Data Protection Declaration

General information on data protection

Landesmesse Stuttgart GmbH & Co. KG (hereinafter referred to as “Messe Stuttgart”) extends a warm welcome to you and is delighted with your interest in our digital offers and events.

The following information sets out how we process your personal data in the course of using our web pages and digital services.

We process your personal data in accordance with the statutory provisions of the Federal Republic of Germany and the European General Data Protection Regulation (hereinafter referred to as “GDPR”).

1. Controller and data protection officer

1.1. Controller

The controller responsible for the data processing set out here is
Landesmesse Stuttgart GmbH & Co. KG
Messepiazza 1
70629 Stuttgart, Germany
Tel.: +49 (0)711 18560-0
info(at)messe-stuttgart.de

1.2. Data protection officer

Landesmesse Stuttgart GmbH & Co. KG
Datenschutzbeauftragter
Messepiazza 1
70629 Stuttgart, Germany
Tel.: +49 (0)711 18560-0
E-mail: datenschutz(at)messe-stuttgart.de

2. Personal data and the processing thereof

Personal data in the context of the GDPR refers to all information relating to an identified or identifiable natural person. This includes, for example, your first and/or last name including title, your e-mail address, your physical address or your phone number.

In addition, it also includes data relating to your use of our web pages and mobile applications (referred to as “access data”). This includes, for example, your IP address, the time of access, the pages you visited, how long you remained on each page, the link URL, information about your browser and operating system and about any error messages.

We also process other personal data that you share with us voluntarily – for example in the context of maintaining your profile – or that we have to collect because it is required for a specific purpose. This is the case, for example, in the context of ticket purchases, registration processes, surveys, competitions, contact requests, newsletter subscriptions or online orders.

This list of examples is not exhaustive. We only process your personal data to the extent required and only for purposes you have agreed to or which are legally permitted.

2.1. Change of purpose

Processing of your personal data for purposes other than those described is only done insofar as this is permitted by a statutory provision or you have agreed to the changed purpose of data processing. In the event that your data is processed further for purposes other than those for which the data was originally collected, we will notify you of these other purposes ahead of any further processing and will provide all relevant information.

2.2. Automated individual decision-making or profiling measures

We do not use automated processing for decision-making – including profiling – in the context of our digital services and web pages.

2.3. Storage period

We only store your personal data for as long as this is necessary for the respective purposes. Your data is only stored for longer if there are statutory retention requirements or limitation periods or if continued storage is otherwise legally permitted or required.

Data for processing contracts: If we received your data for processing a contract where you purchased a ticket or acted as the contact for an exhibitor/business partner or if we received your data because you participated in an event, a prize draw or a competition, we will store your data until all mutual claims have been completely fulfilled. We will then delete your data, unless there are statutory retention requirements or limitation periods or if continued storage is otherwise legally permitted or required.

User accounts: If you have a user account, we will store your associated data for as long as the account exists. Once your account is deleted, the associated data is also deleted unless legal requirements necessitate a longer storage period.

Data on the basis of consent: If you have consented to our processing of your data (e.g. for the purpose of receiving product or press information), we will store your data until you withdraw your consent unless further storage is legally permitted or required.

Statutory retention requirements: Retention requirements are set out by laws, including but not limited to the German Commercial Code (HGB) and the Fiscal Code of Germany (AO). Insofar as such requirements apply, we will store your data for the legally required periods – generally 10 years beyond the end of the relevant calendar year.

Statutory limitation periods: Limitation periods are set out by laws, including but not limited to the German Civil Code (BGB). Insofar as such limitation periods apply, we will store your data for the legally defined periods – generally 3 years beyond the end of the relevant calendar year.

Business relationships and collaborations: If we are using your data in the context of a business relationship or collaboration, we will store it for as long as it is necessary for working together or for longer, if required by law.

The data will be deleted once the relevant storage period elapses or – if it cannot be deleted for technical or legal reasons – blocked and excluded from any further processing.

3. Purposes of data usage and legal bases in the context of using our web pages and online portals

3.1. Using our web pages and online portals

For statistical purposes, your usage data will be temporarily stored as log data in an anonymised format. This is for the purpose of ensuring and improving the functionality and quality of our digital offerings.

We store the following data:

  • Information about the page from which a file was requested
  • Name of the file being requested
  • Date and time of the request
  • Volume of data transferred
  • Access status (file transferred, file not found)
  • Information about the browser used
  • Shortened IP address of the requesting computer (shortening the IP address prevents a reference to individuals)

The legal basis in this context is Article 6(1f) GDPR. Our legitimate interest ensues from the aforementioned purposes.

4. Purposes of data usage and legal bases in the context of visiting trade fairs

4.1. Booking and issuing tickets

In addition to the required data collection described below, we will optionally process your data for additional functions. For details about these functions, refer to the relevant conditions in each case if no information is provided in this Privacy Policy.

4.1.1. Basic information for ticket purchases

When you purchase a ticket in our ticket shop, we record your title, your name, your e-mail address and your postcode. If you enter “Work/business” as the address type, we also record your company and optional additional information (e.g. department).

