Data protection policy of NürnbergMesse GmbH

The controller according to the definition of the General Data Protection Act and other national data protection laws of the EU member states and other data protection regulations is: 

NürnbergMesse GmbH 
Exhibition Centre 1
90471 Nuremberg 
Germany 
Tel.: +49 9 11 86 06 0
Contact form
Website: www.nuernbergmesse.de

Contact information of the Data Protection Officer: datenschutz@nuernbergmesse.de

• The right of access (Art. 15 EU-GDPR),
• The right to erasure (Art. 17 EU-GDPR),  
• The right to rectification (Art. 16 EU-GDPR),  
• The right to data portability (Art. 20 EU-GDPR),  
• The right to restriction of data processing (Art. 18 EU-GDPR),  
• The right to object to data processing (Art. 21 EU-GDPR).

To assert these rights, please fill out our contact form.

Alternatively, you can contact us at the aforementioned postal address.

Any questions about data processing in our company should be directed to the same e-mail address. You are also entitled to complain to the data protection supervisory authority. 

Please note the following with respect to the rights of objection:

When we process your personal data for purposes of direct advertising, you have the right to object to such data processing at any time without indication of reasons. The same applies to profiling to the extent that it is related to direct advertising.  

When you object to processing for purposes of direct advertising, we will no longer process your personal data for these purposes. You can notify you objection free of charge and without observing requirements of form via our contact form.
 
In the event that we process your data for the sake of legitimate interests, you can object to such processing at any time for reasons having to do with your particular situation; the same applies to any profiling on the basis of these provisions.  

We will no longer process your personal data unless we can demonstrate compelling, legitimate reasons for the processing that override your interests, rights and freedoms, or when the processing serves the purpose of asserting, exercising or defending against legal claims.

• Order/payment processing 
• Application as exhibitor
• Registration as visitor / purchase of tickets
• Redemption of coupons. Coupons can be redeemed online and an e-ticket can be printed out. That saves you wait times on site.
• Registration of future tickets “with a click”. For some trade visitor exhibitions, pre-legitimation information is sent by e-mail or letter (legitimation of trade visitors), which makes it easier to purchase tickets the next time.
• Delivery, payment and online publication of trade fair directories and catalogues (e.g. exhibitors and products database).
• Verification of a person’s status as a trade visitor (trade visitor legitimation).
• Personalisation of ID cards in ID management: exhibitor IDs, assembly and disassembly IDs, tickets.
• Booking and management of time slots via the trade fair logistics system.
• Planning your trade fair visit on the basis of announcements and targeted trade information sent by e-mail and post.
• Smooth execution of your trade fair participation as an exhibitor by providing targeted information about service offers and services. 
• Registration for newsletters.
• Voluntary participation in market and opinion research surveys.
• Review of conditions for the accreditation of media representatives and bloggers.
• Analysis of our website usage for performance, user-friendliness and offer improvement and also for marketing purposes.

We also process your personal data to fulfill legal obligations, such as regulatory requirements under commercial and tax law, retention obligations or the comparison of your data with so-called sanction lists in order to comply with anti-terrorism legislation (e.g. Regulation (EC) 2580/2001). In this case, the legal basis for the processing is the respective legal regulations in conjunction with Art. 6 para. 1 letter c EU-GDPR.

In addition, for security reasons, registration is required before each visit or entry to the exhibition grounds in order to determine who is on the exhibition grounds. Your contact details are therefore collected when you register. We process this data on the basis of Art. 6 para. 1 letter f EU-GDPR to protect the legitimate interests of NürnbergMesse GmbH, in particular to protect property and to prevent and investigate criminal offenses. 
The principle of data economy and data avoidance is observed here, as only the data required for registration is marked with an asterisk (*) as a mandatory field. The data will not be passed on to third parties. The data will be deleted as soon as the described purpose no longer applies.

Your consent is also required under data protection laws. In asking for your consent, we inform you about the purposes of data processing and your right to object. If the consent also refers to the processing of special categories of personal data, we will expressly inform you of this in the consent declaration.

