's or any third party's legitimate interests shall be the assertion, exercise or defence of a legal claim. If you give us your consent to processing your personally identifiable data, your written consent shall at least constitute part of the legal basis of data processing (GDPR, Art. 6(1), p. 1 (a)).
Conceivably, this might result in a storage duration beyond the time at which a hiring decision is made. For example, this would be the case if there is any indication that you might assert legal claims against the Data Controller. In this case, the data will be stored for the amount of time needed to assert, exercise or defend such legal claims. The criteria for determining an appropriate storage duration may include the terms stipulated by the German General Equal Treatment Act (AGG; sec. 15(4)(1)) as well as the German Labour Court Law (ArbGG; sec. 61(b)), as well as statute of limitations rules and legally stipulated retention periods. Furthermore, the data may be stored if such storage is provided for or required under European or national legislation as per EU regulations, laws or other provisions applicable to the Data Controller. If you have agreed to your data being stored for an unlimited time period, your data will be erased as soon as you revoke your consent.
There are no intentions to transmit your applicant data to other countries outside the European Union, however, such transmission cannot be entirely excluded to the extent that it is legally permissible.
You are under no obligation to provide any personally identifiable data to us for the purposes of a job application. However, we are unable to conduct an evaluation of your application without you providing any information allowing us to assess your suitability and availability or to contact you.
At some events we work together with service providers such as Guest Company or smart and more. The service provider provides us with an online invitation management tool for opening events which allows us to distribute free (online) invitations, reminders, registration confirmations and admission tickets for opening events. We have entered into a data processing agreement according to GDPR, Art. 28 with the service providers. Data is processed exclusively for the purpose of sending invitations to a selected group of recipients.
The service provider generally receives the following personal data from us for this purpose:
In addition, we may receive data from our cooperation partners which we may have processed by the service provider on their behalf according to GDPR, Art. 28.
The legal basis for processing this data is provided by GDPR, Art. 6(1)(f) ("legitimate interest") and the German Unfair Competition Act (UWG), section 7(3). The data will be deleted as soon as it is no longer needed for the processing purposes.
You may object to the use of your data for the purposes given above at any time, or revoke your consent, by sending a message to privacy(at)hamburg-messe(dot)de. If you choose to ask for deletion of your personally identifiable data stored by us, we will comply immediately unless our documentation and retention obligations require us to do otherwise.
Hamburg Messe und Congress GmbH uses so-called Social Plug-Ins, a technology which allows you to share specific content on social media. To protect your privacy, we offer you these social plug-ins as "Two-Click Buttons". This two-click approach prevents user data (such as the user's IP address) to be transmitted to social networks such as Facebook at the moment you open our website.
The buttons are disabled by default and must first be enabled by clicking the social plug-ins once. Facebook, Twitter and Google transmit the plug-in content directly to your browser, which embeds it into our webpages.
Clicking the social plug-ins a second time allows you to fully use all the social media features, such as "Recommend".
Once activated, the feature will remain active in your browser for up to eight weeks. You may disable the feature at any time by clicking each individual button once, or by deleting the cookies in your browser.
The plug-in provider stores data collected about you as a user profile for advertising, market research and/or website customisation purposes. In particular, data (including data from users who are not logged on to the site) is evaluated to present user-specific advertisements and to inform other users of the respective social network about your activities on our website. You have the right to object to the creation of these user profiles; to raise an objection, you must contact the provider of the plug in. Plug-ins allow us to interact with social networks and other users for the purpose of improving our website and making it more interesting to you as a user. The legal basis for the use of plug-ins is GDPR, Art. 6(1), p.1 (f).
Data will be transferred independent of whether you have an account with the plug-in provider and have logged on to it. If you have logged on to the plug-in provider, your data as collected by us will be assigned directly to your account with the plug-in provider. If you use the enabled button and, for instance, link the page, the plug-in provider will store this information with your user account and relate it publicly to your contacts. We recommend that you routinely log off after each use of a social media network, especially before activating the button so as to avoid your button use being associated with your plug-in provider profile.
For further information regarding the purpose and scope of data collection and processing by the plug-in provider, please read the providers' data privacy policies as detailed below. There you will also find additional information on your related rights and the configuration options you have to protect your privacy.
