Messe München GmbH (“Messe München”) thanks you for your interest in our company and products. We take the protection of your person-related data very seriously. We would like you to feel at ease when you visit our trade shows, our website or when using our digital content and products. At our trade shows, we employ photographers and service providers to take photos and other image material of the fairs we organize ourselves. These include in particular portrait and event photos (“trade fair photos”).
Protecting your privacy is of optimum importance to us. Therefore, compliance with legislation on protecting data privacy is self-evident for us. Our employees are obligated to maintain data secrecy. They are regularly trained in the areas of data protection and data security. In the following, we would like to outline briefly how we handle your personal data within the context of our website, our digital content and products, and how we protect these data.
Messe München GmbH, represented by the managing directors Klaus Dittrich, Dr. Reinhard Pfeiffer, Stefan Rummel, Falk Senger, Gerhard Gerritzen and Monika Dech
Tel.: +49 89 949-20720
Fax: +49 89 949-20729
Messe München GmbH
Data Protection Officer
Tel.: +49 89 949-20045
Fax: +49 89 949-20069
Personal data refer to individual information about the personal or material relations of a certain or identifiable natural person This includes information such as your name, postal or email address, and access data in the context of using our website and our other digital content and products. Personal data are also stored by us in addition to the access data only if you voluntarily provide us with this, e.g., in the context of a registration, a survey, a prize contest, a contact request, a subscription to a newsletter or to carry out an online order. In addition, personal data are only used to the extent necessary and for the sole consented purpose or a legally permissible purpose. For secure transmission of your data, Messe München GmbH uses encryption procedures in secured areas. This means that the communication between your browser or terminal device and our ordering system is not readable for others on the internet, for example. Apart from that, the use of our ordering system is deemed as consent to the storage and use of your data by Messe München GmbH and its partners. In the context of trade fair photos, we generate and collect image material from you and other personal data that you provide us in connection with the photos (for example, name, telephone number, e-mail address, postal address).
By accessing our website, Messe München GmbH receives access data that is stored for security purposes and in principle permits identification of:
The provision of this website requires the handling of personal data, for example, the IP address for the retrieval of the content displayed on this website.
These data are evaluated by Messe München GmbH and enable us to optimize our offers as a whole and make the content more specific for you personally, e.g., to recognize you as a returning visitor to our website. If you have an existing data record, the new data can be assigned to it in many cases. The IP address of the computer from which the access is made is only stored for backup purposes for a period of one month.
You also have the opportunity to contact us via our contact form. We collect the personal data for this that you enter in the contact form.
The handling of your personal data for the provision of this website and for communication via this website is based on our legitimate interest. For the provision of this website, it is technically necessary that we process certain personal data (e.g., the IP address). For your communication with us, we must handle the respective personal data.
As part of the required balancing of interests, we balance your interest in the confidentiality of your personal information and our interests in the provision of this website in establishing contact with each other. Your interest in confidentiality is secondary in both cases. Otherwise, we could not provide you with access to this website or respond to your contact request.
We use service providers to provide our website. We transmit personal data to these service providers for this. These service providers are contractually obligated by us to exercise the same care when handling personal data as we do ourselves.
These service providers are subject to the same strict data protection regulations and are also included in the data protection concept of Messe München GmbH.
Personal data are only transmitted to state institutions and authorities in the context of legal or judicial obligations.
You can apply online to us via our website. For this, you can first register on our application portal. However, this is not a mandatory requirement for your application. If you register for our career portal, the personal data that you enter in the registration form will be processed for this purpose. Basically, those personal data are processed that you specify with or without registration, and which you provide us with in the context of your application, e.g. your application documents.
(a) The processing of your personal data in the context of the application portal takes place for preparing, executing and processing the corresponding usage contract (license agreement).
(b) The processing of your personal data in the context of your application is only to prepare an employment contract pursuant to Section 6, para 1 lit. b) GDPR in conjunction with § 26 Federal Data Protection Act (BDSG).
(c) Your application will only be stored for a longer period of time if you give us your corresponding consent. You can revoke your consent with future effect at any time.