We collect this data for the following purposes:

  • Issuing your event ticket
  • Preparing the delivery note and invoice
  • In the case of trade fairs, providing your data as a service for you to participate in lead management
  • Customer services associated with the purposes listed above

The legal basis for this processing is the fulfilment of the contract agreed with you as per Article 6(1b) GDPR for the purchase of a ticket.

We also use the aforementioned data for the purpose of statistical analysis of the visitor structure, e.g. for planning future trade fairs and for refining our trade fairs.

The legal basis for this is our legitimate interest in providing relevant and appropriate trade fairs to the public (Article 6(1f) GDPR).

4.1.2. Additional mandatory information in the context of tickets for trade fairs

For our trade fairs, we also collect details about your company, your occupational status and sector as mandatory details within the framework of the so-called full registration. This serves the purpose of verifying that you are an industry visitor.

The legal basis for full registration is our legitimate interest (Article 6(1f) GDPR) in ensuring our trade fairs are sufficiently subject-related.

4.1.3. Optional details during the ticketing process

As part of the ticketing process, you may have the option to provide information that is not required to purchase a ticket. This includes, for example, information about your interests, your age or other aspects of the relevant trade fairs. We use this information to gain insights into the visitor structure of our trade fairs and to refine our trade fair concepts. We also use this data to be able to send you marketing initiatives targeted to your interest and requirements. The data is processed on the basis of Article 6(1f) GDPR for e-mail marketing in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG; soft opt-in in the case of existing customers). Our legitimate interest lies in the marketing of our events. See also Section 6 of this Privacy Policy.

In addition, you can also provide your phone number; we will only use this to pass it onto the exhibitor who may have invited you or who you allowed to record/scan this information in the context of lead management.

The legal basis for the processing of your data in the context of lead management is Article 6(1a) GDPR.

4.1.4. Transfer of data to inviting companies

If you purchase your ticket using a trade fair ticket code provided to you by a company or organisation to enable you to purchase a ticket for free or at a discounted rate, we will transfer the aforementioned data from the ticketing process to this company or organisation. This is done for the purpose of invoicing your ticket between the exhibitor and Messe Stuttgart, of verifying the applied vouchers and of enabling exhibitors to get in touch with their visitors. The receiving exhibitor is solely responsible for the further processing of your data.

The legal basis for this data transfer is Article 6(1f) GDPR. The legitimate interest ensues from the aforementioned purposes.

4.1.5. Use of data for direct marketing purposes

We also process and use your data from the ticketing process for the purpose of marketing by post or e-mail to notify you of similar events of Messe Stuttgart and related topics.

The data is processed on the basis of Article 6(1f) GDPR for e-mail marketing in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG; soft opt-in in the case of existing customers). Our legitimate interest lies in the marketing of our events. See also Section 6 of this Privacy Policy.

4.1.6. Use of the public transport option when purchasing a ticket

Some tickets come with a free public transport option. This means your ticket is valid for travel to and from the trade fair. If you use this option, we also collect information about your preferred travel date for the ticket. We will transfer this date and your personal data to the Stuttgart Transport and Tariff Association (VVS) via an interface to have a travel ticket issued for you. For sites outside Stuttgart, the data is transferred to the local public transport organisation.

The legal basis for this processing is the fulfilment of the contract agreed with you as per Article 6(1b) GDPR for the purchase of a ticket.

4.2. Use of the “MyFair” Messe Stuttgart user account

You have the option to create a Messe Stuttgart user account in the online shop and at other points (website, where applicable the app).

The legal basis for the data processing described below in the context of the user account are the Terms of Use agreed with you as per Article 6(1b) GDPR.

4.2.1. Creating a user account

To create the user account, you need to provide at least your name, your address type (home or work), your address and your e-mail address.

You have a number of options for creating an account:

  • Using your personal e-mail address and a password you set yourself: After entering your e-mail address, you will receive an e-mail asking you to confirm the registration. You will then be able to set your own password. You will need to provide personal data such as your first name, last name and address, as these details are mandatory.
  • Using your Google account:
    You can link your Google account with your Messe Stuttgart user account. With this option, your name, your e-mail address, your language settings and (where available) your profile image are transmitted after you select your Google account. Messe Stuttgart does not process any image data provided by Google in connection with your MyFair user account. You will then be able to edit your pre-filled personal data such as your first name and last name and enter your address.
  • Using your LinkedIn account:
    You can link your LinkedIn account with your Messe Stuttgart user account. You will undergo LinkedIn’s verification process. Once you have given your consent, your name, your e-mail address and (where available) your profile photo are transmitted to Messe Stuttgart. You will then be able to edit your pre-filled personal data such as your first name and last name and enter your address. Messe Stuttgart does not process any image data provided by LinkedIn in connection with your MyFair user account.
  • Using your Apple account:
    You can link your Apple ID with your Messe Stuttgart user account. You will undergo Apple’s verification process. Once you have given your consent, your name, your e-mail address and (where available) your profile photo are transmitted to Messe Stuttgart. You will then be able to edit your pre-filled personal data such as your first name and last name and enter your address. Messe Stuttgart does not process any image data provided by Apple in connection with your MyFair user account.

