Data Protection Declaration

Data Protection Declaration
Thank you for your interest in our website. In the following Data Protection Declaration we inform you about the use and protection of data that you provide to us by visiting our website. The protection of your data is very important to us and it goes without saying that we therefore observe all relevant applicable data protection regulations. In the following we would like to provide you with information on how we ensure that your data is protected and which data are collected for which purposes via our online offerings.


General information

1. Name and contact details of the data controller
PREMIUM Exhibitions GmbH
Tempelhofer Ufer 36
10963 Berlin
E-mail: info@premiumexhibitions.com

2. Contact for issues related to data protection
You can contact our Data Protection Officer Marco Tessendorf (procado Consulting, IT- & Medienservice GmbH, Warschauer Str. 58a, 10243 Berlin) by e-mailing datenschutz@premium-group.com or at our postal address by adding ‘For the attention of the Data Protection Officer’.

3. Your rights regarding your data
In accordance with the EU General Data Protection Regulation (GDPR), you have the following rights regarding the personal data relating to you:
• Right to information
• Right to rectification
• Right to deletion
• Right to restriction of processing
• Right to data portability
Should you wish to exercise your rights, please contact our Data Protection Officer.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

4. Hosting of the website
The website of PREMIUM Exhibitions GmbH is hosted by 1&1 IONOS Cloud GmbH, Greifswalder Str. 207, 10405 Berlin. As part of our collaboration we will not pass any personal data regarding your visit to our website directly to 1&1 IONOS Cloud GmbH. It may nonetheless happen that 1&1 IONOS Cloud GmbH has at least potential access to personal data, e.g. in the context of carrying out maintenance work. Since ‘order processing’ still takes place in these cases, in the meaning of Art. 28 GDPR, we have concluded a data protection agreement with 1 & 1 IONOS Cloud GmbH in accordance with this provision. The protection of your personal data is also guaranteed within this agreement.
The use of 1 & 1 IONOS to host our website serves the purpose of maintaining the legitimate interest of providing our website to you so that it is the best it can be from a technical perspective. The legal basis for this is Art. 6 para. 1 lit. f) GDPR.

Collecting and using your data

1. When you visit our website

a) Access data
(1) Description of the data processing
In the case of merely informative use of our website, i.e. if you do not register or otherwise provide us with information, our system automatically records data and information that your browser transmits to our servers (known as access data):
• your IP address,
• the country from where you are accessing our websites,
• the website that you viewed last before visiting our websites,
• the search term used if you landed on our websites via a search engine,
• the actual web pages that you visit on our website,
• your internet service provider,
• your web browser and operating system that you used to access our websites,
• the files that you download from our websites,
• the date and time of your visit and the length of time you spend visiting our websites.
The data will also be stored in log files on our system. These data are not stored together with other personal data pertaining to the user.
(2) Legal basis for the data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.
(3) Purpose of the data processing
The temporary storage of the data by the system is necessary in order to enable you to view our website. To this end the user’s IP address in particular must be stored for the duration of the session.
Storage in log files takes place in order to ensure that the website is able to function correctly. In addition, the data are used to guarantee the security of our information technology systems. The data are not analysed for marketing purposes in this context.
For these purposes, our legitimate interest in the processing of data is according to Art. 6 para. 1 lit. f GDPR.
(4) Duration of data storage
The data are deleted as soon as they are no longer necessary for the purposes for which they were collected. Where data are collected to enable the provision of the website, the data are deleted when the respective session ends. In the event of the data being stored in log files this will take place at the latest 30 days afterwards.
(5) Opportunity to opt out
The collection of the data to enable the provision of the website and storage of the data in log files is essential for operating the web page. Website users therefore do not have an option of opting out.

b) Cookies
(1) Description of the data processing
In addition to the aforementioned data cookies will be stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using, and are the means by which the entity (in this case us) that places the cookie receives certain information. This website uses the following types of cookies. The scope and functionality of these cookies is outlined as follows:
• transient cookies,
• persistent cookies.
Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a session ID with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised again if you return to our website. The session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can delete the cookies at any time using the security settings in your browser.
(2) Legal basis for the data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
(3) Purpose of the data processing
The purpose of utilising cookies is to make it easier for users to use the websites. Our website can in principle be used without the utilisation of cookies. Some functions cannot be enabled without cookies being deployed, however.
(4) Duration of data storage, opportunities to opt out
Cookies are stored on the user’s computer and transferred to us from this computer. As the user you therefore also have full control over the use of cookies. By modifying your browser settings you can deactivate or limit the transferral of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically.