Processing of special categories of personal data within the meaning of Art. 9 para. 1 EU-GDPR is only done when required by statutory regulations and there is no reason to assume that your legitimate interests in preventing such processing are overriding.
 

Within our enterprise, we ensure that only those persons who need your personal data to fulfil our contractual and statutory obligations receive it. Because NürnbergMesse GmbH operates all over the world, we may possibly send your data to subsidiaries or international representatives of the NürnbergMesse Group. The necessary data protection agreement has been concluded with them. We send your dataspecifically to the subsidiary or international representative that is located in your country or is responsible for your territory in order to

• process your order or request – or
• to send you event-specific information and offers.

In many cases, our departments are assisted in the performance of their duties by service providers and service partners, e.g. visitor registration processing, management of the trade fair logistics system, newsletter distribution, e-mailings, payment processing, order processing, credit check, web hosting, maintenance and analysis of data. All service providers and service partners have been carefully selected and the necessary data protection agreements have been concluded with all service providers and service partners. Personal data is processed by our service providers and service partners in compliance with the applicable data protection regulations for the provision of support and information to customers and interested parties and to provide the offered services.
 
Your data will be transmitted to exhibitors in the following cases: 

• When you use a coupon for your trade fair visit, you accept that the data you enter in your visitor registration will be transmitted to the exhibitor who has invited you to visit the trade fair free of charge. This can serve the purpose of billing the tickets between the exhibitor and NürnbergMesse GmbH, the inspection of the redeemed coupons and communication between exhibitors and their visitors.
• If you participate in so-called “lead tracking”. You participate in lead tracking when you allow an exhibitor to scan the bar code on your ticket while visiting an event. In a manner similar to providing a business card, scanning the bar code means that the contact data you provided in your visitor registration (company name, form of address, title, last name, first name, company, street address, postal code, post town, e-mail, possibly also sector information and other information provided by you) will be transmitted to the exhibitor,regardless of whether the exhibitor is from Germany, the EU or other third countries. Your participation in lead tracking is voluntary and will not take place without your further cooperation.

Recipients of the web analytics data are/may be

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor according to Art. 28 EU-GDPR)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be excluded that US authorities access the data stored by Google.

The transmission of data to third countries (outside of the European Union or the European Economic Area) is only done when this is necessary to fulfil our obligations or is legally required or when you have granted us your consent to do this. 

We may potentially transmit your personal data to subsidiaries or international representatives of NürnbergMesse GmbH outside of the European Economic Area: India, China, Brazil, United States. The international representatives of NürnbergMesse can be found on our website at www.nuernbergmesse.de/auslandsvertretungen.

Compliance with the level of data protection is ensured, among other things, by the use of EU standard data protection clauses and - where necessary - by additional guarantees. The service providers are obligated by corresponding contractual regulations to comply with the data protection standards and thus the data protection level of the EU. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 para. 1 p. 1 letter a EU-GDPR), in which case you will be informed of this separately when obtaining your consent.

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

We will store your data for as long as needed for the given processing purpose. Please note that numerous retention periods require that data continues to be stored. We are particularly required to do this by retention obligations under commercial law or tax law (e.g. German Commercial Code, Tax Code, etc.). Data is routinely erased as soon as no further retention obligations are in effect. 

Furthermore, we may store your data when you have granted us your consent to do this or in the event of legal disputes, when we use the data as evidence for purposes of statutory limitation periods, which can last up to thirty years; the regular limitation period is three years. 

The data sent by us and linked to cookies are automatically deleted after 50 months (but no later than 31.12.2023) by using Universal Analytics (Google Analytics 3) and after 14 months by using Google Analytics 4. The deletion of data whose retention period has been reached takes place automatically once a month.

We employ appropriate technical and organisational safeguards to protect the data stored with us as well as possible against accidental or intentional manipulations, loss, destruction or access by unauthorised persons. The level of security is continually reviewed and adapted to meet new security standards in collaboration with security experts. 
 