4.2.2. Functions of the user account

The user account serves to provide various convenience functions:

  • You do not have to re-enter your data every time you purchase tickets
  • You can access purchased tickets again
  • You have the option to permanently save favourites in the Exhibitor Index and Event Calendar search

You need to accept the Terms of Use to use the user account.

4.3. Payment systems

We offer our customers different payment options to process orders. To do so, we direct customers to the platform of the relevant payment provider depending on the payment method.

The legal basis for the data processing described below in the context of payment systems is Article 6(1b) GDPR, as processing of data is required to execute the purchase contract.

We use the following payment providers:

4.3.1. Payments with Mollie

In order to offer a wide variety of online payment methods and manage payments, we use the following payment provider:

Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Netherlands (hereinafter referred to as “Mollie”).

Mollie complies with the Payment Card Industry (PCI) Data Security Standards and has been certified by an independent PCI Qualified Security Assessor.

The payment method offered by Mollie for an event may vary; options include, for example, credit card, Apple Pay, Google Pay, Pay by Bank. Detailed information about this will be displayed in the purchase options for the event.

Mollie processes your personal data on its own responsibility if you use Mollie’s services and/or if you provide Mollie with personal data yourself. The data regularly transferred to Mollie includes:

  • Payment data, such as bank details or credit card numbers
  • IP address
  • Internet browser and device type
  • First name and last name
  • Address data
  • E-mail address and/or phone number
  • Information about the product or service you have purchased
  • Other personal data you actively provide.

You can find more information about processing activities performing by Mollie at: www.mollie.com/gb/legal/privacy

4.3.2. Payments with PayPal

You have the option to process your payment via the payment provider PayPal.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter referred to as “PayPal”).

If you select PayPal as your payment method, the data necessary for the payment process is automatically transferred to PayPal. This includes but is not limited to the following data:

  • Information about your registration and contact details
  • Identification and signature data
  • Payment information
  • Information about legal regulations
  • Information you provide when you contact us
  • Transaction data
  • Tracking of packages
  • Service-specific personal data
  • Information from credit agencies and financial institutions
  • Information from your linked financial accounts
  • Data from the use of the services
  • Technical usage data
  • Device data
  • Location data

The data transferred to PayPal may be transmitted to credit agencies by PayPal. This transmission serves the purpose of an identity and credit assessment.

As a payment provider, PayPal is the processor of your data in the context of the GDPR on its own responsibility. You can find further information about PayPal’s processing activities in the PayPal Privacy Policy.

4.4. Lead management function

The lead management function is a service offered by Messe Stuttgart. With this function, you can allow your choice of exhibitors to scan your ticket during your visit. At certain events, you can also create an event badge on site at specially provided printing stations. In the context of lead management, this badge has the same function as your digital ticket.

Exhibitors will receive access to your contact details (title, first name, last name, company, address details, e-mail address and, where applicable, information about your sector and your phone number), similar to a business card. Any further processing is performed by the relevant exhibitor on their own responsibility and is outside the area of responsibility of Messe Stuttgart.

The creation and provision of your personalised, scannable ticket (or badge) by Messe Stuttgart is done on the basis of our legitimate interest pursuant to Article 6(1f) GDPR to provide you with the lead management service. By allowing an exhibitor to actually scan your ticket or badge, you consent to the transfer of the data stored during your registration to this exhibitor (Article 6(1a) GDPR).

Please note: If an exhibitor does not fall within the scope of validity of the GDPR and there is no adequacy decision from the EU Commission or suitable guarantees in accordance with Article 46 GDPR, it is not possible to guarantee a data protection level comparable to that in the EU. In this case, the transfer is based on your consent in accordance with Article 49(1a) GDPR. There is a risk that your data will be processed beyond the scope of the original purpose or that it will be viewed by third parties. It may not be possible to enforce your rights as a data subject.

Note on handling tickets and badges: To prevent misuse, you should dispose of your ticket or badge after the event in such a way that a third party cannot use it to feign your consent to a scan – for example by destroying the QR code.

You can withdraw your consent with effect for the future at any time by e-mailing datenschutz@messe-stuttgart.de. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Purposes of data usage and legal bases in the context of participating as an exhibiting company

5.1. General information for exhibitors

Please note that data may be transferred to third countries due to our management software. However, your personal data will be processed according to instructions as part of a data protection agreement in pursuant to GDPR and the statutory guarantees in accordance with Article 44 et seq. GDPR.

5.2. Exhibitor registration (self-registration, principal exhibitor where applicable)

Employees of a company seeking to participate in a Messe Stuttgart event as an exhibitor will initially create a personal exhibitor account. A company account will be created at the same time, to which the employee’s personal account and, where applicable, accounts of other employees of the same exhibitor, who will work for the company during a trade fair, can be assigned.

The data collected during account creation is processed on the basis of Article 6(1f) GDPR. Our legitimate interest lies in the creation and management of a user-friendly customer area for organising participation in trade fairs.

If you then register for a specific event and become a contractual partner yourself, we will process your data on the basis of Article 6(1b) GDPR, insofar as this is necessary to process and hold the event. If you are an employee of a company which becomes a contractual partner, we will process your data on the basis of Article 6(1f) GDPR. Our legitimate interest lies in the organisation of the event.

