Data Protection

GHM develops, prepares and organises successful trade fairs for all sectors involving skilled crafts and SMEs. The company is the leading provider in Germany in its field. GHM attaches great importance to the protection of privacy and complies with the statutory data protection regulations. In the following, we would like to explain to you how we handle your personal data.

This Privacy Statement shall apply to all websites operated by GHM.

The specific data processed in each case and the manner in which they are used shall be subject primarily to the services requested and/or agreed and the GHM websites visited. Therefore, not all parts of this information may apply to you. The relevant information is indicated with the specific processing activities conducted.

1. Who is the controller as defined in Art. 4 No. 1 GDPR?

For our websites, the controller (responsible entity/person) within the meaning of data protection law is

GHM Gesellschaft für Handwerksmessen mbH
Paul-Wassermann-Str. 5
81829 München (Munich)
Germany

P +49 (0)89 189 149-0
F +49 (0)89 189 149-239
E-Mail datenschutz@ghm.de

Management Board
Dieter Dohr (Management Board Chairman)
Klaus Plaschka
Klaus Dittrich

Munich commercial register HRB 40217
VAT ID: DE 129358691

As data protection officer, we have appointed:

Data Protection Officer of GHM

c/o activeMind AG
Telefon: 089 / 91 92 94-900
E-Mail: datenschutz@ghm.de

2. Which processing activities are performed?

Visiting our website

Purpose, data categories, legal basis
When our websites are visited, GHM receives access data, which are stored for back-up purposes:

• the name of your Internet Service Provider
• the country where you are located
• the website from which you are visiting us
• the search term if you come to our page via a search engine
• the websites you visit when you are accessing our pages
• the user tools (web browser, operating system) with which you have accessed our site
• files that you have downloaded from our site (e. g. PDF or Word documents)
• the duration and
• the date and time of your visit

The data are stored in the log files of our system for a short period. Such data are not stored together with other personal data of the user. Processing occurs on the legal basis of Art. 6 (1) sentence 1 f) GDPR (General Data Protection Regulation). It is our interest to guarantee the integrity, confidentiality and availability of the data processed via our websites.

Recipients of the data
We host your data on servers in Germany.

Storage duration
Once the use of the website has ended, the data will be erased, unless there is a legal basis for their further use as may be the case in connection with incorrect login attempts to guarantee the integrity, confidentiality and availability of our websites.

Provision mandatory or required
The provision of your personal data is made on a voluntary basis by visiting our websites.

Objection
The collection of data to make the website available and the storage of data in log files is essential for operating the website. Accordingly, the user has no right to object. You have a right to object to additional cookies or tracking technologies. To find out more, please consult: Information on your right to object pursuant to Art. 21 GDPR as well as our Information on cookies, social plug-ins and tracking technologies used.

Registration as exhibitor (application)

Purpose, categories of data and legal basis
The following describes which personal data we collect and for which purposes we use them when you use our exhibitor portal to register for a trade fair or make contact.

You must register to express your interest in participating in a trade fair or to submit your application on the GHM exhibitor portal. We collect data such as gender, form of address, first name and last name, company, address, email, telephone number and password.

The data shall be used for the operation of the exhibitor portal.

A customer account is created when you register with us as an exhibitor. The data stored in the customer account allows you to use additional services of the trade fair or register for other services (this ensures easier access). Data such as gender, form of address, first name and last name, company, address, email and telephone number are required for registration.

Additional information may be provided on a voluntary basis. To provide the necessary evidence on the status as an exhibition company, further data on the company and/or the exhibits is collected and appropriate proof may be requested. If you register with different email addresses, several client accounts will be created for you.

The data you provide shall be used to fulfil your requests (e.g. registration of an exhibition stand or registration as co-exhibitor), as well as to process your orders (e.g. surveillance and cleaning). If necessary, your data will be transferred to our service partners for the processing of the orders.

