Thank you for your interest in our online content. Protecting your privacy while processing personal information and the security of all business data is important to us, and it is a priority in our business processes. Here you can find out all you need to know about how we handle your data on our web pages and in our mobile applications.
HINTE Messe- und Ausstellungs-GmbH
Tel.: +49 (0)151 67110380
Fax: +49 (0)721 93133-110
Dr. Ralf W. Schadowski
Tel.: +49 (0)241 / 44688 25
(1) Article 6, para. 1 (a) of the EU General Data Protection Regulation (GDPR) shall constitute the legal grounds if we obtain consent from the data subject for processing procedures relating to personal data.
(2) Article 6, para. 1 (b) of the GDPR shall constitute the legal grounds for personal data processing that is necessary for the performance of a contract to which the data subject is party. This shall also apply to processing procedures that are necessary to adopt pre-contractual measures.
(3) Article 6, para. 1 (c) of the GDPR shall constitute the legal grounds where processing personal data is necessary to comply with a legal obligation to which our company is subject.
(4) Article 6, para. 1 (d) of the GDPR shall constitute the legal grounds where vital interests of the data subject or of another natural person make processing personal data necessary.
(5) Article 6, para. 1 (f) of the GDPR shall constitute the legal grounds for the processing if the processing is necessary for the purpose of a legitimate interest pursued by our company or by a third party and such interest is not overridden by the interests or fundamental rights and freedoms of the data subject.
(1) The data subject’s personal data is deleted or blocked as soon as the purpose for storing it is no longer relevant.
(2) Data may continue to be stored if this is stipulated by European or national legislators in EU regulations, statutes or other provisions that the Controller is obliged to adhere to.
(3) The data is also blocked or deleted if a storage period stipulated by the above-listed EU regulations, statutes or other provisions that the Controller is obliged to adhere to expires, unless there is a necessity to continue storing the data for the purposes of concluding or performing a contract.
(1) In this section, we provide information about how and what personal data is collected when you use our website. Personal data refers to all information that allows you to be personally identified, e.g. name, address, e-mail addresses, user behaviour.
(2) If you contact us by e-mail or via a contact form, we will store the data you submit (your e-mail address, where applicable your name and telephone number) in order to answer your questions. We will delete the data that accrues in this context once storing it is no longer necessary or restrict the processing if there is a statutory obligation to retain the data.
(3) If we call on appointed service providers for individual functions of our offering or would like to use your data for advertising purposes, we will provide you with detailed information about the respective procedures below. We will also outline the stipulated criteria for the duration of storage.
Collecting personal data during visits to our website
If you use our website merely for information, i.e. if you do not register for an account or otherwise transfer information to us, we will only collect the personal data that your browser transfers to our server. If you would like to look at our website, we collect the following types of data, which are technically necessary to show you our website and ensure stability and security (Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for this):
• IP address
• Host name
• Date and time of request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of request (specific page)
• Access status / HTTP status code
• Volume of data transmitted each time
• Website requesting access (referrer)
• Which specific pages on our website you access
• Browser – type, version and language settings
• Operating system – type and version
(1) In addition to the aforementioned data, cookies are stored on your computer whenever you use our website. Cookies are small text files stored on your hard drive and assigned to the browser you are using; these files channel certain information to the site that places the cookie. Cookies are not able to run any programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.
(2) This website uses the following types of cookies, the scope and functions of which are explained below:
• Transient cookies (see b)
• Persistent cookies (see c)
b) Transient cookies are automatically deleted when you close your browser. Examples most notably include session cookies, which save a session ID that enables different requests from your browser to be assigned to the same session. This enables your computer to be recognized if you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a set period, which can vary depending on the cookie. You can delete these cookies via your browser’s security settings at any time.
d) You can configure your browser settings however you wish and, among other things, block third-party cookies or all cookies. Third-party cookies are placed by a third party and therefore not by the actual website you are on at the time. We would like to point out that blocking cookies may mean you cannot use all the functions of this website.
