Privacy policy

HALLE MESSE GmbH
Messestraße 10
06116 Halle (Saale)
Phone: +49 (0)345 68290
Fax: +49 (0)345 6829110
info@halle-messe.de
www.halle-messe.de

You can exercise the following rights at any time using the contact details provided for our data protection officer:

• Information about your data stored by us and its processing (Art. 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR),
• erasure of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
• Objection to the processing of your data by us (Art. 21 GDPR) and
• data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can withdraw it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Nature and purpose of processing:

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.

They are processed for the following purposes in particular:

• Ensuring a smooth connection setup of the website,
• Ensuring the smooth use of our website,
• evaluation of system security and stability and
• for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.

Legal basis:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

Type and purpose of processing:

Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

This provides us with certain data such as IP address, browser used and operating system.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

Cookies cannot be used to start programs or transfer viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages.

Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how you can change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

You can delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Nature and purpose of processing:

We use Adobe Typekit for the visual design of our website. Typekit is a service of Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter "Adobe"), which grants us access to a font library. To integrate the fonts we use, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. Adobe then receives the information that our website has been accessed from your IP address. You can find more information about Adobe Typekit in Adobe's privacy policy, which you can access here: https://www.adobe.com/de/privacy/policy.html

Legal basis:

The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. Information about the use of your data by Adobe Typekit Web Fonts can be found at https://typekit.com/ and in Adobe Typekit's privacy policy: https://www.adobe.com/de/privacy/policies/typekit.html.

Storage duration:

We do not collect any personal data through the integration of Adobe Typekit Web Fonts.

Third country transfer:

Adobe is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law(https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Provision prescribed or required:

The provision of personal data is neither legally nor contractually required. However, it is not possible to display the content of standard fonts correctly without it.

We use the "Facebook pixel" of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

By calling up this pixel from your browser, Facebook can subsequently recognize whether a Facebook ad was successful, e.g. whether it led to an online purchase. We only receive statistical data from Facebook for this purpose without reference to a specific person. This allows us to record the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are logged in to Facebook, we refer you to their data protection information at: https://www.facebook.com/ads/preferences/.

Please go to: https://www.facebook.com/ads/preferences/ if you wish to withdraw your consent to "Facebook Pixel".

We use "Google reCAPTCHA" on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the visitor's behavior based on various characteristics. This analysis begins automatically as soon as the visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is carried out on the basis of Art. 6 para. 1 GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.

Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Nature and purpose of processing:

When registering for the use of our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Legal basis:

The data entered during registration is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

If the registration serves the fulfillment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

Data is only processed in this context for as long as the corresponding consent is available. It will then be deleted, provided there are no statutory retention obligations to the contrary. To contact us in this context, please use the contact details provided at the end of this privacy policy.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

Type and purpose of processing:

In order to provide chargeable services, we request additional data, such as payment details, in order to be able to process your order.

Legal basis:

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipients:

Recipients of the data may be processors.

Storage period:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

Type and purpose of processing:

When users leave comments on our website, the time of their creation and the user name previously selected by the website visitor are stored in addition to this information. This is for our security, as we can be prosecuted for illegal content on our website, even if it was created by users.

Legal basis:

The data entered as a comment is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the comment function, we would like to enable you to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

Recipients:

Recipients of the data may be processors.

Storage period:

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when communication with the user has been concluded and the company can infer from the circumstances that the matter in question has been conclusively clarified.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our comment function.

Type and purpose of processing:

Your data will only be used to send you the newsletter you have subscribed to by email. Your name is provided so that we can address you personally in the newsletter and, if necessary, identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).

We require a valid e-mail address for registration to be effective. We use the "double opt-in" procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.

Legal basis:

On the basis of your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.

Recipients:

Recipients of the data may be processors.

Storage period:

The data will only be processed in this context for as long as the corresponding consent is available. It will then be deleted.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.

Type and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid e-mail address and your name. This is used to assign the request and subsequently answer it. The provision of further data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients:

Recipients of the data may be processors.

Storage period:

Data will be deleted no later than 6 months after processing the request.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

We use (among others) the services of Micropayment GmbH, Scharnweberstraße 69, 12587 Berlin for the processing of technical payment services. When paying with these payment methods, the data protection information and conditions of Micropayment GmbH apply, which you can view as part of the payment process.

The transmission of your data to Micropayment GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.

You also have the right to free information about your stored personal data, its origin and recipients and the purpose of data processing as well as the right to correct, block or delete this data at any time. Please address your data protection concerns regarding payment with Micropayment to: privacy@micropayment.de"

Type and purpose of processing:

This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.

Matomo uses cookies, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of the website is stored on a server in Germany.

The IP address is anonymized immediately after processing and before it is stored. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website.

You can decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data.

You can find more information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.

Legal basis:

The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Recipients of the data may be processors.

Storage period:

The data is deleted as soon as it is no longer required for our recording purposes.

In our case, this is after the following period: 366 days.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of consent:

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Profiling:

With the help of the tracking tool Matomo, the behavior of visitors to the website can be evaluated and their interests analyzed. We create a pseudonymous user profile for this purpose.

Type and purpose of processing:

In order to display our content correctly and graphically appealing across browsers, we use "Google Web Fonts" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") on this website to display fonts.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - but currently also unclear whether and, if so, for what purposes - that the operator collects Google data in this case.

Storage period:

We do not collect any personal data through the integration of Google Web Fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of personal data is not required by law or contract. However, it may not be possible to display the content correctly using standard fonts.

Withdrawal of consent:

The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

Nature and purpose of processing:

We use the Google Maps service on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google privacy policy. You can also change your personal data protection settings there in the data protection center.

Detailed instructions on managing your own data in connection with Google products can be found here.

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Storage period:

We do not collect any personal data through the integration of Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or only to a limited extent.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Type and purpose of processing:

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy(https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield www.privacyshield.gov/EU-US-Framework

Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

Accessing YouTube automatically triggers a connection to Google.

Storage period and withdrawal of consent:

If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https: //www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

We offer you the option of using so-called "social media buttons" on our website. To protect your data, we use the "Shariff" solution for implementation. This means that these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic, you will be redirected to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the corresponding providers. You can find more information about the Shariff solution here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website

Facebook Inc (1601 S. California Ave - Palo Alto - CA 94304 - USA)
Twitter Inc (795 Folsom St - Suite 600 - San Francisco - CA 94107 - USA)
Google Plus/Google Inc (1600 Amphitheatre Parkway - Mountain View - CA 94043 - USA)

Type and purpose of processing:

Our website uses Google Conversion Tracking. The operating company of the Google Ads services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

Legal basis:

The legal basis for the integration of Google Ads and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Recipients:

Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

Storage period:

These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this - for example, by setting your browser to generally deactivate the automatic setting of cookies or to set your browser to block cookies from the domain "googleleadservices.com".

Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for by the various storage periods stipulated by law. Once the respective purpose no longer applies or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:

Heino Walter
heino.walter@zwerenz-gruppe.de

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (Version #2019-04-10).