The legal basis for the processing of your data is point (b) of sentence 1 of Article 6(1) of the General Data Protection Regulation (GDPR).

Use of your data for communication between exhibitors (exhibitor information), marketing purposes, invoicing procedures, management of the trade fair by GHM or its service partners.

We use your contact details to inform you about the respective event and its implementation, or to inform you about similar services and events offered by GHM by email and/or telephone.

The legal basis for us contacting you by email following your registration is Section 7(3) of the German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG). You can opt out of receiving promotional information by email at any time. This can be done by sending an email to datenschutz@ghm.de or by following the corresponding link at the bottom of each email.

GHM willl use your data to contact you by email with a request for voluntary participation in customer surveys and to contact you for advertising purposes by telephone or fax, subject to your express consent given at the time of registration. This consent is based on point (a) of sentence 1 of Article 6(1)GDPR and may be withdrawn at any time in the future by emailing datenschutz@ghm.de.

Your data will only be transferred under specific conditions and only for clearly defined purposes, which are described in more detail below:
The exhibitor portal is provided by an external service provider in the EU and the data you enter is therefore processed by this provider. GHM and the service providers have concluded a data processing contract in accordance with Article 28 GDPR.

Recipients of the data
The personal data provided in the exhibitor portal shall be processed for the express purpose of providing their services in the operation of the exhibitor portal and not for their own purposes. The service provider uses web analysis tracking and re-marketing tools based on our instructions. You can book the services you need at the trade fair directly with our service partners. When you register as an exhibitor, you provide consent for the data to be transmitted to the service partner for this purpose. The consent is based on point (a) of sentence 1 of Article 6(1) GDPR and may be withdrawn for the future at any time.

Furthermore, we will only transmit your data to third parties if legally required to do so, e.g. to law enforcement agencies or if required to initiate infringement proceedings.

Storage duration
Your data will only be used by GHM or our service partners only for the purposes of the trade fair in question. GHM will, of course, delete your data if the intended purpose no longer requires that this be stored or if contractual arrangements with our customers or legal deadlines no longer exist.

Provision mandatory or required
Personal data is provided on a voluntary basis. It is required to register as an exhibitor in our portal and to complete the registration.

Withdrawal of consent
You may withdraw your consent to participate in future customer surveys at any time.
Please send your withdrawal of consent to datenschutz@ghm.de.

Contact form, contacting us via email and registering additional trade fair services

Purpose, data categories and legal basis
As to your personal data which you enter in the contact form on a web page or in contacting us via email, we will store and process such data for the purpose of individual communications with you. Such data include, but are not limited to, the first and last name, address, company name, email address, telephone number and facsimile number.

The processing of such data is made on the basis of a legitimate interest as defined in Art. 6 (1) sentence 1 f) GDPR.

Our interest is to enable you to contact us in a straightforward manner. The data you provide will be processed for the purpose of handling your request as well as for any follow-up questions.

At some of our trade fairs, you may register for additional trade fair services even as a non-registered participant, e.g. for a guided tour of the trade fair or a seminar offered as part of the fair.

The legal basis for storing your data in connection with the aforementioned additional services is Art. 6 (1) sentence 1 b) GDPR.

If a third party as organiser of such additional services should enter into a separate agreement with you, we will forward the data to such third party only after having obtained your consent pursuant to Art. 6 (1) sentence 1 a) GDPR (see also "Recipient of the Data").

Recipients of the data
We store your data on our own servers. Forwarding of data to third parties will only occur in the following events:

Should you have registered for additional services which are not provided by GHM itself, we will forward your request and your personal data to the respective organiser. Then, the organiser will contact you directly to agree on the additional service with you as appropriate.

If the additional service is provided by order and for the account of GHM, an order processing agreement has been made with the respective organiser as provided in Art. 28 GDPR.

Storage duration
GHM will process your data for responding to your requests and/or for performing the additional service. Of course, GHM will erase your data once they are no longer required for the purpose of their use or, as applicable, all contractual regulations with our customers or statutory periods have ceased to apply.