Data transfers from and to our website are always encrypted. As the transmission protocol for our websites, we offer HTTPS and we always use the latest encryption protocols. It is also possible to use alternative communication channels (e.g. postal service).

Some personal data is necessary for the establishment, performance and termination of the obligation and the fulfilment of the related contractual and statutory obligations. The same applies to the use of our website and the various functions it provides. 
 
We summarised the details in the section above. In certain cases, data must also be collected and/or provided due to statutory provisions. Please note that it is not possible to process your request or perform the underlying contractual obligations without having this data provided to us.

The data we process is determined by the context: This depends, for example, on whether you place an order online or make a request to send us a job application or submit a complaint in our contact form. 

Please note that we may also separately provide information for special processing situations in an appropriate place, as when uploading job application documents or making a contact request, for example. 
 
When you visit our website and webshops, we collect and process the following data using "Google Analytics":

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by means of the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
We use Google Signals. This allows Google Analytics to collect additional information about users who have activated personalized ads (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.
In Google Analytics 4, IP address anonymization is enabled by default. For Universal Analytics (Google Analytics 3), we have enabled the IP anonymization feature at all times. Due to IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of "events". Events can be:

• Page views incl. date and time
• First visit to the website
• Start of session
• Your "click path", interaction with the website
• Scrolls (page depth: 25%, 50%, 75% and 90%)
• Clicks on external links 
• internal search queries
• Interaction with videos
• file downloads
• ads seen / clicked
• language setting
• your approximate location (region)
• your IP address (in shortened form)
• technical information about your browser and the devices you use (e.g. language setting, screen resolution)
• Your internet service provider
• the referrer URL (via which website/ via which advertising medium you came to this website)
• Files requested, amount of data transferred, downloads/file exports 
• Your client ID
• gclid and dclid set by Google Analytics
• For reasons of technical security (in particular to defend against attack attempts on our web server), this data is stored in accordance with Art. 6 (1) lit. f. EU-GDPR stored. After 7 days at the latest, anonymization takes place by shortening the IP address so that no reference to the user is made. 
   
  

When you make a contact request, we collect and process the following data:

• Last name, first name 
• Contact data (Email address)
• Title 
• Indications of desired information

When you place an order, we process the following data: 

• Title 
• Last name, first name 
• Date of birth  
• Shipping address  
• Billing address  
• E-mail address  
• Data that may be permissibly processed from other sources 
  

When you file online job applications, we collect and process the following data:

• Last name, first name  
• Address 
• Contact data 
• Application data
• We also use data that we have permissibly obtained from publicly available directories (e.g. professional networks).
  

For newsletters, we collect and process the following data: 

• Last name, first name  
• E-mail address  
• Title 

Contact form/ Contact by e-mail NürnbergMesse GmbH 

A contact form that can be used for contacting us electronically is available on our website. When you write to us using the contact form, we will process the data you enter into the contact form to contact you and answer your questions and wishes. 
 
In this respect, we observe the principle of data minimisation and data avoidance in that you only need to enter the data that we absolutely need to contact you. That includes your e-mail address and the message field itself. In addition, your IP address is also processed as a matter of technical necessity and for legal protection. All other data is requested in optional fields and can be provided optionally (e.g. to answer your questions more specifically in relation to you). 
 
If you contact us by e-mail, we process the personal data communicated in the e-mail only for the purpose of processing your request. 
 
Contact form for direct contact with exhibitors 

In the exhibitors and products database on our website, you will find a specific contact form for each exhibitor that can be used to establish direct electronic contact with the exhibitor. If you write to the exhibitor using the contact form, the data entered into the entry form will be directly transmitted to the exhibitor and stored there. The exhibitor will process the data entered into the contact form for scheduling appointments, making contact and answering your questions and wishes. In this process, the principle of data minimisation and data avoidance is observed in that you only need to enter the data which the exhibitor definitely needs from you. This includes your e-mail address and the message field itself. In addition, your IP address will be processed as a matter of technical necessity and to legally protect your IP address. All other data are voluntary fields and can be indicated optionally (e.g. to answer your questions in a more individualised way).

