The protection of your privacy as well as the security of all business data when processing personal data is an important concern for us, which we consider in our processes. Here we inform you in detail about the handling of your data.

Controller according to Art. 4 para. 7 EU-General Data Protection Regulation (GDPR)

HINTE Expo & Conference GmbH

Bannwaldallee 60 76185 Karlsruhe

Phone: +49 72193133-0

E-Mail: info@hinte-messe.de

Data protection officer of the controller

The data protection officer can be reached at
E-Mail: datenschutz@hinte-messe.de

1. Rights of the data subject (Art. 15. GDPR)

In the following, we will inform you about your data subject rights. You can exercise these rights at any time and contact us directly for this purpose. If you request these rights from us, we will examine them in detail, consid-ering the associated legal requirements and conditions. If necessary, we will request further information from you. We will explain the results of our examination and our procedure for fulfilling your request to you in detail. It is possible that we will not be able to fully comply with your requests in the way you would like.
This should not prevent you from claiming your rights from us or from inquiring with us in this regard. We will be happy to answer any questions you may have.

a) Right of access (Art. 15 GDPR)
In accordance with the law, you have the right to request information from us at any time as to whether and which of your personal data is being processed by us. This also includes information on the purposes of pro-cessing, if applicable, recipients to whom we have disclosed your data, the planned storage period and, if appli-cable, information on the origin of this data if we have not collected it directly from you. In addition, you have
the right to a one-time free copy of your personal data stored by us. We reserve the right to charge a reasonable administrative fee for making the following copies.

b) Right of rectification (Art. 16 GDPR)
You have the right to request us to correct any inaccurate data we have stored about you. This also includes the right to have incomplete personal data completed.

c) Right to erasure (Art. 17 GDPR)
You have the right to request us to delete data that we have stored about you. If we have published data about you, this also includes our obligation, within the framework of the "right to be forgotten" pursuant to Article 17 (2) of the GDPR, to forward your request to delete all links to this data and copies or replications of this data to other controllers of this published personal data, considering available technology and implementation costs.

d) Right to restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict the processing of data that we have stored about you. After that, processing of this data is only possible with your consent or for a few legally defined purposes.

e) Right to object to processing (Art. 21 GDPR)
Insofar as we base the processing of your personal data on the balance of interests, you can object to the pro-cessing. This is the case if the processing is not necessary for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds based on which we will continue the processing. Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your advertising objection via the contact channels listed above.

f) Right to revoke consent under data protection law (Art. 7 GDPR)
If you have given your consent to the processing of your data, you may revoke it at any time in accordance with Article 7 (3) of the GDPR. Such revocation affects the permissibility of processing your personal data after you have expressed it to us.

g) Right to data portability (Art. 20 GDPR)
You have the right to receive from us personal data that you have provided to us in a structured, common and machine-readable format for the purpose of transferring it to another controller. At your request and considering the available technical possibilities, this also includes direct transfer from us to the other responsible party.

h) Right of appeal to a supervisory authority (Art. 13 GDPR)
You have the right to lodge a complaint about our processing of data relating to you with a data protection supervisory authority at any time. You can reach the responsible data protection authority at:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (BfDI), Königs-traße 10a, 70173 Stuttgart

i) Automated decision-making including profiling (Art. 22 GDPR)
You have the right to obtain information about the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

2. legal basis for the processing of personal data (Art. 6 GDPR)

(1) Insofar as we obtain the consent of the data subject for processing operations involving personal data, this shall be based on the legal basis of Art. 6 (1) a of the EU General Data Protection Regulation (GDPR).
(2) When processing personal data that is necessary for the performance of a contract to which the data sub-ject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
(3) Insofar as processing of personal data is necessary for compliance with a legal obligation to which our com-pany is subject, Art. 6 (1) c GDPR serves as the legal basis.
(4) In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR shall serve as the legal basis.
(5) If the processing is necessary to protect a legitimate interest of our company or a third party and the inter-ests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) (f) GDPR shall serve as the legal basis for the processing.