In the context of application procedures, we transmit personal data to service providers in the context of service provision. A review of your documents for other open positions at Messe München GmbH or referral to other entities in our group of companies shall only occur if you have provided us your consent to do so. You may revoke your consent at any time with effect for the future.
If there is no legal basis for further retention of your application data, deletion takes place after 6 months of conclusion of the application process.
If you—as visitors, members of the press, exhibitors, partners, sponsors, or speakers—wish to use our ISPO Digitize Summit Portal at https://ispo-digitize.converve.io or place orders in the associated ticket shop, you may be required to provide your personal data, such as when you sign in to our portal or place an order. The mandatory information required for processing your registration for the portal or ordering tickets is compulsory; other information provided within the context of the portal is voluntary. We only process the personal data you provided for the purpose of offering you the services of our ISPO Digitize Summit Portal.
The ISPO Digitize Summit Portal offers you the following services and features:
If you wish to use our portal, you must register by specifying your e-mail address and assigning a password of your choice.
If you use our portal, we will store the personal data required for the purpose of fulfilling the contract until such time that you delete your user account. The processing of this data is based on statutory provisions that allow us to process personal data to the extent necessary for the use of a service or the performance of a contract (§ 15 para 1 German Telemedia Act, Sect. 6 para b GDPR).
Furthermore, we will store the voluntary data you provided for the time of your use of the portal, unless you delete them before that time. You can manage and change all personal details of your networking profile in the protected customer area. The legal basis in this respect is our overriding legitimate interest in the use of the data which you voluntarily provide to us (Sect. 6 (1) page 1 (f) GDPR).
If you wish to place orders in our ticket shop through the ISPO Digitize Summit Portal, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. We process the personal data you provided solely for the handling of your order. The legal basis for this is Sect. 6 (1) page 1 (b) GDPR.
We offer several networking features on our portal that allow you to interact with other participants in the ISPO Digitize Summit, such as exchanging messages. If you use these features, please be aware that we may not be able to prevent unsolicited messages from being sent to you.
You furthermore have the option to create a networking profile in which you indicate your main interests. You can then contact other participants via the so-called matchmaking function. In addition, there is the possibility to receive event information matched to your interests, to create your personalized event program, or to register for so-called Match Up sessions. We use all data voluntarily provided by you within the context of these portal features exclusively for the purpose of providing you the named portal functions as intended. Without this data, we would not be able to offer and make these functions available to you.
The processing of your personal data takes place to fulfill the contract to provide the networking functions. The legal basis for this is Sect. 6 (1) page 1 (b) GDPR. Upon termination of this contractual relationship, the processing of your personal data is based on our legitimate interests. The legal basis for this is Sect. 6 (1) page 1 (f) GDPR.
In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the networking features against each other. Your interest in confidentiality is secondary in this case. Otherwise we could not provide the networking functions to you.
If you decide to participate in the ISPO SDG Summit, we will process the data you provide us with during registration to provide you with an admission ticket for the event. The legal basis for this is Section 6 para 1 lit. b GDPR (“Fulfillment of Contract”)
We also process your personal data on the basis of Section 6 Para. 1 lit f GDPR (“legitimate interests”) in order to assign you to a suitable working group within the ISPO SDG Summit and to inform you (in accordance with §7 of the Unfair Competition Act) about related events and offers of Messe München. Your rights and freedoms have been balanced against this interest and they are outweighed in this case. You may object to the processing of your personal data for advertising purposes at any time by sending an email to email@example.com .
Should you wish to have Messe München make travel arrangements for you for the event, you can provide us your consent for this pursuant to Section 6 para. 1 lit a GDPR. This consent is voluntary and can be revoked at any time with effect for the future. The same applies should you be interested in matchmaking with other summit participants and, for this purpose, agree to the disclosure of your answers provided in the visitor survey to other participants within the closed visitor area.
In the context of holding the ISPO SDG Summit, we are working with partners, who—as contract processors—are contractually obliged to only process your personal data for the above-mentioned purposes pursuant to Sect. 28 GDPR, and only on behalf of Messe München GmbH. Your data will not be passed on to third parties or to a third country.
We will process your data until the above purposes cease to apply or until the statutory retention periods for this have expired.