You can also subscribe to a free newsletter on our website. The e-mail address indicated in the newsletter application and your name will be used for sending you the personalised newsletter. 
 
In this respect, we observe the principle of data minimisation and data avoidance in that the only mandatory field is your e-mail address (and potentially your name, in the case of a personalised newsletter). As a matter of technical necessity and for legal protection, your IP address is also processed when you order the newsletter. 
 
Naturally, you can always terminate the subscription by exercising the cancellation option provided in the newsletter, thereby revoking your consent. It is also possible to cancel your newsletter subscription directly in our website. 

If you do not consent to further use, we will process the data you entered into the order form only for the purpose of performing or executing the contractual relationship. 

The principle of data minimisation and data avoidance is observed in that you only need to enter the data that we absolutely need to perform the contract and fulfil our contractual obligations (thus, your name, address, e-mail address and the payment data required for the chosen form of payment), or data that we are legally required to collect.

As part of data collection, we request the salutation in order to ensure appropriate and personal communication. This information is processed on the basis of our legitimate interest in accordance with Art. 6 para. 1 s. 1 letter f EU-GDPR. Our legitimate interest lies in addressing our customers and business partners in a professional and respectful manner. When making your selection, you naturally have the option of selecting “no information”. Your data will be used exclusively for this purpose and will not be passed on to unauthorized third parties.

As a matter of technical necessity and for legal protection, your IP address will also be processed. Without this data, we would unfortunately have to refuse the contract or terminate an existing contract because we would not be able to perform it. Naturally, you can provide more data if you wish.

We offer exhibitors the option of registering with us by providing personal data. A particular advantage of registration is that you can view your order history and store the data you have entered into the order from so that when you place another order, you will not need to enter it again. Registration is therefore possible either to perform a contract with you (via our online shop) or to take pre-contractual measures.When the registration process is completed, your data will be stored with us so that you can use the protected customer section. As soon as you log in to our website with your e-mail address as your user name and password, this data will be provided for the actions you perform on our website (e.g. orders in our online shop). Orders that have been filled can be viewed in the order history. You can enter changes to the billing or shipping address here.

Registered persons are at liberty to make their own changes or corrections to the billing or shipping address in the order history. Our Customer Service will also gladly make such changes or corrections when you contact them. Naturally, you can always cancel the registration and delete your customer account.

We use the service provider Dealfront Group GmbH to keep our customer data up to date and to complete it with company information that is important to us, such as industry, year of foundation, etc. The service provider supports us in completing our customer data by comparing it with publicly accessible sources such as company websites, public registers or business networks. 

Data processing is carried out on the basis of our legitimate interest in keeping the data up to date, avoiding duplicates and enriching it with important company information (Art. 6 para. 1 s. 1 lit. f EU GDPR). As soon as the purpose for collecting the data and statutory retention obligations have been fulfilled, the data will be deleted.

We have an interest in cultivating customer relationships with our exhibitors and visitors and providing you with information and offers about our own similar events and services. Therefore, the data transmitted upon submitting the application (company name, address, telephone/ fax number and e-mail address) is processed by us and possibly by our service partners so that we can send you event-related information and offers by e-mail, in accordance with Art. 6 para. 1 s. 1  letter f EU-GDPR. 

If you do not want this, you can object to the use of your personal data for direct advertising purposes at any time; the same applies to profiling to the extent that it is related to direct advertising. When you notify your objection, we will no longer process your data for this purpose. 

The objection can be notified without observing formal requirements and without indication of reasons and without incurring separate costs aside from customary transmission costs at standard rates. It should be directed to NürnbergMesse GmbH, Exhibition Centre, 90471 Nuremberg, or submitted via our contact form.