We will also use your contact details for the direct marketing of our own, related products or services via e-mail as long as the conditions of Section 7(3) of the German Act Against Unfair Competition are met. This data processing is based on our legitimate interest in direct marketing in accordance with Article 6(1f) GDPR. You can object to the use of your data for marketing purposes at any time.

If you are a registered employee and you provide us with the personal data of other employees of your company or of contracted service providers, we will assume that you are doing this with the consent of the relevant data subjects. The same applies if you nominate other people as contact persons after registration. The legal basis for our processing in this context is Article 6(1f) GDPR.

5.3. Registration of co-exhibitors and represented companies

The principal exhibitor appoints their co-exhibitors or represented companies as part of their own registration or at a later point. In doing so, the principal exhibitor may transmit personal data of the co-exhibitor or the co-exhibitor’s employees, such as name, company name, address, phone number and e-mail address, for further processing in the context of organising the trade fair.

We will assume that the employee acting on behalf of the principal exhibitor has agreed the data transfer with the data subjects beforehand. The legal basis for our processing is Article 6(1f) GDPR (legitimate interest), as the processing is necessary to process the registration and participate in the event.

5.4. Activities of the catalogue publishing house for registered exhibitors

For selected events, Messe Stuttgart employs the services of a catalogue publishing house (e.g. Neureuther Fair Media) to support the media presentation of registered exhibitors. Employees of Messe Stuttgart may also take on these tasks themselves.

After registering for an event, the contact person(s) of the exhibiting company will be contacted to provide them with information about media presentation options, to obtain additional information for a better presentation in the Exhibitor Index and, where applicable, to present chargeable upgrades in the context of the trade fair media offerings.

The legal basis for processing is Article 6(1f) GDPR. Our legitimate interest lies in supporting exhibitors.

If an external catalogue publishing house is involved, we will provide it with the necessary contact details. The catalogue publishing house acts in the context of a data protection agreement pursuant to Article 28 GDPR according to instructions.

5.5. Stuttgart Messe Service (SMS)

We have set up the www.messestuttgartmesseservice.de portal for you, which facilitates planning and organisation, to organise your trade fair appearance and the associated services and offers. As soon as your stand has received the “stand confirmation” status, you will receive login details for the portal. For future stand registrations, you will only receive an activation e-mail notifying you that you can place orders for another event.

If you order services offered by third parties on behalf and on account of Messe Stuttgart via the portal, we will transfer your data to the relevant service partner who will process your data in the context of a data protection agreement according to instructions.

The legal basis for creating your account on the SMS portal is Article 6(1f) GDPR, as we have a legitimate interest in offering you services in connection with your stand booking. If you order a service on the SMS portal, we will process your personal data on the legal basis of Article 6(1b) GDPR.

The technical contact person stored in the stand order can create user accounts for other people in the user management area of the SMS portal. We will assume that the data subject has given their consent and that you have informed them of the processing performed by Messe Stuttgart. The legal basis for this processing is Article 6(1f) GDPR. The legitimate interest lies in the provision of account management options.

If you use the SMS portal as an exhibitor of a guest organiser, this organiser will transfer your data to Messe Stuttgart in order to create a user account. Messe Stuttgart will then process your data on its own responsibility on the legal basis of Article 6(1f) GDPR. The legitimate interest lies in the provision of account management options.

The guest organiser will provide you with the access data for the portal or will ensure that you can log into the portal another way.

5.6. Ordering print media (brochures and catalogues)

You can order print media via our SMS portal. We will transfer your data to the relevant service partner who will process your data in the context of a data protection agreement according to instructions.

The legal basis in this context is Article 6(1b) GDPR if we have a service contract with you. Otherwise, processing takes place on the basis of Article 6(1f) GDPR. Our legitimate interest lies in sending you the ordered print media.

6. Purposes of data usage and legal bases in the context of using our newsletter and information services

6.1. Newsletters (expressly subscribed to or in the context of an existing customer relationship (Section 7(3) German Act Against Unfair Competition))

If you subscribe to our news service, we will process your personal data – including but not limited to your first name, last name and e-mail address – to send you newsletters with information about events organised by Messe Stuttgart and about companies and products from the sectors represented at these trade fairs. The subscription uses a double opt-in method. If you subscribe to the news service from an event website, your information will be linked to the topic of the relevant trade fair. You can withdraw your consent to receiving the newsletter at any time.

The legal basis for sending newsletters you have expressly subscribed to is Article 6(1a) GDPR. You can withdraw your consent with effect for the future at any time by e-mailing widerspruch@messe-stuttgart.de. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

We also reserve the right to send you information about related products and services via e-mail in the context of an existing customer relationship (e.g. due to purchasing a ticket, booking a trade fair stand or making use of paid services in the context of Stuttgart Messe Services) without your specific consent. You can object to receiving such information via e-mail at any time.

The legal basis for this is Article 6(1f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG).

We use a specialised service provider to send our newsletter. This service provider will process your data on our behalf on the basis of a data processing agreement pursuant to Article 28 GDPR. For more information about the service provider used e-mail datenschutz@messe-stuttgart.de.