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; additional information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-onother as well as www.facebook.com/about/privacy/your-info. Facebook has joined the Privacy Shield framework between the EU and the US: www.privacyshield.gov/EU-US-Framework.
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has joined the Privacy Shield framework between the EU and the US: www.privacyshield.gov/EU-USFramework.
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has joined the Privacy Shield framework between the EU and the US: www.privacyshield.gov/EU-US-Framework.
Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; https://instagram.com/about/legal/privacy/.
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policy. LinkedIn has joined the Privacy Shield framework between the EU and the US: www.privacyshield.gov/EU-US-Framework.
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; www.xing.com/privacy.
YouTube LLC (operated by Google), 901 Cherry Ave., San Bruno, CA 94066, USA; policies.google.com/privacy. Google has joined the Privacy Shield framework between the EU and the US: https://www.privacyshield.gov/EU-US-Framework.
Some sub-pages may temporarily provide video files in a YouTube frame that you may replay. Any time you play such a video you actually access the website www.youtube.de of Google Inc. through the frame. We have no influence on the scope of your data collected by Google Inc. when you access the YouTube website, or Google's handling of your data. Both are subject to the legal responsibility of Google Inc. However, you may find further information on Google's handling of your data by following this link: policies.google.com/privacy
Our webpages may use the web analytics services of Google Analytics. These services are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google analytics uses so-called cookies. These are text files that are stored on your computer to analyse the way you use our webpages. The information cookies generate about your use of our webpages is typically transmitted to, and stored on, a Google server located in the United States.
On our webpages we have enabled the IP anonymisation feature. This feature causes Google to truncate your IP address within European Union member countries or other signatory countries of the European Economic Area Agreement before transmitting the address information to the USA. In exceptional cases, the full IP address is transmitted to a Google server located in the USA, and truncated subsequently. Google will use this information on behalf of the operator to evaluate your use of the webpages, compile reports about the activities on the website, and render to the website operator additional services related to website and Internet use. The IP address transmitted by your browser for Google analytics will not be merged with other Google data.
The legal basis for the use of Google Analytics is the German Broadcast Media Act [TMG], section 15(3), respectively, GDPR, Art. 6(1), p.1 (f). All data transmitted by us and linked to cookies, user information (such as user IDs) or advertising IDs are automatically deleted after 26 months as a result of our event cycles. Once per month all data that has reached the end of their retention period is deleted automatically.
You may set your Browser application to reject the storage of cookies; however, please be advised that by doing so you may not be able to use the full range of our website features. In addition, you are free to inhibit collection of the data generated by the cookie relating to your usage of the webpages (including your IP address) by Google, as well as the processing of these data by Google, by downloading and installing the following browser plug-in via this link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent Google Analytics from collecting your data by clicking on "Recect" in the cookie notice (see above, (2) Cookies).
Our webpages use the Demographics feature of Google Analytics. It enables the creation of reports containing information about the age, sex and interests of webpage visitors.
This information is extracted from interest-based advertisements of Google as well as third-party visitor data. This information cannot be used to identify any individual.
You may disable this feature at any time in the advisement settings of your Google account, or generally disable collection of your data by Google Analytics as described under "Objecting to the collection of your data".
User behaviour on our webpages is evaluated in pseudonymised form for the purpose of matching advertisements with your personal interests. The information captured includes data about your activities on this website (e.g. surfing behaviour, sub-pages visited, time spent on each page, etc.). Without your express consent, this information will not be combined with the identity of the bearer of the pseudonym.
The legal basis for this is GDPR, Art. 6(1)(f).
We work together with Aumago GmbH (“Aumago”), Berlin, a target audience marketing firm. Aumago uses so-called cookies, text files which are saved by the browser of the computer. Pseudonymised usage information is collected in the form of cookie IDs and advertisement IDs without any IP addresses. Cookie IDs and advertisement IDs without an IP addresses do not provide enough information to identify a natural person behind the browser / user.
Based on the surfing behaviour (websites, categories and product pages visited), Aumago assumes a certain interest in a specific B2B industry sector and uses this information on our behalf to send usage-based online marketing messages in a more targeted manner. The cookies can be synchronised with those from other platforms in a process referred to as Cookie Matching. For example, cookie matching may be performed for: Google, Doubleclick, Adition, Appnexus, Mediamath, The Trade Desk, Adform, Active Agent, yieldlab.