To be able to offer you a virtual tour of the ICM, we record your IP address and accompanying technical information (including time, device language, operating system, browser version) with the objective of giving you a realistic online impression of the premises of the ICM on site, enabling you to decide whether the ICM is a suitable location for your event.
Legal basis for the processing of the above personal data is Section 6 para. 1 lit. b GDPR (“pre-contractual measures”). If you simply wish to get an impression of the ICM without intent of any potential cooperation, the legal basis for the processing of your data is the legitimate interest of Messe München GmbH in the realistic representation of its premises pursuant to Section 6 para. 1 lit. f GDPR. Your rights and freedoms will be appropriately considered in this context.
Certain elements of the configurator are implemented with the involvement of external technology partners. Should one of the offerings require the transmission of personal data to third parties, we will ask for your prior consent pursuant to Section 6 para. 1 lit. a GDPR (see number 2, Recipient categories).
As part of the provision of the ICM configurator, the above personal data will be transmitted to a contract processor pursuant to Section 28 GDPR.
If you are a member of the women's network and have consented to the publication of your personal profile, it will appear in the protected members only area. The purpose of the publication is to facilitate contact between the members of the initiative. Basis for this publication is your consent pursuant to Section 6 para. 1 lit. a GDPR.
All data in the members area are only accessible to other members of the initiative while logged in. You can have your personal profile deleted at any time by sending an e-mail to firstname.lastname@example.org , thus revoking your consent.
In addition, Messe München GmbH will inform you about selected events that may be of relevance to the members of the network. The legal basis for this is the legitimate interest of Messe München GmbH in offering events that are of interest to the members of the network, pursuant to Section 6 para 1 lit. f GDPR. Your rights and freedoms will be appropriately considered in this context. You may object to receiving invitations to these events at any time by sending an e-mail to email@example.com.
If you use the matchmaking service of Connecting Women, the information provided by you will be processed by our contract processor Chemistree GmbH in accordance with Section 28 GDPR. Processing of your personal data occurs solely for the purposes of Frauen Verbinden. Legal basis is the legitimate interest of Messe München GmbH to recommend contacts of interest within the network to registered members of Connecting Women. Your rights and freedoms will be appropriately taken into consideration. Further information on matchmaking at Chemistree can be found here. You may object to the processing of your data for this purpose at any time or request deletion. Simply write an e-mail to firstname.lastname@example.org .
Messe München GmbH Messe does not transmit any personal data from the Members’ portal to third parties but only to contract processors, to the extent necessary to provide the above mentioned services.
For the duration of your membership in the network initiative, your personal data will be stored for the purposes mentioned above. When you terminate your membership, the data will be immediately deleted.
You can buy online tickets for trade fairs and congresses via our website. We process the personal data for this that you enter in the order form. The processing of your personal data takes place for preparing, executing and processing the corresponding contract.
In this context, Messe München only processes personal data for the purpose of Messe München's business purposes. This is necessary for carrying out the tasks of the exhibition and exhibition industry in economic, scientific and cultural fields. The tasks include in particular the holding of trade fairs, exhibitions, congresses and similar events, taking care of the exhibition interests of the City of Munich and the Free State of Bavaria at home and abroad, the promotion of the economy by organizing trade fairs, exhibitions, congresses and similar events as well as the operation, maintenance and further development of the exhibition center in Munich, Messestadt-Riem.
To this end, Messe München maintains exhibition and exhibition facilities, congress and meeting rooms, which it uses or rents for events. The Messe München also operates this for certain events and special internet offers.
The processing of personal data is carried out in particular for the handling of business processes in connection with the above activities, for your information and for promoting our events and services (based on Section 7 para. 3 of the Law on Unfair Competition [UWG]), for their optimization as well as market and opinion research.
In the case of e-mails, we analyze user behavior on the basis of §7 para. 3 of the German Act against Unfair Competition (UWG) in an effort to design the marketing approach for our events and services in a customized manner tailored to the target audience. The legal basis for this is the legitimate interest of Messe München GmbH in direct advertising targeted to the addressee. This coincides with the interest of recipients in receiving only information that is of interest to them. Your rights and freedoms have been balanced against this interest and they are outweighed in this case.