6.2. Press release service

Media professionals have the option to subscribe to an e-mail service with press releases from Messe Stuttgart. We will collect your e-mail address, your name, as well as the medium for which you are employed as a journalist.

The legal basis in this context is Article 6(1a) GDPR. You can withdraw your consent with effect for the future at any time by e-mailing widerspruch@messe-stuttgart.de. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

6.3. Messe Stuttgart apps

As part of our digital offerings, we provide both a general Messe Stuttgart app as well as event-specific apps.

Refer to the Privacy Policy in the relevant app for information on the processing of personal data in the context of using our apps.

7. Purposes of data usage and legal bases in the context of social media and social sharing

7.1. Using our social media channels

We maintain social media accounts (e.g. on Facebook, Instagram, LinkedIn, YouTube, TikTok, X, Pinterest, Snapchat, XING) to provide information about our events, products and services and to communicate with our users.

When using these platforms, personal data – including but not limited to usage, interaction and profile data – is processed, including by the relevant platform provider. We only have limited influence over this data processing. The processing is performed by the platform provider on their own responsibility in accordance with the relevant data protection notice.

We receive statistical analyses (insights) from these providers, e.g. about reach, interactions, demographic markers (such as age, gender, language, location) or about the end devices our user use to access our content. We can generally only view this data in an aggregated or pseudonymised format. However, we cannot completely exclude the possibility that conclusions about individual users may be drawn.

If we receive personal data directly (e.g. via comments, direct messages or shared content), we will process this data to communicate with users and to process specific queries. Processing takes place on the basis of Article 6(1f) GDPR. Our legitimate interest lies in the targeted communication with interested parties and the presentation of our company to the public.

7.2. Joint controllers pursuant to Article 26 GDPR

If we act jointly with individual platform providers (e.g. Meta for Facebook/Instagram, LinkedIn), these actions are governed by corresponding agreements. These agreements pursuant to Article 26 GDPR determine our respective responsibilities. The responsibilities of the platform provider include but are not limited to processing within the platform and essential obligations regarding information and the rights of the data subject; we are responsible, among other aspects, for the content on our accounts and our communication. You can exercise your rights as the data subject against either controller.

You can find further information about the agreements pursuant to Article 26 GDPR here:

7.3. Data protection notices of the platforms we use

Any further information required can be found in data protection notice of the relevant provider:

Information about transparency and data transfer:

We have no information about and no influence over the following: to what extent, in which location and for how long platform providers store your data, whether they comply with their erasure obligations, which analyses and links are made with the data and who the data is transferred to.

Please carefully check which personal data you reveal in the course of using social media platforms. If you want to find out about our company without using social media platforms, you can also access relevant content on our website: www.messe-stuttgart.de/en/.

7.4. Use of paid social media advertising

As part of our online communications, we use paid advertisements on social media platforms (e.g. Facebook, Instagram, LinkedIn) to call attention to our events and offers in a targeted manner.

The legal basis for this type of data processing is Article 6(1f) GDPR. Our legitimate interest lies in the effective presentation of our company to the public and the targeted communication with potential participants, exhibitors or interested parties.

We also use the described social media platforms for targeted advertising.

We use target group definitions provided to use by the social media operators for this. We only use anonymous target group definitions – meaning we define markers based on general demographic information, behaviour, interests and connections, for example. The operator of the social media platform then uses these to display corresponding advertisements to its users. The legal basis for this is the consent obtained by the operator of the social media platform from its users.

If you want to withdraw your consent to this, please use the withdrawal options provided by the operator of the social media platform as the operator of the social media platform is responsible for this type of processing.

We and/or the operator of the social media platform also use publicly available data to define target groups. The legal basis for this type of processing is Article 6(1f) GDPR. Our legitimate interest lies in defining the most suitable target groups. We never use special categories of personal data to define target groups; these categories are listed in Article 9 and 10 GDPR (e.g. political opinions, sexual orientation).

We also use information about visits of or the interaction with other websites (referred to as “remarketing”) to define target groups. Among other methods, we use cookies for this. In these cases, however, we will obtain users’ consent by means of a consent banner on the relevant other pages and will also provide information about data processing at this point. You can withdraw this consent at any time by accessing the consent banner on the relevant website again.

7.5. Data processing by operators of social media platforms

Operators of social media platforms employ online tracking methods. Online tracking can also take place regardless of whether you are registered with or logged into a social media platform.

Please be aware that there is no way to guarantee that operators of social media platforms will not use and analyse your profile and behaviour data for their own purposes. We have no influence on the processing of your data by operators of social media platforms. Please keep this in mind when using social media platforms.

Please refer to the Privacy Policy of the relevant operator for more information about data processing by operators of social media platforms, configuration options to protect your privacy and other objection options.

Storage period:

If we process personal data via our social media channels ourselves (e.g. due to direct communication via comments or messages), we will delete this data as soon as it is no longer required for the listed purposes and there are no legal obligations to store the data.

The storage period of data processed by the relevant platform provider is the sole responsibility of that provider. Any further information required can be found in data protection notice of the relevant provider.