(1) In this section, we provide information about how and what personal data is collected when you use our app. Personal data refers to all information that allows you to be personally identified, e.g. name, address, e-mail addresses, user behaviour.
(2) If we call on appointed service providers for individual functions of our offering or would like to use your data for advertising purposes, we will provide you with detailed information about the respective procedures below. We will also outline the stipulated criteria for the duration of storage.
Collecting personal data when you use our app
If you use our app merely for information, i.e. if you do not register for an account or otherwise transfer information to us, we only collect the personal data that your device transfers to our server. If you would like to look at our website, we collect the following types of data, which are technically necessary to ensure our app works properly for you (Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for this):
• IP address
• Internal device ID
• Date and time of request
• Time zone difference to Greenwich Mean Time (GMT)
• Which page you visit
• Operating system – type and version
• Search terms entered
(Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for this)
Creating a user account
In our app, you have the option of registering for a user account and/or logging in. Some information is mandatory in order to register – all other data is optional. The mandatory information is used to authenticate you when you log in. Optional information can be displayed in the app and, if you wish, also made accessible to other app users.
(Article 6, para. 1, sentence 1 (b) of the GDPR constitutes the legal grounds for this)
Google Analytics SDK
To be able to analyse how our app is used, we use Google Analytics SDK from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. We use an additional function offered by Google that ensures all users’ IP addresses are anonymised, thereby ruling out the possibility of individuals being identified. You can object to your user behaviour being analysed via Google Analytics at any time.
You can find further information about how Google protects data at: https://policies.google.com/privacy?hl=en.
(1) Besides using our website for purely informational purposes, we offer various services that you can use if interested. To do so, you usually need to supply further personal data, which we use to provide the service in question and to which the aforementioned principles regarding data processing apply. Mandatory fields are labelled with an asterisk. Fields without this marking are entirely optional.
(2) Personal data is collected whenever you contact the service provider by e-mail or via the contact form. You can see which data is collected when you use a contact form by looking at the form itself. Alternatively, you can make contact by sending an e-mail to the address provided. In this case, the personal user data transferred in the e-mail is stored to process your request.
(3) In some instances, we employ external service providers to process your data. We select and instruct these providers with care; they are subject to our directives and monitored on a regular basis.
(4) If our service providers or partners are based in a state outside of the European Economic Area (EEA), we will inform you about the consequences of this fact in the offering description.
We have outlined for you below the data subject rights you possess as per Article 15 of the GDPR. You may avail yourself of these rights at any time, and contact us directly to do so. If you do contact us to claim these rights, we will inspect them in detail, taking into account the relevant statutory requirements and conditions. We may ask you to provide further information for this purpose. We will provide you with a detailed explanation of the results of our inspection and how we will proceed to carry out your request. It is possible that we may not be able to fully meet your wishes in the way you would like.
This should not discourage you from contacting us to claim your rights or inquire about them. We are very happy to answer any queries you send.
(1) Right of access
You are entitled to request information from us about whether we process data concerning yourself and, if so, which data. This also covers information pertaining to the purposes of the processing, any recipients to whom we have disclosed your data, the envisaged duration of storage, and any information about the origin of this data if we have not collected it from you directly. In addition to this, you are entitled to one free copy of the personal data relating to you that we store. We shall retain the right to charge a reasonable administrative free for producing any further copies.
(2) Right to rectification
You are entitled to request that we rectify inaccurate personal data that we have stored about you. This also includes the right for incomplete personal data to be completed.
(3) Right to erasure
You are entitled to request that we erase personal data that we have stored about you. In the context of the “right to be forgotten” as per Article 17, para. 2 of the GDPR, if we have made your data public, we are likewise obligated, taking into account available technology and the costs of implementation, to forward your request to erase all links to such data as well as copies and/or replications of such data to other controllers responsible for processing such public personal data.
(4) Right to restriction of processing
You are entitled to request that we restrict the processing of personal data that we have stored about you. Thereafter, processing such data is only possible with your consent or for limited purposes defined by statute.
