Skip to Main Content

Privacy Policy for the Ticket Shop of MESSE ESSEN GmbH

1. Data Controller and Data Protection Officer

Data Controller:

MESSE ESSEN GmbH
Messeplatz 1, D-45131 Essen
Phone: +49 (0) 201 7244-0
E-Mail: info@messe-essen.de
Website: www.messe-essen.de

CEO: Oliver P. Kuhrt
Chairman of the Supervisory Board: Thomas Kufen (Lord Mayor)

Data Protection Officer:

SystemDatenschutzConsulting
Rebenlaube 12, 45133 Essen
E-Mail: r.schroeder@systemdatenschutzconsulting.de
Website: www.systemdatenschutzconsulting.de
To ensure the rights of those affected: datenschutz@messe-essen.de

2. Registration, Ticket Purchase, and Contract Processing

  • Purpose of processing: Creation of a user account, processing of ticket purchases, provision of digital/analog access credentials, payment processing, and admission control.
  • Data categories: Master data (name, address, email address), payment data, and, if applicable, industry-specific structural data (e.g., proof of trade visitor status).
  • Legal basis: Art. 6 Section 1 lit. b GDPR (performance of a contract and implementation of pre-contractual measures).
  • Recipients: Third parties commissioned to carry out the processing (e.g., ticket shop software providers, payment service providers, hosting service providers, hotline service providers). Data is disclosed exclusively for the purpose of fulfilling the contract within the framework of properly executed data processing agreements (Art. 28 GDPR).
  • Retention Period: For the duration of the contractual relationship and beyond, in accordance with statutory tax and commercial law retention requirements (§ 147 AO, § 257 HGB – typically 6 to 10 years).

3. Leadtracking at Trade Fairs (Badge-Scanning)

  • Purpose of processing: Transmission of contact information to exhibitors or sponsors for the purpose of individual contact or sending information following a visit to the trade show.
  • Data categories: First name, last name, company name, email address, and, if applicable, additional contact information.
  • Legal basis: Art. 6 Section 1 lit. a GDPR (Explicit consent). Presenting the ticket/badge for active scanning at the exhibitor’s booth or within a special exhibition area constitutes implied consent.
  • Revocation & Notice: The badge scan is voluntary. If you do not wish to have your badge scanned, this will not result in any disadvantage during your visit to the trade show. You may revoke your consent at any time, effective for the future, by notifying the exhibitor performing the scan as well as MESSE ESSEN GmbH.

4. Redeeming exhibitor voucher codes

  • Purpose of processing: Allocation and settlement of voucher codes/invitation tickets between MESSE ESSEN GmbH and the respective exhibitor, as well as verification of code redemption.
  • Data categories: First name, surname, email address, company name and time of redemption.
  • Legal basis: Article 6(1)(b) of the GDPR (processing of the redemption transaction) and Art. 6 Section 1 lit. f of the GDPR (legitimate interest in commercial accounting and the monitoring of quotas for misuse).
  • Recipient: The issuer whose voucher code was entered during ticket registration.
  • Note on freedom of choice: The transfer of data to the organiser is linked to the use of the relevant voucher code. If you do not wish your data to be passed on to the organiser, you may alternatively purchase a standard, paid ticket without a voucher code.

5. Advertising to Existing Customers (§ 7 Section 3 UWG)

  • Purpose of processing: To send email information and offers regarding the company’s own similar events and services of MESSE ESSEN GmbH.
  • Legal basis: Art. 6 Section 1 lit. f GDPR (legitimate interest in direct marketing) in conjunction with § 7 Section 3 UWG.
  • Right to object: You may object to the use of your email address for marketing purposes at any time, without giving reasons and at no cost (apart from the transmission costs in accordance with standard rates), by using the unsubscribe link in the newsletter or by emailing datenschutz@messe-essen.de.

6. Statistics, process optimisation and surveys

  • Purpose of processing: Conducting visitor surveys, carrying out quality controls, optimising internal business processes and further developing trade fair concepts in line with customer’s requirements.
  • Legal basis: Art. 6 Section 1 lit. f GDPR (legitimate interest in the business analysis and optimisation of the trade fair offering).
  • Retention period & anonymisation: Contact details collected are used only temporarily for surveys; analyses and reports are generally produced in anonymised or pseudonymised form.

7. User account, data management and data subjects’ rights

  • Data management: Registered users can view and correct the data stored in their account at any time via the login area.
  • Data subjects’ rights (Articles 15–21 GDPR):
    • Right of access (Art. 15 GDPR): Right to confirmation and access to the data being processed.
    • Rectification (Art. 16 GDPR): Right to have inaccurate or incomplete data rectified.
    • Erasure (Art. 17 GDPR): Right to erasure, provided that no statutory retention obligations prevent this. Where retention obligations apply, erasure is replaced by restriction of processing (blocking).
    • Restriction of processing (Art. 18 GDPR).
    • Data portability (Art. 20 GDPR).
    • Right to object (Art. 21 GDPR): Right to object to processing carried out on the basis of Art. 6 Section 1 lit. f GDPR.
    • Withdrawal of consent (Art. 7 Section 3 GDPR): Withdrawal of consent at any time with effect for the future.
  • Responsible regulatory agency:

    Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
    Kavalleriestr. 2–4, 40213 Düsseldorf
    Phone: +49 (0)211 / 38424-0 | E-Mail: poststelle@ldi.nrw.de | Website: www.ldi.nrw.de

8. Server-Logfiles and IT-Security

  • Purpose of processing: Delivery of the ticket shop’s websites, ensuring IT security, troubleshooting, and protection against misuse (e.g., defense against DDoS attacks).
  • Data processing by processor: When you use our online services, our processor, ADITUS GmbH, processes server log files. In doing so, the full IP address of the accessing device is stored.
  • Legal basis: Art. 6 Section 1 lit. f GDPR (Legitimate interest in the technical provision, maintenance of operational capability, and IT security of the ticket shop).
  • Retention period: Server log files are automatically deleted after 31 days. If there are concrete indications of a security incident, the log data necessary for investigating the incident and preserving evidence may be stored for a longer period on a case-by-case basis.

9. Cookies and storage media on end devices (TDDDG & GDPR)

  • Technically necessary cookies:
    • Purpose: To provide basic functions of the ticket shop (e.g. shopping basket function, session management, cookie consent status).
    • Legal basis: § 25 Section 2 Nr. 2 TDDDG (absolute necessity) in conjunction with Art. 6 Section 1 lit. b or f GDPR.
  • Cookies not technically necessary / Tracking & Analytics:
    • Purpose: Measuring reach, evaluating usage and analysing the effectiveness of marketing measures.
    • Legal basis: § 25 Section 1 TDDDG in conjunction with Art. 6 Section 1 lit. a GDPR (explicit consent via the Consent Manager upon entering the website).
    • Management: The cookie settings you have selected can be adjusted or withdrawn at any time via the cookie settings in the footer of the ticket shop.

It may contain links to external providers. MESSE ESSEN GMBH accepts no responsibility for their privacy policies or content.

Changes may be made to this privacy policy at any time. The current version is always available on the website.

You have the right to rectification, erasure, restriction of processing and data portability. Any consent given may be withdrawn at any time with effect for the future.