We are pleased with your interest in working for NürnbergMesse GmbH. We are well aware of the importance of your data and will process the personal data you provide in the application form only for the purpose of effectively and correctly handling the application process and communicating with you in connection with the application process. Your data will not be transferred to third parties without your consent. 
 
When filling out the application form, you will be asked to submit personal data. In this respect, we observe the principle of data minimisation and data avoidance in that you only need to indicate the data we need to completely review your application materials, such as your curriculum vitae for example, or data which we are legally required to collect. This mandatory information is marked with an asterisk (*). As a matter of technical necessity and for legal protection, your IP address will also be processed. 
 
Without this data, we will unfortunately not be able to review your application materials and for this reason our application system will not permit you to upload your application materials. Naturally, you are at liberty to provide the voluntary information in the application form. 
 
We employ appropriate safeguards to protect the security and confidentiality of your data as well as possible. Our application system will transmit your application documents to us in encrypted form. 
 
We will store your data for the aforementioned purposes until the application process is completed and the related time periods have expired, and at the latest six months after you are notified of our decision. However, you will have the option of storing your application materials with us for a longer period of time and checking them against other vacant positions that match your profile. 
 
You can provide the consent we need for this purpose by checking the box before uploading your application materials. In this case, we will store your data for 12 months. Naturally, you can always revoke your consent with future effect without indication of reasons by calling us at +49 9 11 86 06-0, sending us an e-mail at data@nuernbergmesse.de or mailing us a letter to NürnbergMesse GmbH, Data protection, Datenschutz Messezentrum, 90471 Nuremberg. Send request to data@nuernbergmesse.de.

Through our dialogue platforms it-sa 365 and myBeviale.com we offer you the opportunity to participate in product presentations, webinars or workshops (so-called "actions") in digital form. 

For this purpose, you must provide us with your address and contact data upon conclusion of the contract. We need these data for the initiation or fulfillment of the contract, in accordance with Art. 6 para. 1 letter b EU-GDPR.

You have the option of managing or deleting some of your contract data yourself in the personal area of the dialogue platform.

If you take part in an action, the information you provided during registration (surname, first name, company and e-mail address) will be forwarded to the service provider avodaq AG, Wendenstraße 21 b, 20097 Hamburg, Germany, who is responsible for the technical implementation of the action, insofar as this is necessary to carry out the action. Naturally, the necessary data protection agreements have been concluded with this service provider.

If you take part in an action, your first name and surname will be visible to the other participants of the same event in order to enable you to communicate and network with each other. The legal basis for this is Art. 6 para. 1 letter f EU-GDPR. 

Furthermore, we will transmit your registration data (surname, first name, company and e-mail address) to the respective company that carries out the action in order to support customers and interested parties and to process the services offered. Participation in an action is voluntary and does not take place without your further participation. The data is only transmitted to the company when you participate in an action. The transmission is necessary so that we can carry out the online event (Art. 6 para. 1 letter b EU-GDPR). 

The data will be deleted as soon as the purpose for collecting the data and statutory storage obligations have been fulfilled. Further information can also be found in the General Conditions of Participation for users of the online platforms it-sa 365 and myBeviale.com.

We embed Vimeo videos on our digital platforms. The operator of the corresponding plugins is Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page with the Vimeo plugin, a connection to Vimeo servers is established. This tells Vimeo which pages you visit. If you are logged in to your Vimeo account, Vimeo can personally track your surfing behavior. You can prevent this by first logging out of your Vimeo account.

When a Vimeo video is started, the provider uses cookies that collect information about user behavior. Vimeo also stores other, non-personal usage information in cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Vimeo is used in the interest of an attractive presentation of our digital platforms. This represents a legitimate interest in the sense of Art. 6 Par. 1 letter f EU-GDPR. If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 Par. 1 letter a EU-GDPR; consent may be revoked at any time.

Further information on the handling of user data can be found in the Vimeo privacy policy at: vimeo.com/privacy.

We do not employ purely automated processing procedures in making our decision. 

Our web pages use so-called “cookies” in several places. They serve the purpose of making our offering more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser (locally on your hard drive). 
 
