Data Protection

GHM develops, prepares and organises successful trade fairs for all sectors involving skilled crafts and SMEs. The company is the leading provider in Germany in its field. GHM attaches great importance to the protection of privacy and complies with the statutory data protection regulations. In the following, we would like to explain to you how we handle your personal data.

This Privacy Statement shall apply to all websites operated by GHM.

The specific data processed in each case and the manner in which they are used shall be subject primarily to the services requested and/or agreed and the GHM websites visited. Therefore, not all parts of this information may apply to you. The relevant information is indicated with the specific processing activities conducted.

1. Who is the controller as defined in Art. 4 No. 1 GDPR?

For our websites, the controller (responsible entity/person) within the meaning of data protection law is

GHM Gesellschaft für Handwerksmessen mbH
Paul-Wassermann-Str. 5
81829 München (Munich)
Germany

P +49 (0)89 189 149-0
F +49 (0)89 189 149-239
E-Mail datenschutz@ghm.de

Management Board
Dieter Dohr (Management Board Chairman)
Klaus Plaschka

Munich commercial register HRB 40217
VAT ID: DE 129358691

As data protection officer, we have appointed:

Data Protection Officer of GHM

c/o activeMind AG
Telefon: 089 / 91 92 94-900
E-Mail: datenschutz@ghm.de

2. Which processing activities are performed?

Visiting our website

Purpose, data categories, legal basis
When our websites are visited, GHM receives access data, which are stored for back-up purposes:

the name of your Internet Service Provider
the country where you are located
the website from which you are visiting us
the search term if you come to our page via a search engine
the websites you visit when you are accessing our pages
the user tools (web browser, operating system) with which you have accessed our site
files that you have downloaded from our site (e. g. PDF or Word documents)
the duration and
the date and time of your visit

The data are stored in the log files of our system for a short period. Such data are not stored together with other personal data of the user. Processing occurs on the legal basis of Art. 6 (1) sentence 1 f) GDPR (General Data Protection Regulation). It is our interest to guarantee the integrity, confidentiality and availability of the data processed via our websites.

Recipients of the data
We host your data on servers in Germany.

Storage duration
Once the use of the website has ended, the data will be erased, unless there is a legal basis for their further use as may be the case in connection with incorrect login attempts to guarantee the integrity, confidentiality and availability of our websites.

Provision mandatory or required
The provision of your personal data is made on a voluntary basis by visiting our websites.

Objection
The collection of data to make the website available and the storage of data in log files is essential for operating the website. Accordingly, the user has no right to object. You have a right to object to additional cookies or tracking technologies. To find out more, please consult: Information on your right to object pursuant to Art. 21 GDPR as well as our Information on cookies, social plug-ins and tracking technologies used.

Registration as exhibitor (application)

Purpose, categories of data and legal basis
The following describes which personal data we collect and for which purposes we use them when you use our exhibitor portal to register for a trade fair or make contact.

You must register to express your interest in participating in a trade fair or to submit your application on the GHM exhibitor portal. We collect data such as gender, form of address, first name and last name, company, address, email, telephone number and password.

The data shall be used for the operation of the exhibitor portal.

A customer account is created when you register with us as an exhibitor. The data stored in the customer account allows you to use additional services of the trade fair or register for other services (this ensures easier access). Data such as gender, form of address, first name and last name, company, address, email and telephone number are required for registration.

Additional information may be provided on a voluntary basis. To provide the necessary evidence on the status as an exhibition company, further data on the company and/or the exhibits is collected and appropriate proof may be requested. If you register with different email addresses, several client accounts will be created for you.

The data you provide shall be used to fulfil your requests (e.g. registration of an exhibition stand or registration as co-exhibitor), as well as to process your orders (e.g. surveillance and cleaning). If necessary, your data will be transferred to our service partners for the processing of the orders.

The legal basis for the processing of your data is point (b) of sentence 1 of Article 6(1) of the General Data Protection Regulation (GDPR).

Use of your data for communication between exhibitors (exhibitor information), marketing purposes, invoicing procedures, management of the trade fair by GHM or its service partners.

We use your contact details to inform you about the respective event and its implementation, or to inform you about similar services and events offered by GHM by email and/or telephone.

The legal basis for us contacting you by email following your registration is Section 7(3) of the German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG). You can opt out of receiving promotional information by email at any time. This can be done by sending an email to datenschutz@ghm.de or by following the corresponding link at the bottom of each email.

GHM willl use your data to contact you by email with a request for voluntary participation in customer surveys and to contact you for advertising purposes by telephone or fax, subject to your express consent given at the time of registration. This consent is based on point (a) of sentence 1 of Article 6(1)GDPR and may be withdrawn at any time in the future by emailing datenschutz@ghm.de.