7.6. Using social media buttons with the “Shariff” solution

Our web pages use social media buttons (e.g. for Facebook, LinkedIn, Instagram, YouTube) to facilitate sharing of content. We use the privacy-friendly “Shariff” solution, which only connects to the server of a social network when you actively click on a button. This means: No personal data will be transferred to social networks when you simply load a web page. A direct connection with the relevant service is only created when you click on a button.

7.7. Overview of Messe Stuttgart’s social media channels

Messe Stuttgart operates the following social media pages for the overall company:

We also operate additional social media channels for our individual trade fair and event brands. You can find links to these channels on the relevant websites of the individual events.

8. Data transfer to third parties and companies outside the EU/EEA

8.1. Data transfer to third parties

We transfer your data to service providers or affiliated companies that support us in operating our digital offerings and associated processes. Your personal data will be processed in the context of a data protection agreement pursuant to Article 28 GDPR according to instructions.

This includes service providers for the following areas:

  • Hosting
  • Web analysis
  • Sending e-mails and newsletters
  • Web development
  • Cloud services
  • Information security

8.2. Data transfer to companies outside the EU/EEA

Personal data is only transferred to so-called third countries, that is countries outside the European Union (EU) or the European Economic Area (EEA), if this transfer is legally permitted and the special conditions set out in Article 44 et seq. GDPR are met.

8.3. Transfer to subsidiaries and business partners

In some cases, we will transfer personal data to companies outside the EU/EEA, including but not limited to our subsidiaries or sales partners, if you or your company are located there.

8.4. Ensuring an appropriate level of data protection

If we transfer data to a third country, we take care to ensure an appropriate level of data protection. Our methods to ensure this include but are not limited to the following:

  • Adequacy decisions of the EU Commission pursuant to Article 45(1) GDPR, if such a level of data protection has been determined for the receiving country
  • Agreeing standard contractual clauses adopted by the EU Commission with the relevant recipient in accordance with Article 46(2c) GDPR.

In the absence of appropriate safeguards, data is only transferred to third countries on the basis of the exceptions set out in Article 49 GDPR, especially if you have expressly agreed to the transfer or it is required to fulfil contractual obligations.

8.5. Use of third-party services in our digital offerings

If we integrate services of external providers in our digital offerings (e.g. video player or map services), your personal data is generally processed on the basis of your consent in accordance with Article 6(1a) GDPR. Insofar as, for technical reasons, a service is absolutely essential to provide functions you have expressly requested, this type of data processing is based on our legitimate interest in accordance with Article 6(1f) GDPR. In this case, our legitimate interest lies in the provision of the function.

If the processing is based on your consent, you can manage or withdraw this consent at any time using the consent management tool.

9. Purposes of data usage and legal bases for further services and offers

9.1. Information for all subsequently listed services and offers

Messe Stuttgart offers a number of digital services. In doing so, we aim to support you both before and after your event. We collect your personal data during this process.

Fields marked as mandatory are required to fulfil a stated purpose. In addition, you can volunteer information in the optional fields to complete your trade fair profile. This helps us to offer you tailored information.

9.2. Getting in touch

If you contact us by e-mail or telephone, we will process your data (e.g. name, contact details, content of your message) for the purpose of processing your query. The legal basis for this is Article 6(1b) GDPR if your query is related to the fulfilment of a contract or the performance of pre-contractual measures, and Article 6(1f) GDPR in all other cases. Our legitimate interest lies in the proper processing of and response to your query.

9.3. Careers portal and applications

We publish our job vacancies on our Messe Stuttgart careers portal at karriere.messe-stuttgart.de (only available in German). This is where you can send in your application digitally. Please refer to the separate Privacy Policy for our careers portal for information on how your personal data is processed.

9.4. Forms

Our digital offerings include forms at various points for the purpose of requesting information or getting in touch with us. We also offer forms for participating in various campaigns (e.g. competitions, awards, innovation prizes, nominations, special events, etc.). Please refer to the data protection notice in the relevant form for details about the campaigns, the purpose, data transfers and the legal basis for the collected data.

9.5. Chatbot

On selected pages of our website, we offer a chatbot to help you get in touch with us more easily. Strictly necessary cookies are loaded when you access the chatbot. The chatbot may also offer you the option of contacting the relevant offices at Messe Stuttgart. If you request to be contacted by Messe Stuttgart, we will ask for you name, your phone number and/or e-mail address and possibly other optional information. We process your information for the purpose of contacting you. If you do not want to be contacted, all personal data will be erased as soon as you close the chatbot.

The legal basis for this is Article 6(1a) GDPR if the processing is based on your consent, Article 6(1b) GDPR if processing is required for the performance of pre-contractual measures, and Article 6(1f) GDPR. Our legitimate interest lies in the proper processing of your queries. If processing is based on your consent, you can withdraw your consent with effect for the future at any time by e-mailing widerspruch@messe-stuttgart.de.

9.6. Accreditation of media professionals

We provide media professionals and qualified content creators (influencers) as defined in our accreditation guidelines with free access to our events and particular workspaces (quasi-contractual relationship). A requirement for this is an accreditation application, which is available in the digital offerings for the relevant Messe Stuttgart event.

As part of this application, we will collect your contact details, information about your press card and confirmation of (subject-related) authored articles, site notices and/or an assignment in writing from a full-scale editorial office and/or web links for online publications/social media profile(s), to verify your journalistic activities or your relevance as a content creator.

