1. Data controller/contact
a. The data controller responsible under the German Federal Data Protection Act is:
b. Data Protection Officer
Data protection officer
e-mail: firstname.lastname@example.org .
2. Personal data
3. Collection and use of your data
Various data on the user are required in order to register for the "interzum award". The following mandatory details are necessary:
Your e-mail address
Address (place, street, house number, postcode)
General e-mail address
Customer number at Koelnmesse
These data are necessary in order to set up and manage a user account for you. Not least we require these and possibly other data in order to be able to respond to possible future queries from you and to communicate with you for the execution of the award.
We process these data in order to be able to enable you to participate in the award and to fulfil the respective contracts agreed with you pursuant to Article 6 (1) (b) GDPR. The data is also processed for the promotion of our events and services (on the basis of Section 7 Paragraph 3 UWG (German Fair Trade Practices Act)) and for optimization and for market research and opinion research.
Insofar as we, as described above, require your data for the purposes of providing the functions of our award registration, you are contractually obliged to provide us with these data. Without these data we are unable to provide you with these functions.
We reserve the right pursuant to Section 7 (3) UWG to send you by e-mail information on goods and services similar to those that you have purchased from us. You can object to the receipt of such information via e-mail at any time. Every e-mail contains the information about how you can unsubscribe from the receipt of future e-mails.
5. Information on cookies
As part of the registration for the "interzum award", only a technical cookie will be used to verify you as an authorized user during your registration.
6. Transfer of data
In principle, a transfer of your personal information without your prior express consent will only take place in the following cases:
When it is required for the investigation of an unlawful use of our services or for the prosecution, personal data are transferred to the law-enforcement authorities and if necessary to injured third parties. However, this only occurs when there are concrete indications of unlawful or abusive behaviour. A transfer can also take place when it is necessary for the enforcement of terms and conditions of use or of other agreements. We are also legally obliged to provide information to specific public authorities on request. These are prosecutorial authorities, authorities that prosecute misdemeanours punishable by fines and the financial authorities. The transfer of this data takes place on the basis of our legitimate interest in combatting misuse, the prosecution of criminal offences, the safeguarding, assertion and enforcement of claims and the fact that your rights and interests with regard to the protection of personal data are not overriding pursuant to Article 6 (1) (f) GDPR.
A possible transfer of the personal data is justified by our legitimate interests in adapting our business form to economic and legal factors as required and the fact that your rights and interests with regard to the protection of personal data are not overriding pursuant to Article 6 (1) (f) GDPR.
7. Changes of purpose
The processing of your personal data for purposes other than those described will only take place to the extent permitted by a legal regulation or subject to your consent for the change of purpose of the data processing. In the event of further processing for purposes other than those for which the data were originally collected, we will inform you of these other purposes before the further processing and make all relevant information available to you.
8. The deletion of your data
We delete or anonymize your personal data as soon as they are no longer required for the purposes according to the aforementioned items for which we collected them. As a rule, we store your personal data for the duration of your user relationship with respect to the website.
After the expiry of these periods of notice, the data are deleted, insofar as these data are no longer required due to legal retention periods, for criminal prosecution or for the safeguarding, assertion or enforcement of legal claims. In this case, they are locked. The data are then no longer available for further use.
9. Automatic case-by-case decision making or profiling measures
We do not use any automated processing steps in order to reach a decision – including profiling – in connection with the registration for the interzum award.
10. Your rights as an affected individual
10.1 Right to information
Pursuant to Article 15 GDPR, you have the right to request us at any time to provide you with information concerning personal data relating to you that we process. You can make this request by sending a postal letter or e-mail to the above address.
10.2 Right to rectification of incorrect data
You have the right to request us to immediately rectify your personal data if they are inaccurate. To do so, please contact the above addresses.
10.3 Right to erasure
You have the right to obtain from us the erasure of personal data on the grounds described in Article 17 GDPR. These grounds especially give you the right to erasure if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the personal data have been unlawfully processed, if we have received an objection to the processing, or the personal data have to be erased in compliance with a legal obligation in Union or Member State law to which Koelnmesse is subject. With regard to the duration of the data storage, see Item 13 of this data protection declaration. To exercise the aforementioned right, please contact the above addresses.
10.4 Right to restriction of processing
You have the right to request us to restrict processing pursuant to Article 18 GDPR. This right applies, in particular, to the following cases: When the accuracy of the personal data is contested between the user and ourselves, for a period enabling us to verify the accuracy of the personal data; the user has an existing right to erasure but opposes the erasure of the personal data and requests the restriction of their use instead; the data are no longer needed for our purposes, but they are required by the user for the establishment, exercise or defence of legal claims; the user has objected to processing pending the verification whether our legitimate grounds override those of the user. To exercise the aforementioned right, please contact the above addresses.
10.5 Right to data portability
You have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR. To exercise the aforementioned right, please contact the above addresses.
10.6 Right to object
Pursuant to Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning yourself which is based on point (e) or (f) of Article 6 (1) GDPR. In that case, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
10.7 Right of appeal
If you have a complaint, you also have the right to appeal to the responsible regulatory authority.
The responsible regulatory authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
Tel.: +49 211/38424-0
Fax: +49 211/38424-10
Status: 1 December 2020