You can object to the sending of emails and the analysis of user behavior at any time by sending an email to the following address: email@example.com
We organize certain trade fairs, conferences and events in cooperation with partners. For this purpose, we have, together with the respective partner, a joint ticket management (e.g., combination tickets for visiting specific events). In such case, both we and the respective partner are jointly responsible for the collection of data at ticket purchase and the further processing in the context of contract initiation, contract implementation and execution. Furthermore, we and the respective partner process the data for our own advertising purposes within the legal framework (based on Section 7 para. 3 of the Law on Unfair Competition [UWG]).
If you object to the processing for advertising purposes, you may contact either us or the respective partner. Your objection will be forwarded as appropriate if you no longer wish to receive advertising from us. In case of doubt, Messe München and
You can register as a visitor, trade visitor or exhibitor on our website. For this purpose, we process the personal data that you provide to us as part of your registration.
The processing of your personal data takes place for preparing, executing and processing the corresponding usage contract (license agreement).
You do not have to register to participate in events of Messe München and its subsidiaries. Of course, you can also buy an anonymous ticket at the ticket counters without registering. Our hosts and hostesses as well as our service center and the exhibition project management will support you in doing this.
Without registration, we are unfortunately unable to provide you with services such as online advance sale or simplified repeated ticket purchase, match-making, networking functions in the context of our Connect app, travel services or other services of Messe München.
This does not apply for you as a visitor in the following cases:
In particular, we process your personal data for the following purposes:
Data collected later is also assigned to the customer account. For example, these include the data collected data when you order tickets, the number of a voucher of an exhibitor inviting you, and email addresses of other persons for whom you also order tickets at the same time as you order,
You may have multiple customer accounts if you registered with us using different email addresses.
We organize certain trade fairs, conferences and events in cooperation with partners. For this purpose, we have, together with the respective partner, a joint ticket management (e.g., com-bination tickets for visiting specific events). In such case, both we and the respective partner are jointly responsible for the collection of data at ticket purchase and the further processing in the context of contract initiation, contract implementation and execution.
For this purpose, we have concluded a data protection agreement with our partner on joint responsibility. In the following, we would like to provide you with the essentials of such an agreement:
We only forward the data to third parties to the extent described below. Some of the recipients are located outside the European Economic Area (EEA). Please also note the following section in this context.
The transmission of data to the extent described above may be made to countries outside the European Economic Area (EEA) in some cases. Some of these countries do not have a level of data protection comparable to the level of protection within the EU (e.g., USA, China or India). To protect your data, our non-EEA Group companies and contractors, to which data are to be transmitted, for example, foreign representatives, are required to provide appropriate data protection in accordance with EU standard contractual clauses for the transmission of personal data to third countries.
You can find the EU standard contract clauses at the following link:
You can also find information on international data protection at the following link:
In the context of the app that we provide for specific trade fair events (“Connect app”), you will be given access to the public information we are providing about the respective trade-fair event and—if you have acquired this option—also access to the networking functions of the Connect app.
The provision of the Connect app requires the handling of personal data, such as the IP address used to retrieve content displayed on the Connect app, requests placed by you, or our online services and functional areas. You also have the option to contact us via our contact form or the Support Chat feature (where provided by us). For this purpose, we collect your e-mail address and username, as well as the details provided to us to establish your user account: name, name, company, job title, position and country.
The handling of your personal information in the context of providing the Connect app, its functions and for communication is based on our legitimate interest. For the provision of the Connect app, it is technically necessary for us to process certain personal data (e.g. the IP address). For your communication with us it is required that we process the personal data mentioned above. In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the Connect app against each other. Your interest in confidentiality is secondary in this case, as otherwise, we would not be able to provide you with the Connect app (including its features) or respond to your requests.
Insofar as you have gained access to the networking features of the Connect app, you will be able to communicate with other users of the Connect app by posting messages and commenting on public channels (including sponsored channels). In addition, you can create private channels with other users to communicate individually without being visible to anyone other than the participants you have defined for your particular private channel. You can also be contacted individually by other users via a private channel.
For the purpose of providing these networking functions, we process your personal data, in particular your user account information (name, first name, company, job title, position and country), and any messages and comments posted in the channels.