The legal basis in this context is Article 6(1b) GDPR.

We will also process and use your data for advertising purposes, including but not limited to sending you press information.

The legal basis in this context is Article 6(1f) GDPR. Our legitimate interest lies in targeting accredited media professionals for press work and reporting on our events.

9.7. VIP service

As part of our VIP service, we collect and process your data for the purpose of meeting contractual obligations. We collect basic personal data such as your first name, last name and address. Contracts with VIP contacts generally consist of the free participation in different events of Messe Stuttgart, which constitutes an accommodation.

The legal basis in this context is Article 6(1b) GDPR.

We may offer VIP customers the option to bring a plus one. If you provide the personal data of this person, we will assume that you have agreed this in advance with the data subject.

The legal basis in this context is Article 6(1f) GDPR. Our legitimate interest lies in organising the VIP service.

9.8. Digital VisiFair logistics tool

VisiFair, the digital logistics tool of Messe Stuttgart, allows you to book loading slots once successfully registered. The system will suggest available loading slots matching your preferred date and will generate all necessary entry permits and receipts. You also have the option of providing the mobile phone number of the relevant driver as part of the booking process. In this case, we will assume that you have informed the relevant driver(s) of this data transfer in advance.

Refer to the loading zone booking portal for more information on data protection for the booking portal.

10. Origin of the data

10.1. Data of visitors

As a visitor of an Messe Stuttgart event, your data is collected as part of the ticket purchase. Refer to the “Ticketing process” section for details on the collection and processing.

Your personal data may be transferred to us by affiliated companies or subsidiaries of Messe Stuttgart located outside the EU. We may have also received your data in the context of taking over an event from another organiser.

10.2. Data of exhibitors

Registration as an exhibiting company

Companies participating in a Messe Stuttgart event will create a customer account in the Messe Stuttgart portal. During your registration, we will collect all data that is required for successful participation and that you provide to us for processing – at least your first name, last name and business contact details.

We will process and use your data for the purpose of meeting contractual obligations and for advertising purposes for our own and related events.

The legal basis in this context is Article 6(1b) GDPR, Article 6(1f) GDPR and Section 7(3) of the German Act Against Unfair Competition (UWG).

10.3. Address research

We reserve the right to research addresses of prospective exhibiting companies in public directories or to contract address service providers. We may have also received your data in the context of taking over an event from another organiser.

The legal basis for this collection of address data is Article 6(1f) GDPR. Our legitimate interest lies in gaining potential exhibitors for our events by targeting relevant companies.

10.4. Processing of contact details of persons in the public eye (public figures/VIP contacts)

We process personal data of VIP contacts or public figures as part of our public relations and event planning activities. The data is processed on the basis of our legitimate interest in accordance with Article 6(1f) GDPR.

Our legitimate interest lies in targeting persons in the public eye whose fields of activity are related to the topics of our events. Our aim is to provide these persons with information about relevant plans and enable them to participate or collaborate. This may include advertising – in compliance with the provisions under data protection law – if there is a substantiated and topical connection. The data is used exclusively for these purposes.

The contact details are only collected from public sources, e.g. official directories, from responsible protocol departments or comparable public bodies. We also use a directory of a specialised service provider, who provides us with appropriate VIP contacts.

Legal responsibility for the content, offer and handling of your data in the directory of the service provider is Kürschners Politikkontakte - NDV GmbH & Co. KG, with registered office at Hauptstraße 74, 53619 Rheinbreitbach, Germany. For more information, please refer to the provider’s Privacy Policy.

We make every effort to address contacts according to social conventions and protocols and using correctly gendered phrasing. In doing so, we follow publicly available information about names, titles, functions and, where applicable, preferred forms of address. If there is no clear information available, we will use gender-neutral and formal forms of address.

Data is not transferred to third parties, unless this is legally required or necessary as part of commissioned data processing in accordance with Article 28 GDPR.

10.5. Data of media professionals

Media professionals can obtain accreditation for a relevant event online themselves. Messe Stuttgart also researches contact details of media professionals in public directories, from protocol departments and similar offices.

The legal basis in this context is Article 6(1f) GDPR. Our legitimate interest lies in targeting media professionals for press work and reporting on our events.

10.6. Data of business contacts

We process business contact details of various service providers in the context of market surveys for procurement processes. In individual cases, this may include personal data, especially for partnerships.

The legal basis in this context is Article 6(1b) GDPR and Article 6(1f) GDPR. Our legitimate interest lies in the efficient execution of procurement processes and in contacting potential service providers in the context of market surveys.

11. Information about cookies and tracking technologies in the context of using our web pages and digital services

11.1. Cookies and comparable technologies

We use cookies and comparable technologies to continually improve the user experience. With the exception of technologies required for operation, you can personalise your consent to technologies for marketing and statistical purposes in the data protection settings.

You can view details about the relevant technologies there. Deactivating the technologies and cookies will not fundamentally restrict use of our website.

The legal basis for strictly necessary cookies is Article 6(1f) GDPR. Our legitimate interest lies in the technical provision and functionality of our digital offerings. Optional cookies are processed on the basis of your consent in accordance with Article 6(1a) GDPR.