(5) Right to object to the processing
Provided we have based the processing of your personal data on a balance of interests, you are entitled to file an objection to the processing. This is particularly the case if the processing is not necessary to perform a contract with you, which we will always illustrate in the subsequent description of the functions. Should you exercise this right to object, please state the reasons why we should not process your personal data in the way we have been doing so. If your objection is valid, we will review the situation and either terminate/adjust the data processing or demonstrate to you the compelling legitimate reasons why we will continue with the processing.
You can of course object to your personal data being processed for advertising and data analysis purposes at any time. You can contact us for information about your objection to advertising by using the contact details given above.
(6) Right to withdraw consent as per data protection law
If you have consented to your data being processed, you can withdraw your consent at any time. Informing us of your withdrawal of such consent will affect the admissibility of the processing of your personal data.
(7) Right to data portability
You are entitled to receive your personal data that you provided to us from us in a structured, commonly used and machine-readable format for the purpose of transmitting such data to another controller. This also includes, upon your request and taking into account the technical possibilities available, the direct transmission from us to the other controller.
(8) Right to lodge a complaint with a supervisory authority
You are entitled to lodge a complaint at any time about how we process your personal data to the data protection supervisory authority responsible for us:
The State Representative for Data Protection and Freedom of Information in Baden-Wuerttemberg
(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (BfDI))
Königstrasse 10a, 70173 Stuttgart, Germany
Tel.: +49 (0) 7 11/61 55 41-0
Fax: +49 (0) 7 11/61 55 41-15
Website (in German): https://www.baden-wuerttemberg.datenschutz.de
(9) Automated decision-making, including profiling
You are entitled to receive information about the existence of automated decision-making, including profiling, as per Article 22, paras. 1 and 4 of the GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
People under the age of 16 may not submit any personal data to us without the permission of their legal guardians. In pursuance of Article 8 of the GDPR, children under 16 years of age may only grant such consent with the permission of their legal guardians. Personal data of minors shall not be knowingly collected or processed.
1. Inxmail newsletter
(1) For the dispatch of our newsletter, we use the “Inxmail” service offered by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany. Data saved during registration is transferred to Inxmail GmbH and stored by Inxmail GmbH. Data entered during registration is not transferred to any other third parties.
(2) The only piece of mandatory information for sending the newsletter is your e-mail address. Any other, separately marked information is optional and used in order to contact you personally.
(3) For the subscription to our newsletter, we follow the double opt-in process. This means that once you have subscribed, Inxmail will send you an e-mail to the e-mail address provided, in which we will ask you to confirm that you would like us to send you the newsletter. Inxmail will store your IP address, the date and time you clicked on the confirmation link, and the recipient’s e-mail address in a log file as proof of valid consent.
(4) We would like to point out that Inxmail uses “newsletter tracking” in its newsletters. This involves recording recipients’ reactions (opening a mailshot, clicking text/image links, downloading images with an e-mail program) and storing them in an anonymised format for statistical purposes. It is not possible to use the stored data to identify individual users.
Provided you have previously given your express consent, the aforementioned recipient reactions are recorded and stored as information specific to you as an individual. This enables Inxmail to align the newsletter content more effectively to the user’s personal interests.
(5) You can withdraw your consent to the newsletter being sent and cancel your subscription at any time. You can announce your withdrawal by clicking the unsubscribe link provided in every newsletter e-mail. This will equally negate any existing consent to the recording of data regarding personal user behaviour in the newsletter.
The legal grounds for the use of all web analysis tools listed in this section are formed by Article 6, para. 1, sentence 1 (f) of the GDPR, i.e. pursuing our legitimate interests while giving consideration to the interests of our website visitors. Our interest in this context is represented by analysing how our website visitors use our website in order to improve our offering based on the statistics gained from this and make it more interesting for you as a user. If the analysis tool used serves any other additional purposes or if we use it for other interests, we will inform you of this directly in the explanations of the respective analysis tool.
1. Use of Google Analytics
(2) The IP address transferred by your browser through Google Analytics will not be combined with any other Google data.