Your data will only be transferred under specific conditions and only for clearly defined purposes, which are described in more detail below:
The exhibitor portal is provided by an external service provider in the EU and the data you enter is therefore processed by this provider. GHM and the service providers have concluded a data processing contract in accordance with Article 28 GDPR.

Recipients of the data
The personal data provided in the exhibitor portal shall be processed for the express purpose of providing their services in the operation of the exhibitor portal and not for their own purposes. The service provider uses web analysis tracking and re-marketing tools based on our instructions. You can book the services you need at the trade fair directly with our service partners. When you register as an exhibitor, you provide consent for the data to be transmitted to the service partner for this purpose. The consent is based on point (a) of sentence 1 of Article 6(1) GDPR and may be withdrawn for the future at any time.

Furthermore, we will only transmit your data to third parties if legally required to do so, e.g. to law enforcement agencies or if required to initiate infringement proceedings.

Storage duration
Your data will only be used by GHM or our service partners only for the purposes of the trade fair in question. GHM will, of course, delete your data if the intended purpose no longer requires that this be stored or if contractual arrangements with our customers or legal deadlines no longer exist.

Provision mandatory or required
Personal data is provided on a voluntary basis. It is required to register as an exhibitor in our portal and to complete the registration.

Withdrawal of consent
You may withdraw your consent to participate in future customer surveys at any time.
Please send your withdrawal of consent to datenschutz@ghm.de.

Contact form, contacting us via email and registering additional trade fair services

Purpose, data categories and legal basis
As to your personal data which you enter in the contact form on a web page or in contacting us via email, we will store and process such data for the purpose of individual communications with you. Such data include, but are not limited to, the first and last name, address, company name, email address, telephone number and facsimile number.

The processing of such data is made on the basis of a legitimate interest as defined in Art. 6 (1) sentence 1 f) GDPR.

Our interest is to enable you to contact us in a straightforward manner. The data you provide will be processed for the purpose of handling your request as well as for any follow-up questions.

At some of our trade fairs, you may register for additional trade fair services even as a non-registered participant, e.g. for a guided tour of the trade fair or a seminar offered as part of the fair.

The legal basis for storing your data in connection with the aforementioned additional services is Art. 6 (1) sentence 1 b) GDPR.

If a third party as organiser of such additional services should enter into a separate agreement with you, we will forward the data to such third party only after having obtained your consent pursuant to Art. 6 (1) sentence 1 a) GDPR (see also "Recipient of the Data").

Recipients of the data
We store your data on our own servers. Forwarding of data to third parties will only occur in the following events:

Should you have registered for additional services which are not provided by GHM itself, we will forward your request and your personal data to the respective organiser. Then, the organiser will contact you directly to agree on the additional service with you as appropriate.

If the additional service is provided by order and for the account of GHM, an order processing agreement has been made with the respective organiser as provided in Art. 28 GDPR.

Storage duration
GHM will process your data for responding to your requests and/or for performing the additional service. Of course, GHM will erase your data once they are no longer required for the purpose of their use or, as applicable, all contractual regulations with our customers or statutory periods have ceased to apply.

Provision mandatory or required
The provision of your personal data is made on a voluntary basis. However, we can only process your request if you let us know your data and the subject of your request.

Objection and withdrawal of consent
If your requests are processed pursuant to Art. 6 (1) sentence 1 f) GDPR (i.e. this shall not apply to orders for additional services, as in such cases we are required to store your data in accordance with Art. 6 (1) sentence 1 b) GDPR), you are entitled to a right of objection. For information in this regard, please consult:

Information on your right to object pursuant to Art. 21 GDPR.

If in registering for additional services you should have given your consent that we forward your data to third-party organisers for the purpose of entering into a separate agreement, you may withdraw such consent with effect for the future. Please send your withdrawal to: datenschutz@ghm.de

Web analysis, re-marketing and use of tracking tools

Purpose, data categories and legal basis
So-called tracking, re-marketing and/or web analysis tools are used on our website. We use those tools to receive information on visitor behaviour on our website, e.g. on the origin of visitors or viewing duration. Based on such information, we can detect flaws on the website and improve its efficiency.

The legal basis for such processing is your consent in each case, Art. 6 (1) sentence 1 a) GDPR.

Recipients of the data
The following providers of tracking, re-marketing and/or web analysis tools process access data on our behalf for the purpose of user analysis and statistical editing. To this end, we have entered into appropriate order processing agreements with those providers.

For further details on their technical functioning, the tools used, and information on how you can prevent the data transfer (tracking), please consult our Information on the cookies, social plug-ins and tracking technologies used.