The relevant cookies are either Aumago cookies or cookies from third-party service providers contracted by Aumago, such as TheADEX GmbH, Berlin. Users may opt out using the following link at any time to express their disagreement with this cookie tracking. This will cause a so-called opt-out cookie to be set. The OptOut cookie only works if it is not prevented from being stored on the computer, or deleted, by browser settings. If the opt-out cookie is deleted, the user must opt out again. As alternative options, the user may delete the cookies directly from the browser files, set the Do-not-track option of the browser, or go here to manage his or her cookie preferences. If you would like to find out what information your cookie has captured, please send us your cookie ID.
Our websites use the online advertising service Google AdSense which allows advertisements to be custom-tailored to your personal interests. We use this service for the purpose of presenting you with advertisements which might be of interest to you so as to enhance the value of our website to you. To this end, the service captures statistical information about you which is then processed by our advertisement partners. These advertisements can be identified by the inserted note "Google ad” or “Google-Anzeigen”, respectively.
When you visit our webpages, Google is notified that you have accessed them. To obtain this information, Google uses a web beacon to install a cookie on your computer. The data that is transmitted at this time is detailed under Item II.1. of this policy. The type of data collected is beyond our control and we have no precise knowledge of the scope of the data collection and the duration of data storage. Your data will be transmitted to USA for evaluation. If you have logged on to your Google account, your data can be directly assigned to your account. If you do not wish your page usage data to be assigned to your Google profile, please log off from your Google user account. Your data may be disclosed to Google contractors, other third parties as well as government authorities. The legal basis for processing your data is GDPR, Art. 6(1), p. 1 (f). This website does not include any third-party advertisements via Google AdSense.
There are various ways for you to prevent installation of Google AdSense cookies: (a) Modify your browser settings. Specifically, suppressing third-party cookies will prevent you from receiving third-party advertisements. (b) Disable interest-related Google advertisements using the link www.google.de/ads/preferences; please note that this setting will be deleted when you delete your cookies. (c) Use the link www.aboutads.info/choices to disable interest-related advertisements from providers who have joined the self-regulating campaign “About Ads”. This setting will be deleted when you delete your cookies. (d) If you are using Firefox, Internet Explorer or Google Chrome as a browser, you can disable these cookies permanently by following this link: www.google.com/settings/ads/plugin. Please be advised that by so doing you may not be able to use the full range of features offered by this website.
For further information regarding the purpose and scope of data collection and processing, as well as additional information on your related rights and your configuration options to protect your privacy, please contact: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; data privacy terms and conditions for advertisements: www.google.de/intl/de/policies/technologies/ads.
Google has joined the Privacy Shield framework between the EU and the US: www.privacyshield.gov/EU-US-Framework.
Our webpages may use Google AdWords to advertise our attractive services on third-party webpages using so-called Google AdWords. We can assess the success of individual advertisements using the advertising campaign data. We use this service for the purpose of presenting you with advertisements which are of interest to you, to enhance the value of our website to you, and to achieve fair advertising cost levels. AdWords is an online advertising application provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
In connection with the use of Google AdWords we also use a technology called Conversion Tracking. Whenever you click an advertisement provided by Google, a conversion tracking cookie is set. Cookies are small text files the user's Internet browser installs on the user’s computer. These cookies expire after 30 days and are not used to make the user personally identifiable. If the user visits specific pages of our website before the cookie expires, both Google and ourselves can recognise that the user has clicked the advertisement and was redirected to that page. Analytics items typically stored along with this cookie include the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) as well as opt-out information (flags indicating that a user no longer wishes to be approached).
Each Google AdWords customer receives an individual cookie. These cookies cannot be tracked by the websites of AdWords Customers. The information collected by the conversion cookies is used to create conversion statistics for AdWords customers who have agreed to use conversion tracking. These customers are told how many users have clicked their advertisement and been redirected to a page bearing a conversion tracking tag. However, they do not receive any information allowing them to personally identify any users. If you do not wish to participate in conversion tracking, you may easily object to the use of this feature by disabling the Google Conversion Tracking cookie in your Internet browser's user settings. When you have done this, you will not be included in any conversion tracking statistics. We exclusively receive statistical evaluations from Google. These evaluations allow us to determine which of our advertisements have been most effective. We do not receive any other data from the use of our advertisements. In particular, we are unable to identify individual users based on this information.