c) Answering contact requests and communicating with users
(1) Description of the data processing
On our website users have the option of contacting us through the e-mail addresses provided, or through a contact form. In this case, the user’s personal data submitted with the e-mail, or the data entered in the contact form, are stored.
In this context no data are passed on to third parties. The data are used solely for processing the enquiry.
(2) Legal basis for the data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR. Where, in individual cases, making contact is targeted at implementing precontractual measures or concluding an agreement, the legal basis for processing is Art. 6 para. 1 lit. b GDPR.
(3) Purpose of the data processing
The data processing serves as the means to process the user’s contact request. This is also the necessary legitimate interest for processing the data.
(4) Duration of data storage
The data are deleted from the database as soon as they are no longer necessary for the purposes for which they were collected. This is then the case in the event of contact being made by e-mail or via the contact form, if it can be inferred from the circumstances that the underlying concern has then been clarified. The information is deleted from the database independently of this at the latest after 90 days.
(5) Opportunity to opt out
Those who have submitted enquiries can at any time e-mail datenschutz@premium-group.com to request that their personal data that they submitted to us by e-mail or via the contact form be deleted from the database.

d) Newsletter
(1) Description and purpose of the data processing
On our website you have the option of subscribing to our newsletter that we send out regularly to tell you about our events, and the tickets for and invitations to these events.
We use a double opt-in procedure for those subscribing to our newsletter. This means that, after your registration, we will send you an e-mail to the e-mail address you specified to ask you to confirm that you would like to receive the newsletter. If you do not confirm your subscription within 24 hours your data will automatically be deleted within 30 days and the invitation will consequently expire. Moreover, in each case we will save your IP addresses and the timings of when you registered and confirmed your subscription. The purpose of the procedure is to prove your registration and, where applicable, to bring any possible misuse of your personal data to your attention. The only information we require to send you the newsletter is your e-mail address.
(2) Legal basis for the data processing
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, insofar as we store data, in order to prove your registration and, where applicable, to enable us to bring any possible misuse of your personal data to your attention. We store your e-mail address with your consent. Legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
(3) Duration of data storage
The data are deleted as soon as they are no longer necessary for the purposes for which they were collected. The data transmitted by the user during registration are therefore stored for as long as the newsletter subscription is active.
(4) Opportunity for objection and revocation
You may revoke your consent to the newsletter being sent at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, or by e-mailing datenschutz@premium-group.com. The consequence of revoking your consent is that the data that were collected during the registration process will be deleted.
(5) Newsletter service provider
We have outsourced the mailing of our newsletter and the associated processing of the aforementioned data to the service provider Newsletter2GO: Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin. The data processing contract concluded pursuant to Art. 28 GDPR requires the service provider to comply with the data protection regulations. Further information regarding the data protection policy of the service provider is available at: https://www.newsletter2go.de/datenschutz/.
(6) Newsletter tracking with Pardot
We would like to point out that we evaluate your user behaviour when sending out the newsletter. We use the Pardot analysis tool from salesforce.com Inc., The Landmark at One Market, Suite 300, San Francisco, CA 94105, USA. For this analysis, the e-mails sent contain ‘web beacons’. These are single-pixel files that are called up when opening the newsletter on our service provider’s server. We link the above access data and the web beacons to your e-mail address and an individual ID for the evaluations.
This information can be assigned to individual newsletter recipients for technical reasons. However, it is neither our objective nor that of the service provider to observe individual users. The evaluations rather serve to help us identify our users’ reading habits and to adapt our content to suit them, or to send different content depending on our users’ interests. Herein also lies our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
You may at any time revoke the evaluation of your user behaviour by clicking on the unsubscribe link provided in every newsletter e-mail, or by e-mailing us at datenschutz@premium-group.com, or by contacting us via another method. The information will be stored for as long as you are subscribed to the newsletter. Once you have unsubscribed we store the data in a purely statistical and anonymous way.
We only work with service providers who offer sufficient guarantees that the appropriate technical and organisational measures have been met that guarantee adequate protection of your rights. Salesforce.com is subject to the EU-US Privacy Shield and thus provides an additional guarantee to comply with European data protection law if data are processed in the US.
Furthermore, we have concluded a ‘Data Processing Agreement’ with Salesforce. This is a contract in which Salesforce commits itself to protecting our users’ data; to processing this data in compliance with the data protection stipulations in our agreement; and, in particular, not to pass the data on to third parties.