These cookies make it possible for us to analyse how users use our websites. They allow us to design the website contents to meet the needs of users, for example. Cookies also enable us to measure the effectiveness of a given advertisement and place it in accordance with the user’s topical interests, for example. 
 
Most of the cookies we use are so-called “session cookies.” These are automatically deleted after your visit. Permanent cookies are automatically deleted by your computer when the corresponding period of validity has expired (usually after six months) or when you delete them yourself before the expiration of the period of validity. 
 
Most web browsers accept cookies automatically. Usually, however, you can also change your browser settings if you would rather not send us the information. In this case, you will still be able to use the offerings of our website without restrictions (exception: configurators). 
 
We use cookies to make your offering more user-friendly, effective and secure. We also use cookies so that we can analyse how users use our websites. They allow us to design the website contents to meet the needs of users, for example. Cookies also enable us to measure the effectiveness of a given advertisement and place it in accordance with the user’s topical interests, for example. 
 
Cookies are stored on the user’s computer and transmitted from there to our website. As the user, therefore, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the setting in your Internet browser. Furthermore, already placed cookies can always be deleted using the Internet browser or other software programs. This is possible in all commonly used Internet browsers. 

The legal basis for the use of technically necessary cookies is our legitimate interest, Art. 6 para. 1 letter f EU-GDPR. The storage of information in your terminal equipment or access to information already stored in your terminal equipment is absolutely necessary so that we can provide the telemedia service expressly requested by you as a user (§ 25 para. 2 number 2 TTDSG).

Otherwise, the legal basis in each case is generally your consent, if no specific legal basis is mentioned below. You can revoke your consent at any time. You can manage your revocation via the cookie icon placed on the bottom left of each of our web pages. Here you can also find more information about the use of cookies.

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Consentmanager

We have integrated the consent management tool Consentmanager (www.consentmanager.net) from Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our website to obtain consent for data processing and use of cookies or comparable functions. With the help of Consentmanager you have the possibility to give your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, measurement and personalized advertising. With the help of Consentmanager you can grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed afterwards.

The purpose of integrating Consentmanager is to let the users of our website decide about the above-mentioned things and, as part of the further use of our website, to offer the option of changing settings that have already been made. By using Consentmanager, personal data and information from the end devices used, such as the IP address, are processed.

The legal basis for processing is our legitimate interest in Consent Management, Art. 6 Para. 1 S. 1 letter f EU-GDPR. By processing the data, we help our customers (according to GDPR this is the responsible party) to fulfill their legal obligations (e.g. obligation to provide evidence). Our legitimate interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. Consentmanager stores your data as long as your user settings are active. After two years after making the user settings, the consent will be asked again. The user settings made are then saved again for this period.

You can object to the processing. You have the right to object to reasons arising from your particular situation.  

You can find additional information about the use of cookies and the possibility of objecting to the use of cookies via the cookie icon placed on the bottom left of each of our web pages.

We currently use the following social media plug-ins: Facebook, Google+, X, Xing, LinkedIn, Instagram. We use what is known as a “two-click” solution for this purpose. This means that when you visit our website, normally no personal data is transferred to the plug-in provider at first. You can recognise the plug-in provider from the highlighting in the box above its initial letters or its logo. We give you the option of communicating directly with the plug-in provider by clicking on this button. Only when you click on the highlighted field and thus activate it will the plug-in provider receive the information that you have visited the associated page of our website. In the case of Facebook and Xing, the IP address is anonymised immediately after collection, according to information from the providers in Germany. When you activate the plug-in, your personal data is transmitted to the plug-in provider and stored there (with U.S. providers, in the United States). Because the plug-in provider particularly uses cookies to collect data, we recommend using your browser’s security settings to delete all cookies before you click on the greyed-out box. 
 
We have no influence over what data are collected or how the data are processed, and we also do not know the full extent of data collection, the purposes of processing or the storage periods. We also have no information about the erasure of collected data by the plug-in provider. 
 