Based on the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google's use of this tool. Therefore we can only provide the following information based on our current knowledge: By incorporating AdWords Conversion, Google learns that you have accessed a particular section of our website or clicked on one of our advertisements. If you are registered for a Google service, Google may assign your visit to your account. Even if you're not registered or logged on to Google, the provider may obtain and store your IP address.
You can prevent being included in this tracking procedure in several ways:
a) By setting your browser software accordingly; in particular, suppressing third-party cookies will prevent you from receiving any advertisements from third-party providers;
b) By disabling cookies for conversion tracking. To do this, set your browser to block cookies from the domain “www.googleadservices.com”, www.google.de/settings/ads; however, this setting will be deleted if you delete your cookies;
c) By disabling interest-based advertisements from providers who have joined the self-regulating campaign "About Ads” using the link www.aboutads.info/choices. This setting will be deleted if you delete your cookies;
d) If you are using Firefox, Internet Explorer or Google Chrome as a browser, by disabling these cookies permanently via this link: www.google.com/settings/ads/plugin. Please be advised that by so doing you may not be able to use the full range of features offered by this website.
The legal basis for processing your data is GDPR, Art. 6(1), p. 1 (f). For further information on Google's data privacy protection please visit: www.google.com/intl/de/policies/privacy or services.google.com/sitestats/de.html. As an alternative, you may visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org.
Google has joined the Privacy Shield framework between the EU and the US: www.privacyshield.gov/EU-US-Framework.
Our webpages may use Google Analytics Remarketing functionality in combination with the multi-device features of Google AdWords. This functionality is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
These features allow the advertising target audiences generated using Google Analytics Remarketing to be linked with the device-independent features of Google AdWords. This means that personalised advertising messages can be adapted to your interests based on your previous user and surfing behaviour on one of your devices (e.g. smartphone) and presented on any of your other devices (e.g. tablet or PC).
Provided that you have given your consent, Google will match your web and app browser history with your Google account for this purpose. As a result, the same personalised advertising messages can be displayed on any device that is logged on to your Google account.
To support this feature, Google Analytics captures Google-authenticated user IDs, which are then temporarily combined with our Google Analytics data to define and create target audiences for advertisement across devices.
You may object to cross-device remarketing/targeting permanently by disabling personalised advertising in your Google account using the following link: www.google.com/settings/ads/onweb/.
Our webpages may use the visitor activity pixel by Facebook (Facebook Custom Audiences), Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversion. This enables users of our webpages visiting the social media network Facebook or any other websites using the same method to see interest-related advertisements ("Facebook Ads”). We use this service for the purpose of presenting you with advertisements which are of interest to you so as to enhance the value of our webpages to you.
Based on the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook's use of this tool. Therefore we can only provide the following information based on our current knowledge: By incorporating Facebook Custom Audiences, Facebook learns that you have accessed a particular section of our website or clicked one of our advertisements. If you are registered for a Facebook service, Facebook may assign your visit to your account. Even if you are not registered or logged on to Facebook, the provider may obtain and store your IP address and other identification information.
This is done to track the behaviour of visitors of our pages. It allows us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and to optimise future advertisement campaigns.
For us as operators of our website, the data collected in this way remains anonymous, and we are unable to draw any conclusions regarding the identity of any user. However, Facebook will store and process this information. This means that linking it with the relevant user profile is possible, and Facebook may use this information for its own advertising purposes according to the Facebook policy on the usage of user data. This method allows Facebook to place advertisements on Facebook pages as well as non-Facebook websites. As the operator of our website, we have no influence on the way this data is used.
The legal basis for processing your data is GDPR, Art. 6(1), p. 1 (f).
For more information on the way Facebook processes user information please visit www.facebook.com/about/privacy.
You may also disable the remarketing feature called “Custom Audiences” in the advertisement settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen after logging on to Facebook.
If you do not have a Facebook account, you may disable usage-based Facebook advertisements by going to the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
Our webpages may use the conversion-tracking service of Adform Germany GmbH (below “Adform”) to advertise our attractive services on third-party webpages with suitable means. We can assess the success of individual advertisements using the advertising campaign data. We use this service for the purpose of presenting you with advertisements which are of interest to you, to enhance the value of our website to you, and to achieve fair advertising cost levels.