e) Registration for PREMIUM GROUP events
(1) Description and purpose of the data processing
You can register for the PREMIUM GROUP events on our website. When registering, the data you provide (your name, your e-mail address, your telephone number if applicable, your position in the company, the sector in which the company operates) will be stored by us.
(2) Legal basis for the data processing
The legal basis is the fulfilment of the underlying agreement in the context of registering for one of our events in the sense of Art. 6 para. 1, sentence 1, lit. b) GDPR.
(3) Duration of data storage
The length of time for which the personal data collected during the process of registration for the PREMIUM GROUP events are stored is based on the respective legal retention period. Once the deadline has passed we delete the corresponding information provided that it is no longer required for initiating or fulfilling a contract.
(4) Opportunity to opt out
You can at any time e-mail datenschutz@premium-group.com to request that the personal data you submitted to us when registering be deleted from the database. Your data will be deleted immediately provided the legal requirements are met. You can at any time revoke the use of your personal data for the purposes outlined above. Please note, however, that, if you revoke your registration, you will not be able to register for our events.

f) Ordering PREMIUM GROUP event tickets online
(1) Description and purpose of the data processing
If you order tickets to PREMIUM events via our website, your name, e-mail address, your telephone number if applicable, your position in the company and the sector in which the company operates will be stored by us to enable us to process your order. Following receipt of the order you will receive an order confirmation with an invoice by e-mail.
(2) Legal basis for the data processing
The legal basis is the fulfilment of the underlying agreement in the context of registering for one of our events in the sense of Art. 6 para. 1, sentence 1, lit. b) GDPR.
(3) Duration of data storage
The length of time for which the personal data collected in connection with online orders made are stored is based on the respective legal retention period. Once the deadline has passed we delete the corresponding information provided that it is no longer required for initiating or fulfilling a contract. You can find further information on online ticketing in our General Ts&Cs: https://premium-group.com/de/general-terms-and-conditions.
(4) Opportunity to opt out
You can at any time e-mail datenschutz@premium-group.com to request that the personal data you submitted to us when ordering a ticket online be deleted from the database. Your data will be deleted immediately provided the legal requirements are met. Please note, however, that, if you revoke your registration, you will not be able to register for our events.

g) Applying for a stand
(1) Description and purpose of the data processing
You can apply online for a stand via our website. For this purpose, we collect the following mandatory information: company, title, contact person (surname, first name), street, house number, postal code, town, country, telephone number and e-mail. Entering additional, separately marked data (fax, homepage) is voluntary.
(2) Legal basis for the data processing
The legal basis is the fulfilment of the underlying agreement in the context of registering for one of our events in the sense of Art. 6 para. 1, sentence 1, lit. b) GDPR.
(3) Duration of data storage
The length of time for which the personal data collected in connection with applying for a stand are stored is based on the respective legal retention period. Once the deadline has passed we delete the corresponding information provided that it is no longer required for initiating or fulfilling a contract.
(4) Opportunity to opt out
You can at any time e-mail datenschutz@premium-group.com to request that the personal data you submitted to us when applying for a stand be deleted from the database. Your data will be deleted immediately provided the legal requirements are met. Please note, however, that, if you revoke your registration, you will not be able to register for our events.

h) Processing for representing digital brands
(1) Description and purpose of the data processing
As part of applying for a stand at one of our events there is the option of displaying your brand information on our digital platforms with your consent. To do this, your brand information and your contact details given will be displayed on the PREMIUM GROUP websites and the PREMIUM APP.
We use our partner company, JOOR, to carry out the digital processing of this information. Our partner JOOR, Inc. manages the www.joor.com website. This is the basis for our digital brand profile on the PREMIUM GROUP App. In addition, our Brand List on the PREMIUM website links to our partner.
(2) Legal basis for the data processing
The legal basis for the use of your data for the purposes specified above is your express consent in the sense of Art. 6 para. 1 lit. a) GDPR.
(3) Duration of data storage
Your data are stored in the context of your having provided consent until you revoke your consent, or until the purpose of the processing has been fulfilled. Furthermore, any applicable statutory retention periods may preclude deletion.
(4) Opportunity to revoke
You may at any time revoke the consent you have previously granted without providing reasons for doing so. Should you revoke your consent your personal data will no longer be used for the purposes specified from this point of time. Any applicable statutory retention periods may potentially preclude deletion (see above).

i) Use of PREMIUM GROUP App

 
(1) Description and purpose of the data processing
 
On our website you have the possibility to get to our PREMIUM GROUP APP. If you use the link (click
on "Find out more") you will be forwarded directly to the Apple App Store. Please note that we have no
influence on the processing of your data at Apple. As soon as you use the link to our Premium Group
App in the App Store, the data protection regulations of Apple Inc. One Apple Park Way, Cupertino,
California, USA, 95014 apply. Further information on data processing in the App Store can be found
here: https://www.apple.com/de/legal/privacy/de-ww/.
Further information on the use and protection of your personal data within the framework of APP can
be found in the PREMIUM GROUP APP data protection declaration under http://app.premiumexhibitions.com/app-data-v17/live/impressum.html.