The plug-in provider stores the data collected about you in the form of usage profiles and uses them for purposes of advertising, market research and/or designing its websites to meet user needs. Such an analysis is particularly performed (even for users who are not logged in) to present relevant advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, but to exercise that right, you must contact each plug-in provider. With these plug-ins, we give you the opportunity to interact with the social networks and other users so that we can improve our own site and make it more interesting for you as the user.

The basis for the processing of your personal data is your consent, the legal basis is Art. 6 para. 1 s. 1 letter a EU-GDPR.

The plug-in provider processes and stores your data in the USA. They are obliged by corresponding contractual regulations to comply with the data protection standards and the data protection level of the EU. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 para. 1 s. 1 letter a EU-GDPR), in which case you will be informed of this separately when obtaining your consent.

You can revoke your consent at any time for the future.

You can manage your revocation via the cookie icon placed on the bottom left of each of our web pages. Here you can also find more information about the use of cookies.

Data are transferred regardless of whether you have an account with the plug-in provider and are logged in to it. When you are logged in to the plug-in provider, your data that we have collected are directly associated with your account with the plug-in provider. If you activate the button and follow the link to the page (for example), the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend that you should always log out after using a social network, and especially before activating the button, because in this way you can keep information from being associated with your profile with the plug-in provider. 
 
You can find out more about why and how the plug-in providers collect and process data in those providers’ data privacy policies, which are listed below. There you will also find additional information about your rights and setting options to protect your privacy.

Addresses of plug-in providers and URLs with their privacy policies:

Facebook Inc

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php
 
Additional information about data collection: www.facebook.com/help/186325668085084 and www.facebook.com/privacy/explanation.
 
Google Inc. 
 
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; policies.google.com/technologies/partner-sites?hl=en

X
 
X Corp., 1355 Market St, Suite 900, San Francisco, CA 94103, USA; twitter.com/privacy 

Xing AG 
 
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; privacy.xing.com/en/privacy-policy
 
LinkedIn Corporation 
 
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policy
 
Instagram 
 
Instagram, LLC Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; privacycenter.instagram.com/policy

Other plug-ins:

YouTube

Our website includes links to videos from the external video platform YouTube. The associated plugins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By default, only inactivated images from the YouTube channel are embedded and do not provide an automatic connection to YouTube’s servers. Consequently that operator receives no user data when you view these Web pages. 
 
You can decide for yourself whether YouTube videos should be activated. Your consent for the necessary data to be transferred to the operator (including the Internet address of the current page and the user’s IP address) will only be given when you approve for the video to play by clicking “Play.”  
 
To store the setting that a user wishes, we set a cookie that contains these parameters. When we set these cookies, we do not store any personal data – the cookies contain only anonymized data to adjust the browser. Then the videos will be active and you can play them. If you want to inactivate automatic loading for YouTube videos, you can change your Web browser’s settings to reject cookies or limit their acceptance. 
 
You can find out more about data protection on YouTube in YouTube’s data privacy policy at www.google.de/intl/de/policies/privacy/.

Walls.io

To display social media content on our websites, we also use a plug-in from the provider Walls.io. The provider is "Die Socialisten" Social Software Development GmbH, Andreasgasse 6, Top 1, 1070 Vienna, Austria. When you visit a subpage with social media content displayed by Walls.io, a connection to Walls.io servers is established. 

You also have the option to share content displayed via Walls.io using the services of the respective social media providers after clicking on them. For this, the information in the section "Recommend page" function applies accordingly. The integration of social media content via Walls.io is based on Art. 6 para. 1 letter f EU-GDPR for the appealing presentation of our online offers.

You can find more information on data processing by Walls.io at walls.io/privacy

NürnbergMesse GmbH maintains a Facebook page. To the extent that we have control over how your data are processed, we make sure the applicable data protection regulations are obeyed. 
 
Below, you can find the most important information about data protection law as it applies to our company websites. 
 