The processing of your personal data takes place to fulfill the contract to provide the networking capabilities. Upon termination of this contractual relationship, the processing of your personal data is based on our legitimate interests. In the context of the required balancing of interests, we have balanced your interest in the confidentiality of your personal data and our interest in providing the networking functions against each other. Your interest in confidentiality is secondary in both cases. Otherwise we could not provide the networking functions to you.
Insofar as you have acquired access rights to use the networking functions (e.g. by purchasing a corresponding online ticket or networking-only ticket, or as part of your rights as an exhibitor) and if you have given your express consent upon purchase, we will process your personal data in the context of your user account as a user profile (name, first name, company, job title, position, country and, if provided, your profile photo) in our Connect app already from the time of acquisition of the access rights (regardless of whether you are already downloaded the Connect app or registered for it) until you log in to the Connect app for the first time. In this case, your user profile will be displayed to other users of the Connect app; third parties who use the app without registering are only shown the first name. Third-party users will then be able to send you private messages. You will be able to read these messages immediately after you log in to the Connect app for the first time.
You can revoke this consent granted at the time of purchase at any time (e.g., via firstname.lastname@example.org ) with future effect. The revocation of consent is only effective for the future and does not affect the legality of any processing which may have occurred before the revocation.
We only forward the data to third parties to the extent described below. Some of the recipients are located outside the European Economic Area (EEA). Please also note the following section in this context.
We process device data to send you push messages, synchronize your favorites, and for so-called crash-reporting to detect the error in the event of an app crash. This includes the following information: the device ID, the device model, name of the device, the operating system, time stamp, and the cause of the error. Processing of the data in the context of favorite synchronization and the sending of push messages is required to fulfill the contract with you. The legal basis for the processing of this data is therefore Section 6 para. 1 lit. b GDPR. The data is required as part of the crash report to analyze and fix errors or crashes of the app. This purpose constitutes our legitimate interest in the processing of data, which is thus in compliance with Section. 6 para. 1 lit. f of the GDPR. The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of push messages, the data is deleted as soon as the request has been processed. You can turn off the push notification service and thus object to the processing of your data. Unless you use favorites synchronization, no data will be collected. For more information on favorites synchronization, see section h. For crash reporting, the data is absolutely necessary, you cannot object to the processing. In case you do not agree, we ask you to uninstall the app. The crash data will be deleted when it is no longer needed for analysis and troubleshooting.
We require access to the location of your device for location-based services. This service is intended to provide you with helpful information in the context of the event concerned, depending on your location. Your location data is determined using GPS data, nearby Wi-Fi networks SSID, mobile data and Bluetooth, and is used only to perform relevant technical functions. Your location data will not be used to create movement profiles beyond your current location and will not be logged or stored by us. You may revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not allow access.
To enable you to save the dates of your trade fair visit planning in your device calendar, we need access to your calendar. We will not retrieve or store any personal data from your calendar. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not grant access.
We need access to your address book to enable you to save the contacts provided through the exhibitor directory. We will not retrieve or store any personal data from your address book. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not allow access.
We require access to your device camera to produce camera memos. The data will be stored on your device. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not grant access.
We need memory access to store the trade show visit data you have created on your device. You can revoke access in your operating system settings at any time. Please note that some functions may not be available if you do not allow access.
This app uses Google Analytics, an analytics service provided by Google Inc. ("Google"). With the help of Google Analytics, we collect data on how and which functions were used within the apps. These include e.g. search queries, clicks on banners and which product groups and exhibitor entries in the app are called up in which frequency. The information collected about your use of this app is usually transmitted to a Google server in the U.S. and stored there. We only use Google Analytics with activated IP anonymization, that is, within the member states of the EU and the European Economic Area, user IP addresses will be truncated.
This deletion of digits eliminates any personal reference to your IP address. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there.