2. Analysis tools and advertising

a) Website analysis with Google Analytics
(1) Description and purpose of the data processing
This website uses Google Analytics, a web analysis service provided by Google. Google Analytics uses cookies that are stored on your computer and enable the user’s browsing behaviour on our website to be analysed. The information generated by the cookie regarding the use of this website is usually transmitted to a Google server in the US and stored there.
We use Google Analytics to analyse the use of our website and enable us to regularly improve the site. The statistics generated help us to improve our offering and make it more interesting for you the user.
This website uses Google Analytics with the extension that anonymises the IP addresses. Your IP address is thereby transmitted to Google in a truncated form, which means personal identifiers can be excluded. Insofar as the data collected about you includes a personal reference, it is therefore immediately excluded.
(2) Legal basis for the data processing
The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR. In exceptional cases where personal data is transmitted to the US Google has signed up to the EU-US Privacy Shield.
(3) Duration of data storage
The data are deleted as soon as they are no longer required for our purposes. This takes place after a period of 14 months.
(4) Opportunities to opt out
You can prevent the storage of cookies by configuring the settings in your browser to reject cookies; however, should you choose to do so, you may not be able to make full use of all of the functions of this website. You may also prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available here. As an alternative to the browser plug-in, or within browsers on mobile devices, please click on the following link to install an opt-out cookie that will in future prevent collection by Google Analytics within this website (this opt-out cookie only functions in this browser and only for this domain; if you delete your cookies in this browser you will need to click on this link again to reactivate it): deactivate Google Analytics

b) Website analysis with Pardot
(1) Description and purpose of the data processing
This website also uses the analysis tool Pardot from salesforce.com Inc. A maximum of two cookies are set by Pardot Services. These include a ‘visitor cookie’ and a ‘Pardot app session cookie’. An identification number is generated by the visitor cookie, which is used to identify the browser of the website visitor. The identification number is a generated numerical code that has no meaning outside of Pardot Services. The 'Pardot app session cookie' is only set if a customer logs into the Pardot app as a user. All cookies only receive the numerical code generated.
We use Pardot to enable us to analyse and regularly improve the use of our website. To this end, we analyse the user and click behaviour on our websites in order to be able to tailor our communication better to customers’ needs.
(2) Legal basis for the data processing
The legal basis for the use of Pardot is Art. 6 para. 1 sentence 1, lit. f GDPR. In the event personal information is transferred to the United States, Salesforce has signed up to the EU-US Privacy Shield and through this offers a guarantee that it will adhere to European data protection law.
(3) Duration of data storage
The data are deleted as soon as they are no longer required for our purposes. This takes place after a period of 3 months.
(4) Opportunities to opt out
You can prevent the storage of cookies by configuring the settings in your browser to reject cookies; however, should you choose to do so, you may not be able to make full use of all of the functions of this website. Alternatively, please click on the following link to install an opt-out cookie that will in future prevent collection by Pardot within this website (this opt-out cookie only functions in this browser and only for this domain; if you delete your cookies in this browser you will need to click on this link again to reactivate it): deactivate Pardot analysis