Cookies are used to measure advertisement success based on specific parameters such as advertisements viewed or user clicks. The cookie is set as soon as you establish contact with an advertisement feature (e.g., a banner) provided via Adform for a Hamburg Messe und Congress GmbH event. The cookie will contain an advertisement ID and remain valid for 60 days. It does not capture any attributes (such as you complete IP address, your first and last name, your address, your e-mail address) that would allow anyone to identify you personally. However, the advertisement ID tells us which advertisement feature made you aware of the Hamburg Messe und Congress GmbH event in question. Hamburg Messe und Congress GmbH will never attempt to merge the advertisement ID with personally identifiable data.
Users who do not wish to participate in conversion tracking may disable the Adform cookie via their browser by going to site.adform.com/privacy-center/overview.
The legal basis for processing your data is GDPR, Art. 6(1), p. 1 (f). For further information on Adform's data privacy protection please visit: https://site.adform.com/privacy-center/overview.
To analyse the use of our web pages for the purposes of various advertising methods, we use a tracking tool provided by our Data Processor EPROFESSIONAL GmbH, Heidenkampsweg 74–76, 20097 Hamburg in connection with selected events (GDPR, Art. 6(1)(f)).
This tool uses a pixel tag to transmit the following information: HTTP header information, such as the anonymised IP address, the web browser you use, the website URL, the date and time, pixel tag-specific data, including the pixel tag ID and cookie ID, as well as additional information about the visit of our web pages, for example, any orders placed.
You may disable the tracking tool at any time by going here.
We also use the following third-party services:
This page may use so-called Web Fonts provided by Google to ensure the uniform display of fonts. When you access one of our pages, your browser will load the required Web Fonts into its cache memory so texts and fonts will display correctly.
This requires your browser to establish a connection with Google servers, which will tell Google that our webpages have been accessed by your IP address. We use Google Web Fonts to achieve a uniform and attractive appearance of our online services. This constitutes a legitimate interest as stipulated by GDPR, Art. 6(1)(f).
If your browser does not support Web Fonts, it will use a standard font installed on your computer.
Our webpages may use Google Maps through an API. This functionality is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps it is necessary to store your IP address. This information is typically transmitted to, and stored on, a Google server located in the USA. The provider of this webpage has no influence on the transmission of these data.
We use Google Maps to improve the appearance of our online services and make sure the localities described in our webpages can be found easily. This constitutes a legitimate interest as stipulated by GDPR, Art. 6(1)(f).
It should be noted that transmitting information over the Internet (e.g. when communicating by e-mail) can expose data to security gaps. It is impossible to guarantee full protection of data transmissions against third-party access.
For security reasons and to protect the transmission of confidential content such as orders or enquiries you send to us as the operators of this website, these webpages use SSL or TLS encryption. You can recognise an encrypted connection when the beginning of your browser's address line switches from “http://” to “https://”, and a small lock symbol appears next to it.
When SSL or TLS encryption is enabled, the information you send to us cannot be read by third parties.
If you have entered into an agreement with us that includes a payment obligation which requires transmission of your payment information to us (e.g. account number for us to withdraw a specified amount), this information is needed to carry out the financial transaction.
All payments using common payment methods (such as Visa/MasterCard, PayPal) are exclusively transacted through encrypted SSL or TLS connections. You can recognise an encrypted connection when the beginning of your browser's address line switches from “http://" to “https://”, and a small lock symbol appears next to it.
Encrypted communication prevents third parties from reading any information you send to us.
We have installed video cameras on our premises. In the event that our video cameras record any images of you, your personally identifiable data may be subject to processing. We use our video cameras to protect our property (or the property of third parties) or our householder's rights (or those of third parties). Ostentatious video monitoring is intended to be preventive and, by being obvious, avert any potential hostile activities directed against us. Furthermore, recorded video footage may be used to investigate criminal acts and other relevant events. It also permits us to prosecute criminal acts, enforce legitimate claims and provide legal evidence. Video monitoring also allows us to control vehicle and visitor traffic on our premises. Finally, video recordings may, within the scope of applicable law in a given case, may serve the purpose of uncovering violations of work or training-related responsibilities and provide evidence of the circumstances thereof. In such cases, video recordings are used to enforce specific measures under employment law up to and including termination of an existing work or training relationship.