Provision mandatory or required
The provision of your personal data is made on a voluntary basis. However, we can only process your request if you let us know your data and the subject of your request.

Objection and withdrawal of consent
If your requests are processed pursuant to Art. 6 (1) sentence 1 f) GDPR (i.e. this shall not apply to orders for additional services, as in such cases we are required to store your data in accordance with Art. 6 (1) sentence 1 b) GDPR), you are entitled to a right of objection. For information in this regard, please consult:

Information on your right to object pursuant to Art. 21 GDPR.

If in registering for additional services you should have given your consent that we forward your data to third-party organisers for the purpose of entering into a separate agreement, you may withdraw such consent with effect for the future. Please send your withdrawal to: datenschutz@ghm.de

Web analysis, re-marketing and use of tracking tools

Purpose, data categories and legal basis
So-called tracking, re-marketing and/or web analysis tools are used on our website. We use those tools to receive information on visitor behaviour on our website, e.g. on the origin of visitors or viewing duration. Based on such information, we can detect flaws on the website and improve its efficiency.

The legal basis for such processing is your consent in each case, Art. 6 (1) sentence 1 a) GDPR.

Recipients of the data
The following providers of tracking, re-marketing and/or web analysis tools process access data on our behalf for the purpose of user analysis and statistical editing. To this end, we have entered into appropriate order processing agreements with those providers.

For further details on their technical functioning, the tools used, and information on how you can prevent the data transfer (tracking), please consult our Information on the cookies, social plug-ins and tracking technologies used.

Storage duration
GHM as well as the service providers involved will erase your data once they are no longer required for the purpose of their use, if you withdraw your consent with effect for the future or, as applicable, if all contractual regulations with our customers or statutory periods have ceased to apply. For more information, please also consult our Information on the cookies, social plug-ins and tracking technologies used.

Transfer to third countries
The information generated regarding your use of this website is also transferred to third countries and stored there. We may only transfer data to service providers in a third country if appropriate guarantees have been provided (standard data protection clauses adopted by the Commission or the supervisory authorities in a defined procedure) and enforceable rights and effective legal remedies are available. For further information, particularly on the place and duration of storage, please consult our Information on the cookies, social plug-ins and tracking technologies used.

Provision mandatory or required
The provision of your personal data is made in a voluntary manner solely based on your consent. Without such consent, you cannot use our websites.

Profiling
Using the web analysis, re-marketing and tracking tools, we can assess the behaviour of visitors to the website and analyse their interests. In this connection, we prepare a pseudonymous user profile.

Withdrawal of the consent
For details of the opt-out options applied as part of the web analysis and tracking tools, please consult our information on cookies and tracking technologies used.

Social media plug-ins

Purpose, data categories and legal basis
We would like to offer this option to those visitors of our website who prefer using social media plug-ins. Please note that in using social media services, the social media services may determine and further process data including but not limited to:

• the address of the website where the activated social media plug-in is located
• the date and time of access to the website or, as applicable, activation of the social media plug-in
• your current IP address
• information on the browser and the operating system used

If you are logged in to the social media service, there is the possibility that the provider may find out your user name and perhaps also your real name from such data. The data determined by the provider may also be processed outside the European Union. The trade fair company has no impact on the purpose, the type and the scope of the processing of such data by the social media service provider. Particular attention should be paid to the fact that the data enable the provider of the social media service to prepare both pseudonymised and personalised user profiles.

The legal basis for such processing is your consent in each case, Art. 6 (1) sentence 1 a) GDPR.

Recipients of the data
For more details on the technical functioning of the plug-ins used and information on how you can prevent the data transfer, please consult our information on the cookies, social media plug-ins and tracking technologies used.