Name and address of data controller for business
 
In addition to NürnbergMesse GmbH, the following is a data controller for the company’s Web pages under the terms of the EU General Data Protection Regulation (EU-GDPR) and other provisions of data privacy law: 

• Facebook  
  (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

However, if you use the Facebook platform and its functions, you do so at your own risk. This especially applies to using interactive functions (e.g., Comment, Share, Like). 
 

Purpose and legal basis

We ourselves maintain the fan pages to communicate with those pages’ visitors and to keep them informed about our latest developments.  

We also gather data for statistical purposes, so that we can refine and optimise content and make our services more attractive. The social networks process the necessary data for this purpose (e.g., total number of page visits, page activities and data provided by visitors, interactions) and make them available. We have no influence over how these data are generated or presented.  

Your personal data will also be processed for market research and advertising purposes by the Facebook providers, and by NürnbergMesse GmbH as well. It may thus happen that user profiles may be developed from your usage and the interests that usage indicates. These profiles may be used for such purposes as displaying ads that presumably match your interests, both on and off the platforms. As a rule, cookies are stored on your computer for such purposes. Irrespective of those cookies, your user profiles may also store data that are not gathered directly on your devices. Such data may also be stored and analysed across multiple devices, especially – though not only – if you are a registered member and have logged into the platform. 

Other than the above, we do not gather or process any personal data.  

NürnbergMesse GmbH will process your personal data on the basis of our legitimate interest in effectively providing information and communication under Art. 6 para. 1 letter f of the EU-GDPR.  
If your consent is requested for data processing – in other words, if you indicate your consent by confirming on a button or the like (“opt in”) – your data will be processed on the basis of Art. 6 para. 1 letter a and Art. 7 of the EU-GDPR. 
 

Your rights / Right to object 

If you are a Facebook member and do not want the network to gather data about you by way of our page and to link those data with the member data the network has stored for you, you must: 

• log out of the network before visiting our fan page, 
• delete the cookies on your device, and  
• close and restart your browser. 

However, once you log in again, the network will again be able to recognise you as a particular user.

For a detailed discussion of the various ways in which your data are processed and how you can object to that processing (“opt out”), please see the information in the following links: 

• Facebook Data privacy policy: www.facebook.com/about/privacy/
• Facebook Opt out and youronlinechoices.com

Overall, you have the following rights concerning how your personal data are processed: a right of access; a right to rectification; a right to erasure; a right to restrict processing; a right to object to processing; a right to data portability; a right to lodge a complaint with a supervisory authority about unlawful processing of your personal data.  However, as NürnbergMesse GmbH does not have full access to your personal data, you should assert your rights directly to the provider of the social media. These providers have access to their users’ personal data, and they are the ones who can take the appropriate measures and provide information.  
Nevertheless, we will of course be happy to assist you if you need help. Please contact datenschutz@nuernbergmesse.de.

Further information

Notes on copyright 
 
If you wish to publish pictures, text, maps, videos, music, etc. on our site, you should be aware that you may thereby assign all rights of use to the network. This may ultimately have legal consequences for you if you yourself are not the author of the materials or do not hold the rights to them.

Our website contains clearly recognisable links to the websites of other companies. When we link to the websites of other companies, we have no influence over their content, and therefore can also assume no responsibility or liability for that content. Each provider or website operator is responsible for the content of their own websites. 
 
The linked pages were checked for potential legal violations and recognisable infringements at the time when the links were placed. No unlawful content was recognisable at the time when the links were placed. However, we cannot be reasonably expected to permanently monitor the content of linked websites unless there are concrete indications of a legal violation. If we discover a legal violation, the associated links are removed immediately.

Microsoft Teams (Art. 6 para. 1 letter b EU-GDPR)

We use the video conferencing tool Microsoft Teams to communicate with our customers, business partners or exhibitors. We use this tool to conduct video conferences, telephone conferences or online meetings. Microsoft Teams is a service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA).
Microsoft Teams can be used either via your web browser or, alternatively, via the MicrosoftTeams app installed on your end device.