The legal basis for processing this data for the purpose of protecting property and our householder's rights is GDPR, Art. 6(1), p. 1 (f). The Data Controller’s legitimate interests in processing the data are described in the paragraph above. To the extent that the data processed is video footage showing the behaviour of an employee, trainee or job applicant, data processing is covered by the provisions of the GDPR in connection with the German Federal Data Protection Act (BDSG), section 26.
Since storage of the data is based upon due balancing of the Data Controller's interests and those of the Data Subject, the existing interests and any change thereof are key criteria for the duration of storage. As a matter of principle, the data will be erased as soon as the Data Controller's legitimate interests no longer exist or no longer supersede your interest in erasure. Video recordings are never stored for more than a few days. In the event that video recordings are required to assert, defend or exercise legal claims, enforce employer measures or serve as evidence and aid in the investigation of specific facts, this data will be stored until these purposes have been achieved.
Further exceptions from the erasure rules may arise from the provisions of the GDPR and German Federal law, in particular the German Privacy Act (BDSG).
You may revoke your consent at any time. You may do so in an informal e-mail message to privacy(at)hamburg-messe(dot)de.
By allowing your admission ticket to be scanned by an exhibitor during an event, you agree to your participation in the Lead Tracking programme.
This means that as a visitor you agree that we will, upon the exhibitor's request, transmit to the exhibitor your personally identifiable data (title information, surname, first name, company, street address, postal code, city, e-mail address, industry if applicable) which the exhibitor may use for the purpose individually agreed with you.
As a visitor you are free to participate or decline participation in the service. You are free to revoke your consent given to the exhibitor (GDPR, Art. 6(1)(a)) at any time.
You may use our wireless computer network in our conference and event buildings free of charge. To do so you must register with us. The following data must be provided for registration:
We will process this data for the purposes of providing our wireless computer network, defending ourselves against third-party claims, and managing our customers, in particular, providing you with event-specific information e-mails relating to the events you visit.
If you choose to use a premium account for a fee, you data will also be processed by us or a service partner contracted by us for the purposes of contract execution.
The information required for registration must be provided in full. We cannot accept incomplete registration.
The data you provide through your registration will be processed for the purpose of contract performance (GDPR, Art. 6(1), p.1 (b)). The legal basis for processing personally identifiable data is GDPR, Art. 6(1), p. 1 (f).
Our legitimate interests are the provision of our wireless computer network, and defending our legal claims if applicable.
We will save your personally identifiable data pursuant to Item I.6.
When we organise lotteries (tombolas, competitions etc.) we collect personal data form the participants for the purpose of carrying out the lottery. Depending on the specific occasion, this personal data may include, without being limited to, the following:
The personal data we collect will be processed as required to conduct the respective lottery. The legal basis for this is GDPR, Art. 6(1)(f). Our legitimate interest consists in offering lotteries to you while raising your awareness of our own, internally-organised events. Furthermore we may use your personal data to inform you by e-mail about our own events (the legal basis being GDPR, Art. 6(1)(f)). You may object to such data processing at any time by sending a message to privacy(at)hamburg-messe(dot)de .
Provided that we make a prize available to you under our contractual obligation when conducting a lottery, we do so on the basis of GDPR, Art. 6(1)(b). To this end we may disclose your data to the sponsor of the lottery, if required (which is always a company that is in some way connected to our own events).
Buying a ticket or redeeming an invitation entitles (trade) visitors to use a matchmaking function at individual Hamburg Messe events. Visitors can create a user account via the ticket shop and use it to log into the app after purchasing a ticket.
Users registered for matchmaking have the opportunity to contact other registered users ("Say Hello") and, at their own request, exchange personal data (title, first name, surname, company, position, telephone number, mobile phone number, e-mail address, personal interests and a profile description) with other users (visitors and/or exhibitors) via this networking function.
The legal basis for the processing of personal data is Art. 6 Para. 1 S. lit. a and b DS-GVO. The storage of personal data is earmarked for a specific purpose.
In our parking facilities, which are operated ticketless, the registration number of our employees, service providers and business partners is recorded in accordance with GDPR, Art.6 Para. 1 lit. f as well as § 4 Federal Data Protection Act due to our legitimate interest, mainly for the purpose of safeguarding the right of access and entry control. Automatically recorded data will be deleted immediately after leaving the parking facility, unless there is a concrete reason for longer storage.