Source: http://www.techno-kom.de/en/die-agentur-fur-messe-und-event-privacy-statement/
Timestamp: 2019-04-25 23:44:45+00:00

Document:
In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and to keep-up with our content and services. The collection and use of personal data takes place only on regularly basis in the consent with the user. An exception applies to those cases where the permission of data processing cannot be obtained prior to use of our websites and services for the reasons of fact and the processing of data therefore is permitted by law.
Insofar as we obtain the permission for the processing of personal data of the legal person involved the process is legally based on and regulated by Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR). For the processing of personal data necessary for the performance of a contract with a legal person involved in this contract the processing of data is legally based on and regulated by Art. 6 (1) a of the EU General Data Protection Regulation (GDPR). This also applies to data processing operations necessary to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, the process is legally based on and regulated by Art. 6 para. (1). c of the EU General Data Protection Regulation (GDPR). In the event that vital interests of a legal person or another natural person require the processing of personal data, the processing of data is legally based on and regulated by Art. 6 (1) lit. d of the EU General Data Protection Regulation (GDPR).
If the processing of personal data is necessary to safeguard the legitimate interests and rights of our company and/ or a third party, and if the interests, fundamental rights and freedoms of the legal person subject to the data processing do not prevail over the first interests, the processing of data is legally based on and regulated by Art. 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
The personal data of a legal person will be deleted or blocked as soon as the purpose of the storage is dropped. In addition, the storage of personal data is may be required by European- and/ or National Legislators within the EU territory. Therefore the data storage is legally required and based on regulations, laws or other regulations to which the controller of the data is subject to.
Blocking or deletion of the personal data also takes place when a storage period prescribed by the valid legal regulations expires, unless there is a need for further storage of the personal data for conclusion of a contract or fulfillment of the contract.
The data collected by us are also stored in the log files of our system. Storage of these data together with other personal data of the user does not take place. Also there is no linking between the log files and personal data.
The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
The collected data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting data for providing the website and website services, the data are deleted when the respective website session is completed. In the case of storing of personal data in log files, the collected data will be deleted within a period of time no longer than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of personal data for the provision of the website and the storage of the personal data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
The user data collected through technically necessary cookies will not be used to create user profiles. This proceeding is based on our legitimate interests and the processing of personal data is legally granted according to Art. 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
Legal basis for the temporary storage of personal data and is a legitimate interest in accordance with Article 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website.
We have no control over the storage, processing and use of personal data by Google Inc. Therefore we cannot be held responsible for it.
The collection of data for the provision of this website and the storage of data in log files is essential for a proper operation of this website. There is consequently no ability to raise an objection against this matter from the user’s side.
For the processing of the personal data in context of the sending process your consent is obtained and referred to this privacy statement.
Alternatively, you can contact us via the provided E-Mail addresses to be found under the menu item “Contact Person” of this statement. In this case, the users’ personal data transmitted by E-Mail will be stored.
In this context, there is no disclosure of personal data to third parties. The personal data are used exclusively for processing the conversation between the first and the secondary person..
The legal basis for the processing of personal data transmitted in the course of sending an E-Mail is Article 6 (1) lit. f of the EU General Data Protection Regulation (GDPR).
If the E-Mail contact aims to conclude a contract, then additional legal basis for the processing of the personal data provided is Art. 6 (1) lit. b of the EU General Data Protection Regulation (GDPR).
The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via E-Mail, this also includes our necessary, required legitimate interest in the processing of the personal data provided. Other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as the storage is no longer necessary for the purpose of its collection. For the personal data from the input made in the contact form and those personal data sent to us by E-Mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the statements made in the conversation that the relevant facts have been finally clarified.
All personal data stored in the scope of contacting us will be deleted in this case.
The following list shows all rights of the persons concerned according to the EU General Data Protection Regulation (GDPR). Rights that have no relevance for your own website need not to be mentioned. In that regard, the listing can be shortened.
You may ask the person in charge to confirm if personal data concerning you are processed by us.
(8) The existence of automated decision-making including profiling under Article 22 (1) and (4) of the EU General Data Protection Regulation (GDPR) and, at least in these cases, meaningful information about the logic involved, and the scope and the intended impact of such processing on the data subject.
You have the right to request information about whether your personal information is transferred to a third country and/ or to an internationally operating organization. In this connection, according to Article 46 of the EU General Data Protection Regulation (GDPR) you can request the appropriate guarantees regarding this data transfer.
You have a right to rectification and / or completion of your personal data against the controller, in case that your personal data processed are incorrect and/ or incomplete. The responsible person must make appropriate corrections without delay.
(4) If you objected to the processing pursuant to Art. 21 (1) of the EU General Data Protection Regulation (GDPR) and it is yet uncertain whether the legitimate reasons of the person responsible prevail over your reasons.
If the processing of your personal data have been restricted, these data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union and/ or a Member State.
If the processing of data has been restricted according to the above-mentioned conditions, you will be informed by the person responsible before the restriction is lifted.
(1) The storage of your personal data is no longer necessary for the purposes for which the data were collected and/ or otherwise processed.
(2) You revoke your consent of data processing based on Article 6 (1) lit. a or Article 9 (2) lit. a of the EU General Data Protection Regulation (GDPR) and there is no other legal basis for the processing of your personal data.
(5) The deletion of your personal data is required to fulfill a legal obligation under the law of the European Union (EU) or the law of the Member States to which the controller is subject to.
If the person in charge of the processing of your personal data has made your personal data public and is according to Article 17 (1) of the EU General Data Protection Regulation (GDPR) obliged to delete this data, this person shall take appropriate measures, under taking account of the available technical possibilities and costs of its implementation, to inform other parties in charge for the processing of your forwarded personal data, that you have been identified as being an affected person and that you request the deletion of all personal data as well as any links to such personal data and/ or any copies or replications made of your personal data.
If you have made use of your right of rectification, erasure or restriction of processing the controller is obliged to notify all recipients to whom your personal data have been disclosed to of this to make those party correct or delete the data or restrict the processing of it, unless: this proves to be impossible or involves a disproportionate effort.
In exercising this right, you also have the right to obtain that your personal data are transmitted directly from one person to another party, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data transferability does not apply to the processing of personal data necessary for the performance of a task made in public interest or in the exercise of official authority the data controller is delegated to.
Pursuant to Article 6 (1) lit. e or f of the EU General Data Protection Regulation (GDPR), at any time you have the right to take an objection against the processing of your personal data for reasons that arise from your particular situation. This also applies to profiling based on these provisions.
The controller will no longer process your personal data unless he can claim compelling legitimate reasons for processing that outweigh your interests, rights and freedoms or the processing is for the purpose of enforcing, exercising or defending legal claims.
If your personal data are processed for direct marketing purposes, at any time you have the right to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing activities.
Regardless of Directive 2002/58/EC and in the context of use of information society services, you have the option of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your consent to data privacy statement at any time. The revocation of consent does not affect the legality of the processed personal data before the revocation was stated..
However, these decisions are not allowed to be based on special categories of personal data under Art. 9 (1) of the EU General Data Protection Regulation (GDPR), unless Art. 9 (2) lit. a or g of the EU General Data Protection Regulation (GDPR) applies and reasonable measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3) above, the controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to state the own position and to challenge the decision made.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of the European Union that is your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data is against or violates the legal requirements of the EU General Data Protection Regulation (GDPR).
The supervisory authority to which the complaint has been submitted to shall inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the EU General Data Protection Regulation (GDPR)..

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 9
 Art. 9