(3) You can set your browser software to prevent cookies from being stored but we would advise you that, if you do so, you may not have full access to all the functions of this website. Furthermore, you can prohibit Google from recording and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout. With regard to mobile devices, you can permanently prevent Google Analytics from recording your data by setting an opt-out cookie. Deactivate Google Analytics.
(4) This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are processed in a shortened form, ruling out direct associations to individuals. If the data collected about you gains a personal reference, such reference will be eliminated immediately and the personal data therefore promptly deleted.
(5) For the exceptional cases in which personal data is transmitted to the United States, Google has agreed to uphold the EU-US Privacy Shield,
(6) Information about the third-party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
Terms of service: https://marketingplatform.google.com/about/analytics/terms/gb/
Data protection overview: https://marketingplatform.google.com/about
2. Use of Matomo (formerly Piwik)
(1) This website uses the web analysis service Matomo. Matomo stores cookies (more information in § 5) on your computer. The Controller will store the information collected in this way solely on its server in Germany. You can stop the analysis by deleting existing cookies and preventing cookies from being stored. We would like to point out that you may not be able to use this website to the full extent if you prevent cookies from being stored. You can prevent the storage of cookies by adjusting your browser settings. Preventing the use of Piwik is possible by unticking the following box: Please note that if you decide to delete your cookies, you will need to follow the opt-out procedure again.
[Matomo iFrame hier einfügen].
(2) This website uses Matomo with the “_anonymizeIp()” extension. As a result, IP addresses are processed in a shortened form, ruling out direct associations to individuals. The IP address transferred by your browser via Matomo is not combined with any other data collected by us.
(3) The Matomo program is an open source project. You can find information from this third-party supplier regarding data protection at: http://matomo.org/privacy/policy.
1. Einsatz von Social-Media-Plug-ins
(1) We currently use the following social media plug-ins: Facebook, Google+, Google Bookmarks, Twitter, Xing. You can see who the plug-in provider is from the label on the box by looking at its initial letter or the logo. You can use the button to get in touch with the plug-in provider directly. The plug-in provider will only receive information that you have accessed the relevant website of our online offering if you click and thereby activate the selected field. The data set out in § 5 of this data protection declaration will also be transferred. With regard to Facebook and Xing, the respective providers within Germany state that the IP address is anonymised immediately after it is collected. By activating the plug-in, your personal data is therefore transferred to the respective plug-in provider and stored there (in the case of U.S. providers, it is stored in the United States). Given that the plug-in provider collects data, notably by using cookies, we recommend that you delete all cookies by adjusting your browser privacy settings before you click on the greyed-out box.
(2) We have no influence over the collected data and the data processing procedures; in addition, we do not know the full extent of the data collection, the purposes of the processing, or the storage periods. We also do not possess information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data they collect about you as usage profiles, which they use for the purposes of advertising, market research and/or customising their website to specific needs. In particular, the data is used in this way (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activity on our website. You have a right to object to these user profiles being created; to exercise this right, you must get in touch with the respective plug-in provider. The plug-ins allow us to pursue our interest in offering you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting and appealing for you as a user. Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for using such plug-ins.
(4) The data is transferred irrespective of whether you have an account with the plug-in provider or whether you are logged into such an account. If you are logged into your account with the plug-in provider, the data we have collected about you will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the site, the plug-in provider will store this information in your user account, too, and publicly share it with your contacts. We recommend that you regularly log out after using social networks, but particularly before activating the button so that you can prevent your data from being assigned to your account with the plug-in provider.
(5) You can find further information regarding the purpose and scope of the data collected and its processing performed by the plug-in provider in their privacy policies listed below. These policies also contain further information about the relevant rights and settings for protecting your privacy.
(6) Addresses of the respective plug-in providers and URLs with their data protection notices:
a) Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; http://www.facebook.com/policy.php; further information about data collection: Facebook has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/technologies/partner-sites?hl=en. Google has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND; https://twitter.com/privacy. Twitter has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
d) Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany; http://www.xing.com/privacy.