We use the social media offers of the following providers:

• Google Maps
• Xing
• Facebook
• Google+
• Twitter
• LinkedIn
• Vimeo
• YouTube
• Instagram

Not all providers are activated on each web page of GHM. You can identify activated providers by their logo on our web pages and/or if a Google Map has been integrated on the page.

Storage duration
For details on the storage duration of the technologies used in connection with such plug-ins, please consult our information on the cookies, social media plug-ins and tracking technologies used.

Transfer to third countries
As a rule, the information generated regarding your use of this website is transferred to a server of the relevant provider in the USA and stored there.

We may only transfer data to service providers in a third country if appropriate guarantees have been provided (standard data protection clauses adopted by the Commission or the supervisory authorities in a defined procedure) and enforceable rights and effective legal remedies are available. For details please consult our information on the cookies, social media plug-ins and tracking technologies used.

Provision mandatory or required
The provision of your personal data is made in a voluntary manner solely based on your consent. Without such consent, you cannot use our websites.

Profiling
In using some plug-ins, we can assess the behaviour of visitors to the website and analyse their interests. In this connection, we prepare a pseudonymous user profile.

Withdrawal of the consent
For details of the opt-out options, please consult our information on cookies and tracking technologies used.

Registration for the online purchase of trade fair tickets or redemption of a voucher and the following visitor mailing

Purpose, data categories, legal basis
Visitor registration is voluntary. If you do not wish to register, you may purchase your tickets without providing your personal data.
The purpose of visitor registration is to inform you in an even better and more comprehensive manner. With your data, you help GHM to continuously improve the offer of our events with a view to meeting your demand in an even more personalised manner.

If you wish to purchase a ticket in advance (PDF ticket), your contact data (first name, last name, company, department, address, email address) and credit card information will be required and processed.

In case of visitor group registrations, the contact data entered of group members will be processed additionally.

The processing of the data you entered in the registration process takes place in order to transact the ticket purchase and conduct relevant pre-contractual measures as defined in Art. 6 (1) sentence 1 b) GDPR.

Use of your data for marketing purposes / visitor mailing

We use your contact data after the completion of visitor registration to inform you about similar events via email as well as for purposes of marketing and optimisation, which allow us to offer you improved customer support and services and continue to optimise our offers (visitor mailing).

The legal basis for distributing visitor mailings following your visitor registration is sec. 7 (3) UWG (German Unfair Competition Act). You may object to receiving visitor mailings at any time. You may do so by emailing datenschutz@ghm.de or by clicking the respective link at the end of a visitor mailing.

Recipients of the data
We host your data on our own servers.

Any transfer of your data will only be made subject to defined conditions and for very specific purposes as described in more detail below:

1. Vouchers are provided to you free of cost by an exhibitor or by GHM. The exhibitor or GHM will pay the costs for your visit to the fair, and therefore they are entitled to the contact data you provide (title, first name, last name, address and communication data). Such data are transferred completely.
2. Exhibitors are free to apply a "lead management" procedure at our fairs to scan your visitor pass or a business card. Such scan process is voluntary. Only by scanning your visitor pass, the relevant exhibitor will receive direct access to your data from the registration. In this connection it is important that none of your banking data or credit card data are disclosed. Only those data you provided for your registration (structural data) will be disclosed. To ensure that your data cannot be read by every barcode scanner, a special software will be provided additionally to read your visitor pass.
3. In case of events restricted to a specific group of trade visitors, GHM needs the contact data and structural data required to determine your trade visitor status. The company 1&1 ipayment (1&1 Internet AG) is responsible for the secure handling of electronic payment transactions with a credit card. InterCard is responsible for the secure handling of the electronic direct debiting procedure. Your credit card information or banking data are not transferred to GHM and, consequently, will not be stored by GHM.
4. As part of its comprehensive services, GHM also uses other service providers within Germany, e.g. for the maintenance and administration of the data processing system or the servers. Those partners are subject to the same strict data protection provisions and are closely integrated with the data protection concept of GHM.
5. We use a German service provider for the distribution of the visitor mailings based on an order processing agreement.