Storage duration
GHM as well as the service providers involved will erase your data once they are no longer required for the purpose of their use, if you withdraw your consent with effect for the future or, as applicable, if all contractual regulations with our customers or statutory periods have ceased to apply. For more information, please also consult our Information on the cookies, social plug-ins and tracking technologies used.

Transfer to third countries
The information generated regarding your use of this website is also transferred to third countries and stored there. We may only transfer data to service providers in a third country if appropriate guarantees have been provided (standard data protection clauses adopted by the Commission or the supervisory authorities in a defined procedure) and enforceable rights and effective legal remedies are available. For further information, particularly on the place and duration of storage, please consult our Information on the cookies, social plug-ins and tracking technologies used.

Provision mandatory or required
The provision of your personal data is made in a voluntary manner solely based on your consent. Without such consent, you cannot use our websites.

Profiling
Using the web analysis, re-marketing and tracking tools, we can assess the behaviour of visitors to the website and analyse their interests. In this connection, we prepare a pseudonymous user profile.

Withdrawal of the consent
For details of the opt-out options applied as part of the web analysis and tracking tools, please consult our information on cookies and tracking technologies used.

Registration for the online purchase of trade fair tickets or redemption of a voucher and the following visitor mailing

Purpose, data categories, legal basis
Due to the applicable coronavirus protective provisions, we are obliged to collect contact data and details about our visitors’ stay for contact tracing purposes. This is why it is currently not possible to buy tickets on site. Visitor registration is mandatory.

If you wish to purchase a ticket in advance (PDF ticket), your contact data (first name, last name, company, department, address, email address) and credit card information will be required and processed.

The processing of the data you entered in the registration process takes place in order to transact the ticket purchase and conduct relevant pre-contractual measures as defined in Art. 6 (1) sentence 1 b) GDPR.

The processing of your contact data for contact tracing purposes within the scope of the coronavirus protective provisions is carried out on the basis of Art. 6 (1) S. 1 lit. c GDPR in conjunction with Section 5 of the 14th Bavarian Infection Protection Measures Regulations (BayIfSMV).

The data collection is carried out for the purpose of tracing chains of infection in connection with Covid-19. The legal basis of the processing is Art. 6 para. 1 lit. d GDPR (EU General Data Protection Regulation) for the protection of vital interests.
Use of your data for marketing purposes / visitor mailing

We use your contact data after the completion of visitor registration to inform you about similar events via email as well as for purposes of marketing and optimisation, which allow us to offer you improved customer support and services and continue to optimise our offers (visitor mailing).

The legal basis for distributing visitor mailings following your visitor registration is sec. 7 (3) UWG (German Unfair Competition Act). You may object to receiving visitor mailings at any time. You may do so by emailing datenschutz@ghm.de or by clicking the respective link at the end of a visitor mailing.

Recipients of the data
We host your data on our own servers.

Any transfer of your data will only be made subject to defined conditions and for very specific purposes as described in more detail below:

The members of staff responsible for data collection and processing have access to your personal data collected for contact tracing purposes. Data will only be transmitted to the health authorities if the responsible public authority requests information. Passing on information is otherwise excluded.
Vouchers are provided to you free of cost by an exhibitor or by GHM. The exhibitor or GHM will pay the costs for your visit to the fair, and therefore they are entitled to the contact data you provide (title, first name, last name, address and communication data). Such data are transferred completely.
Exhibitors are free to apply a "lead management" procedure at our fairs to scan your visitor pass or a business card. Such scan process is voluntary. Only by scanning your visitor pass, the relevant exhibitor will receive direct access to your data from the registration. In this connection it is important that none of your banking data or credit card data are disclosed. Only those data you provided for your registration (structural data) will be disclosed. To ensure that your data cannot be read by every barcode scanner, a special software will be provided additionally to read your visitor pass.
In case of events restricted to a specific group of trade visitors, GHM needs the contact data and structural data required to determine your trade visitor status. SIX Payment Service (Europe S.A.) and American Express are responsible for the secure processing of electronic credit card payments. CreditPasf GmbH handles the secure processing of electronic direct debits. PayPal takes over the processing for payments with PayPal. Your credit card information or bank details are not transmitted to GHM and are therefore not stored by GHM.
As part of its comprehensive services, GHM also uses other service providers within Germany, e.g. for the maintenance and administration of the data processing system or the servers. Those partners are subject to the same strict data protection provisions and are closely integrated with the data protection concept of GHM.
We use a German service provider for the distribution of the visitor mailings based on an order processing agreement.
Data shall only be transmitted to the public health department if the competent authority requests information.

GHM will not transfer any other information to third parties, e.g. information on main areas of interest provided voluntarily. To governmental institutions and authorities, personal data will be transferred only as required under legal