2. Integration of YouTube videos
(1) We have integrated YouTube videos into our online offering that are stored on http://www.YouTube.com and can be played directly on our website. They are all integrated in the “privacy-enhanced mode”, i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only if you start to play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transmission. By integrating YouTube videos, we are pursuing our interest in making our website more interesting and appealing for our visitors and improving how we display content and/or information. Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for using this plug-in.
(2) If you visit the website, YouTube receives information that you have accessed the relevant subpage on our website. The data set out in § 5 of this data protection declaration will also be transferred. This occurs irrespective of whether YouTube provides a user account that you are logged into or whether there is no user account. If you are logged into Google, your data is directly assigned to your account. You need to log out before activating the button if you do not want your data to be assigned to your YouTube profile. YouTube stores your data as usage profiles, which it uses for the purposes of advertising, market research and/or customising its website to specific needs. In particular, the data is used in this way (even for users who are not logged in) to place targeted advertising and to inform other users of the social network about your activity on our website. You have a right to object to these user profiles being created; you must get in touch with YouTube to exercise this right.
3. Integration of Google Maps
(1) We make use of Google Maps on this website. In doing so, we are pursuing our interest in boosting our website’s appeal by showing you interactive maps directly on our website and enabling you to use the maps function with ease. Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for using this plug-in.
(2) If you visit the website, Google receives information that you have accessed the relevant subpage on our website. The data set out in § 5 of this data protection declaration will also be transferred. This occurs irrespective of whether Google provides a user account that you are logged into or whether there is no user account. If you are logged into Google, your data is directly assigned to your account. You need to log out before activating the button if you do not want your data to be assigned to your Google profile. Google stores your data as usage profiles, which it uses for the purposes of advertising, market research and/or customising its website to specific needs. In particular, the data is used in this way (even for users who are not logged in) to place targeted advertising and to inform other users of the social network about your activity on our website. You have a right to object to these user profiles being created; you must get in touch with Google to exercise this right.
(3) You can find further information regarding the purpose and scope of the data collected and its processing performed by the plug-in provider in the provider’s privacy policies. These policies also contain further information about the relevant rights and settings for protecting your privacy: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=en. Google also processes your personal data in the United States and has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
4. Integration of Google web fonts
(1) To depict fonts consistently, this site uses web fonts provided by Google Ireland Ltd. “Google”, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser loads the necessary web fonts in your browser cache to correctly display text and fonts.
(2) For this purpose, the browser you use needs to connect to Google’s servers. This lets Google know that our website was accessed via your IP address. We use Google web fonts in the interest of ensuring our online offerings are displayed in a consistent and appealing manner. This represents a legitimate interest within the meaning of Article 6, para. 1 (f) of the GDPR. If your browser does not support web fonts, a standard font on your computer will be used.
5. Facebook fan page
(1) Using our Facebook fan page requires personal data to be collected. Some is collected despite the user not being logged in. In particular, metadata is received from Facebook (how frequently, for how long and where was the “Like” button clicked, when are users online, which posts reach fans, which fans interacted with posts and in what way, information about the device used, data about the person (gender, age, place of residence, language and other demographic data)). This personal data is used for statistical purposes. Article 6, para. 1 (f) of the GDPR constitutes the legal grounds for this use.
(2) As a user, you can exercise your rights as per Articles 12 to 23 of the GDPR. Detailed explanations can be found in § 5 (Data subject rights).
(3) Further information about Facebook’s data policy is available at https://www.facebook.com/about/privacy/, with information about insight data available at https://www.facebook.com/legal/terms/information_about_page_insights_data
(4) In pursuance of Article 26 of the GDPR, a joint responsibility exists between us and Facebook. This responsibility has been laid down in a contract, which can be found at https://www.facebook.com/legal/terms/page_controller_addendum.
As at: 3 June 2019
Copyright © 2019 — HINTE Messe- und Ausstellungs-GmbH Alle Rechte vorbehalten.