3. Our social media pages

a) Data processing via social networks
We maintain publicly accessible profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Instagram and Twitter can in principle analyse your user behaviour in depth if you visit their websites or a website with integrated social media content (e.g. ‘Like’ buttons or advertising banners). By visiting our social media pages this triggers numerous processing operations relating to data protection. Specifically:
When you are logged into your social media account and visit our social media pages, the operator of the social media portal can associate this visit with your user account. Your personal data may also potentially be collected when you are not logged in, or if you do not have an account with the social media portal in question. In this case, for example, the data are collected via cookies that are stored on your end device; or through recording your IP address.
Using the data gathered in this way the operators of the social media portals can create user profiles that log your preferences and interests. In this way operators can show you interest-based advertising both within and outside of the respective social media pages. Where you have an account with the relevant social network the interest-based advertising can be shown on all devices that you are or were logged into.
Please note also that we cannot trace all processing operations on social media portals. Depending on the provider, therefore, further processing operations may potentially be carried out by the operators of the social media portals. For details on this please refer to the conditions of use and privacy policies of the respective social media portals.
Legal basis
Our social media pages are designed to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks are based, where applicable, on different legal bases that are specified by the operators of the social networks (e.g. consent in the sense of Art. 6 para. 1 lit. a GDPR).
Responsible entity and assertion of rights
When you visit one of our social media pages (e.g. Facebook), we are jointly responsible together with the operator of the social media platform for the data processing operations triggered by your visit. You may in principle assert your rights (to disclosure, rectification, deletion, restriction of processing, data portability and right to appeal) to both us and the operator of the social media portal in question (e.g. Facebook).
Please note that, despite our joint responsibility with the social media portal operators, we do not have full influence over the data processing operations carried out by the social media portals. Our options are determined by the company policy of the respective provider.
Storage period
The data we collect directly via the social media pages are deleted by our systems as soon as the purpose for which they were collected expires; or if you request the deletion; if you revoke your consent to the data being stored; or if the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – especially retention periods – remain unaffected.
We have no influence on the length of time your data are stored by operators of social networks for their own purposes. For further information on this please refer to the operators of social networks directly (e.g. in their privacy statements, see below).

b) Specific social networks
Facebook
We have a Facebook profile. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook holds certification in accordance with the EU-US Privacy Shield.
You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in. You can find further details in Facebook’s privacy statement.
Twitter
We use the Twitter short messaging system. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter holds certification in accordance with the EU-US Privacy Shield.
You can adjust your Twitter privacy settings independently in your user account. To do this, click on the following link and log in. You can find further details in Twitter’s privacy statement.
Instagram
We have an Instagram profile. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For further details on how the company handles your personal data please refer to Instagram’s privacy statement.

 

4. Transfer of data to third parties

In order to be able to fulfil our contractual obligations and services, we pass on your data in part to companies associated with PREMIUM and to selected organisations and organisers of national and international trade shows, exhibitions, conferences and events (including to facilitate registering and avoid multiple registrations), to exhibitors at our trade shows and events, as well as to selected partner companies, which process the personal data on our behalf and with whom we have concluded an order processing agreement pursuant to Art. 28 GDPR. These services include, for example, ticketing for our trade shows and events, mailings, stand services and catalogue entries.
Furthermore, PREMIUM and our exhibitors and collaboration partners have the option of using electronic devices to call up your personal data via a scan function, and of using, processing and storing the data to the extent necessary, and, among other things, of providing you with special offers tailored to your interests, insofar as you consent to having your ticket scanned. This scan is on a voluntary basis. By allowing your ticket to be scanned you are giving your express permission for the party scanning it (in particular the exhibitor) to gain direct access to the data you entered when registering (structural data), with the exception of bank account or credit card details. Legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
Any further disclosure of personal data to third parties will be carried out solely in the context of order data processing as well as, in individual cases, if you have agreed in advance or if we are required by law to disclose the data to the public authorities. By agreeing to the scan, you furthermore confirm that you agree to being contacted by telephone or e-mail by the party effecting the scan in connection with your visit to the trade shows and events (corresponding to the provision and submission of a ‘digital business card’). Legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
You may revoke your consent at any time. You may revoke your consent by clicking on the link provided in every e-mail, by e-mailing datenschutz@premium-group.com or by sending a message to the contact specified in the legal information.

 

5. Marketing
PREMIUM, our partner company Joor, Inc., our cooperation partner Messe Frankfurt and our exhibitors and collaboration partners are able to use data collected for their own marketing purposes, insofar as you have specifically consented to such use. Please refer to our General Terms of Service. Moreover, we may pass on your data to providers whom we have commissioned to render PREMIUM services or to relay our PREMIUM newsletters for these purposes, where we have concluded an appropriate contract with the third parties involved regarding the order processing.
You may revoke your consent at any time. You may revoke your consent by clicking on the link provided in every e-mail, by e-mailing datenschutz@premium-group.com or by sending a message to the contact specified in the legal information.

 

6. Links
Our website contains links or shortcuts through to other websites, e.g. to external websites and offers belonging to our partner companies. We take reasonable care to check these links and the external websites in question usually have their own privacy policies. For these policies that we have no association with we expressly assume no liability and we ask you to ensure you do your own independent research on the privacy practices of the provider of the respective external website. 

Correct as of: 26. November 2019