3. information about the collection of personal data

4. Data deletion and storage duration

(1) The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ex-pires.
(2) Storage may also take place if this has been provided for by the European or national legislator in Union reg-ulations, laws or other provisions to which the controller is subject.
(3) Data shall also be blocked or deleted if a storage period prescribed by the standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

5. Usage of Cookies

6. Further functions & offers of our company website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must usually provide additional personal data that we use to provide the respective service and for which the data processing principles apply. Mandatory data is marked with an aster-isk. Information in fields not marked in this way is purely voluntary.
(2) When you contact the service provider by e-mail, your e-mail address and, if you so indicate, your name, telephone number and [...] will be stored by us to answer your questions.
(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
(4) Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, con-tracts or similar services together with partners. You will receive more information about this when you provide your personal data or below in the description of the offer.
(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
a) Inxmail Newsletter
(1) We use the "Inxmail" service of Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany, to send our newsletter. The data stored during registration is transmitted to Inxmail GmbH and stored by Inxmail GmbH. The data entered during registration will not be transmitted to other third parties.
(2) Only your email address is required for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally.
(3) We use the so-called double opt-in procedure to register for our newsletter. This means that after your reg-istration, Inxmail will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter. In order to prove valid consent, Inxmail stores your IP address, the date and time of the request for the confirmation link and the recipient's email address in a log file.
(4) We would like to point out that Inxmail uses so-called newsletter tracking in its newsletters. In this process, recipient reactions (opening a mailing, clicking on text and image links, downloading images with an email pro-gram) are recorded and stored anonymously for statistical purposes. It is not possible to draw conclusions about individual users from the stored data.
If you have previously given your express consent, the aforementioned recipient responses will be recorded and stored on a personal basis. This enables Inxmail to better tailor the content of the newsletter to the per-sonal interests of the user.
(5) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the news-letter. You can declare the revocation by clicking on the unsubscribe link provided in every newsletter e-mail. Any existing consent to the collection of data on the personal usage behaviour of the newsletter will also expire with this.
(6) The processing is based on your consent in accordance with GDPR Art. 6 Para. 1 lit. a.

7. Web Analytics & Third-Party Services

The legal basis for the use of locally deployed web analysis tools is Art. 6 para. 1 p. 1 lit. f GDPR, i.e., the protection of our legitimate interests in consideration of the interests of our website visitors. Our interest is the analysis of the use of our website by our website visitors, to improve our offer and to make it more interesting for you as a user. If the analysis tool used also serves other purposes or we use it for other interests, we will inform you about this directly in the explanations for the respective analysis tool.
The legal basis for the use of third-party providers to perform web analytics is based on Art. 6 para. 1 p. 1 lit. a.

a) Google Maps 

(1) On this website, we use the Google Maps service by displaying interactive maps directly on our website and enabling you to use the map function conveniently. The legal basis for the use of the plug-in is Art. 6 para. 1 p. 1 lit. a GDPR. Consent is given through your selection in the cookie banner. (2) By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. (3) For more information on the purpose and scope of data collection and its processing by the plug-in pro-vider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland; http://www.google.de/intl/de/policies/privacy.

b) Google Analytics
(1) This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Ana-lytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated using cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other con-tracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP ad-dress be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this web-site, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
(3) You may refuse the storage of cookies by deselecting the category "Analytics & Performance" in the cookie banner. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, thus excluding the possibility of personal references. Insofar as the data col-lected about you is related to a person, this is therefore immediately excluded, and the personal data is thus immediately deleted.
(5) For data processing in connection with Google Analytics by Google, our company has concluded a data pro-cessing agreement based on the EU standard data protection clauses with the service provider.
(6) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
User conditions: http://www.google.com/analytics/terms/de.html
Overview about data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy.

c) YouTube
(1) We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website.
(2) The legal basis for the use of the plug-in is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.
(3) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market re-search and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network
about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also receive further information on your rights and setting options for pro-tecting your privacy: YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy.

8. special forms of use of our website

9. Definitions

People under the age of 16 may not submit any personal data to us without the permission of their legal guardians. In pursuance of Article 8 of the GDPR, children under 16 years of age may only grant such consent with the permission of their legal guardians. Personal data of minors shall not be knowingly collected or processed.

a) Personal Data

Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an iden-tification number, location data, an online identifier or to one or more factors specific to the physical, physio-logical, genetic, mental, economic, cultural or social identity of that natural person

b) Processing
Any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

c) Restriction of Processing
The marking of stored personal data with the aim of limiting their processing in the future.

d) Profiling
Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, loca-tion or movements.

e) Pseudonymisation
The processing of personal data in such a manner that the personal data can no longer be attributed to a spe-cific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not at-tributed to an identified or identifiable natural person.

f) Controller
The natural or legal person, public authority, agency or other body which, alone or jointly with others, deter-mines the purposes and means of the processing of personal data; where the purposes and means of such pro-cessing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law

g) Processor
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

h) Consent
The data subject any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agree-ment to personal data relating to him or her being processed.

State: 27.08.2021