11.2. Saving of IP addresses

Your IP address is transmitted to us by your web browser. This is done for the purpose of detecting, limiting and eliminating attacks on our digital offerings. Your IP address is erased as soon as this purpose does not apply.

The legal basis in this context is Article 6(1f) GDPR. Our legitimate interest lies in the technical provision and functionality of our digital offerings.

11.3. Other services of third parties

Services of third parties are permanently or temporarily embedded in parts of our digital offerings:

YouTube videos

Videos are sometimes embedded in YouTube frames to be able to display video content. If you play the video, you will access data from YouTube.

Legal responsibility lies with Google Ireland Limited, with registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Please refer to the Privacy Policy and Terms of Use for more information on data handling by Google. The scope and handling of your personal data is beyond our control.

The legal basis is your consent in accordance with Article 6(1a) GDPR. You can customise your data protection settings at any time.

Vimeo

Videos are sometimes embedded via the service provider Vimeo to be able to display video content.

Legal responsibility lies with Vimeo LLC, with registered office at 555 West 18th Street, New York, New York 10011, United States of America. Please refer to the Privacy Policy and Terms of Use for more information on data handling by Vimeo. The scope and handling of your personal data is beyond our control.

The legal basis is your consent in accordance with Article 6(1a) GDPR. You can customise your data protection settings at any time.

Hotel search

We have embedded a hotel booking option from Stuttgart Tourist as a service to support your trade fair visit. As soon as you trigger a booking request, you will be redirected to an external digital offering.

Legal responsibility for the content, offer and data handling lies with Stuttgart-Marketing GmbH, with registered office at Rotebühlplatz 25, 70178 Stuttgart, Germany. Please refer to the Privacy Policy for more information on data handling by Stuttgart Marketing GmbH. The content of the offer and handling of your personal data are beyond our control.

11.4. Remarketing pixels

We use remarketing technologies on our web pages (e.g. the LinkedIn Insight Tag) to show visitors of our website targeted advertising on the platforms of the relevant providers and to measure the effectiveness of our campaigns. The integration of such a pixel allows the provider to assign a visit to our website to a user profile and therefore display interest-based advertising.

The data is processed on the basis of your consent in accordance with Article 6(1a) GDPR in conjunction with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can grant your consent via our consent management tool. You can withdraw your consent at any time with effect for the future, using the cookie settings on our website.

Any further information about data processing can be found in data protection notice of the relevant provider.

12. Your rights as a data subject

12.1. Right of access by the data subject (Article 15 GDPR)

As a data subject, you have the right to personally request confirmation from us as to whether we are processing your personal data. If we are processing your data, you have the right of access by the data subject to the scope of processed data as well as further information in accordance with Article 15 GDPR.

12.2. Right to rectification (Article 16 GDPR)

As a data subject, you have to right to have inaccurate information rectified. You also have the option to have incomplete personal data completed.

12.3. Right to erasure (Article 17 GDPR)

As a data subject, you have the right to demand the erasure of your data. In accordance with Article 17 GDPR, this may be necessary if, for example, the purpose for which data was collected no longer applies or if you withdraw your consent to the processing of your data. We will comply with your demand without delay, provided that no statutory retention periods supersede your request for erasure. In these cases, your data will be blocked for further processing until the statutory retention period elapses and will then be erased.

12.4. Right to restriction of processing (Article 18 GDPR)

As a data subject, you have the right to demand the restriction of the processing of your data for the reasons listed in Article 18 GDPR.

12.5. Right to data portability (Article 20 GDPR)

As a data subject, you have the right to obtain your personal data in a structured, common and machine-readable format or request the transfer of this data to a third party in certain cases in accordance with Article 20 GDPR.

12.6. Right to objection (Article 21 GDPR)

As a data subject, you have to right to object to advertising. This will lead to your personal data immediately being blocked for advertising. If your data was exclusively collected for the purpose of advertising with your consent, your objection will also result in the erasure of your data.

If the data was collected on the basis of Article 6(1f) GDPR, you have the right as the data subject to object to the processing of your data for grounds relating to your particular situation. This will lead to a cessation of processing.

In exceptional circumstances, e.g. when asserting, exercising or defending legal claims, these compelling legitimate grounds override your interests, rights and freedoms and it is not possible to object to processing. In the case of statutory retention periods, the relevant data is archived for the duration of these periods. Any processing performed up to the point of objection remains lawful.

Please send your objection to widerspruch@messe-stuttgart.de or the postal address stated in the site notice.

12.7. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

As a data subject, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you infringes data protection regulations in accordance with Article 77 GDPR. The right to lodge a complaint may be asserted to a supervisory authority in the member state of your place of residence, your workplace or the place of the suspected infringement.

Supervisory authority

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(Baden-Württemberg State Commissioner for Data Protection and Freedom of Information)
Heilbronner Straße 35
70191 Stuttgart, Germany

E-Mail: poststelle@lfdi.bwl.de

Reservation of rights to make changes

We reserve the right to make changes to this data protection notice at any time to adapt it to changed legal requirements or changes to our services. The most up-to-date version can be found on our website at any time.

________________________________________________________