In addition to the above access requests, we process personal data only in the context of the use of individual functions of the app. Unless you use these functions, we will not collect any other personal information. In order to enable a synchronization of the favorites created in the app with the watch lists in the online exhibitor catalog on exhibitors.bauma.de, we transmit—in addition to the favorites—also an e-mail address as an identifying feature for your online exhibitor catalog user account during synchronization. You must enter the e-mail address in the app yourself before the first sync. The e-mail address gets stored in the app to simplify subsequent synchronization processes. Synchronization will only occur if you press the “Synchronize Favorites” button in the app. Pursuant to Section 6 para. 1 lit. f GDPR, processing of your personal data serves the purpose of improving usability. The data for favorites synchronization is used only to process the request and will subsequently be deleted.
If you decide to register as the contact person in your company for our TrustedTargeting Campaign Creator (hereafter: “Creator”), we will process the data you provide us with during registration to send you a campaign offer by e-mail and to provide you (as a representative of your company) with the services of the Creator. The legal basis in both cases is Section 6, para 1 lit b GDPR (contractual or pre-contractual measures).
We furthermore process your personal data on the basis of Section 6 para 1 lit f GDPR ("legitimate interests") for the purposes of product and contract optimization in order to be able to offer our customers the best possible service. We also want to ensure that our customers obtain the right support for future contract fulfillment and can operate our tool independently. In addition, we process your data for market research and opinion surveys and for the purpose of direct advertising for similar topics and products of Messe München (in case of contact by e-mail: in connection with Section 7 para 3 of the German Act against Unfair Competition (UWG)). Your rights and freedoms have been balanced against this interest and they are outweighed in this case. You may object to the processing of your personal data for these purposes at any time by sending an e-mail to: email@example.com .
We are working with partners, who—as contract processors—are contractually obliged to process your personal data only for the above-mentioned purposes pursuant to Sect. 28 GDPR, and only on behalf of Messe München GmbH. Your data will not be passed on to third parties. In the event that data is transferred to a third country, all necessary legal requirements are met (e.g. US Privacy Shield certification, conclusion of EU standard contractual clauses).
We will process your data until the above purposes cease to apply, or until the statutory retention periods for this have expired.
Your consent is the legal basis for our data processing. You can revoke your consent at any time with effect for the future.
We are cooperating with third parties in the context of competitions. We transfer personal data to these third parties for this purpose.
We process trade show photos (including any other personal data that you provide to us in connection with the photos) for the documentation of our trade fairs. In addition, we process trade show photos—in particular especially through publication and usage—for press and advertising purposes in various media (in particular print (e.g. brochures) and online (websites, social media, etc.)). This includes the publication, use and processing for the purpose of press news and public relations, editorial reporting as well as for advertising and marketing purposes in connection with Messe München GmbH and the trade shows, conferences and other events it organizes.
The legal basis for the creation and use of trade show photos is Section 6 para. 1 lit. f) GDPR (legitimate interest in the documentation of our fairs and our legitimate interests in connection with the above-mentioned processing purposes). In the required balancing of interests, your privacy rights will be honored appropriately.
In case we wish to publish and use footage from you on which you are clearly identifiable for press and advertising purposes, we will request your consent. The legal basis for publication is then your consent pursuant to Section 6 para. 1 lit. a) GDPR.
In areas where the Art Copyright Law ("KUG") is applicable, we may also disseminate, use and otherwise process trade fair photos pursuant to § 23 KUG for the following purposes:
For the purpose of press and public relations, editorial reporting, advertising and marketing purposes, the photos taken at trade shows may be sent to journalists, media companies, press and photo agencies, including to platforms abroad, and published by us. For the fulfillment of orders, we also commission service providers, in particular for the production of trade fair photographs. These service providers are obligated by contractual agreement to exercise the same care when handling personal data as we do ourselves.
We will delete your personal data if the purpose of storage is no longer necessary and no statutory provision requires a retention. Statistical evaluations are made only in anonymous form.
Please contact our data protection officer for the exercise of your rights and the revocation of your consent.
You have the following rights toward us regarding your personal data:
You can revoke your consent with future effect at any time.
You have the right to file a complaint with a data protection supervisory authority concerning our processing of your personal data.
The following data protection supervisory authority is responsible for us:
Bavarian State Office for Data Protection
Phone: +49 981 180093-0
Fax: +49 981 180093-800
If you have any questions or suggestions regarding data protection at Messe München GmbH, please feel free to contact our data protection officer by e-mail.
Munich, April 2020