GHM will not transfer any other information to third parties, e.g. information on main areas of interest provided voluntarily. To governmental institutions and authorities, personal data will be transferred only as required under legal obligations or court orders.

Transfer to third countries
Due to the high level of international attendance of our trade fairs, data (especially in the case of voucher use) regarding the payment of costs for a fair visitor will be transferred from the relevant country of a GHM agency abroad in cooperation with Messe München, as well as to exhibitors also from countries outside the EU and the EEA. Here you can find a list of the agencies abroad.
We may only transfer data to agencies in a third country if appropriate guarantees have been provided (standard data protection clauses adopted by the Commission or the supervisory authorities in a defined procedure) and enforceable rights and effective legal remedies are available.

Data Security
For the purpose of data security, GHM uses state-of-the-art data processing technologies. Your data will be stored in a visitor database with an external service provider.

For GHM, the security of your data and transactions has top priority. Therefore, we encrypt all information transferred during a session by SSL encryption.

Storage duration
GHM uses your data to issue a ticket and promote our events in visitor mailings. Of course, GHM will erase your data once they are no longer required for the purpose of their use, if you objected to the processing and/or all contractual regulations with our customers or statutory periods have ceased to apply.

Provision mandatory or required
The provision of your personal data is made on a voluntary basis. It is required to complete the online registration of the ticket.

Withdrawal of consent
You may withdraw your consent to the receipt of visitor mailings at any time. Please send us your notice of withdrawal in text form ("Textform" as defined in the German Civil Code) to the following email address: datenschutz@ghm.de or use the link indicated in each visitor mailing to opt out.

Category: Participation in the competition of the Internationale Handwerksmesse "GEPLANT + AUSGEFÜHRT"

Purpose, data categories and legal basis
The description of this processing activity shall only apply to the website of the following fair: Internationale Handwerksmesse (IHM).

The purpose of the online tender is to simplify the competition of architects/craftspeople, to avoid registration errors, and to ensure your professional presentation.

The following data are collected and processed: all company contact data: company name, first name, last name, address, telephone no., facsimile no., email, website.

By participating in the "GEPLANT + AUSGEFÜHRT" (which translates into German as "planned + executed") competition and sending the statement at the end of the registration process, you give your consent that GHM may further process and publish the data you provided in conducting the "GEPLANT + AUSGEFÜHRT" competition.

Moreover, in case that you gave your consent, GHM will use the data for accounting purposes as well as for purposes of marketing and optimisation enabling us to carry out market research, offer you improved customer support and services, as well as to continue optimising our offers. This does not constitute unauthorised or illegal advertising via email, telephone and/or post.

If your express consent has been obtained, GHM will additionally use your data to contact you by email and request your voluntary participation in customer surveys relating to the events you visited.

The legal basis for such processing is your consent in each case, Art. 6 (1) sentence 1 a) GDPR.

Recipients of the data
Any transfer of your data will only be made subject to defined conditions and for very specific purposes as described in more detail below:

1. As part of its comprehensive services, GHM also uses other service providers within Germany, e.g. for the maintenance and administration of the data processing system or the servers. Those partners are subject to the same strict data protection provisions and are closely integrated with the data protection concept of GHM.
2. For the purpose of data security, GHM uses state-of-the-art data processing technologies. Your data will be stored in a CRM database with an external service provider.

GHM will not transfer any other information to third parties, e.g. information on main areas of interest provided voluntarily. To governmental institutions and authorities, personal data will be transferred only as required under legal obligations or court orders.

Storage duration
GHM uses your data for your participation in the competition. Of course, GHM will erase your data once they are no longer required for the purpose of their use, if you withdraw your consent and/or all contractual regulations with our customers or statutory periods have ceased to apply.

Data security
For GHM, the security of your data and transactions has top priority. Therefore, we encrypt all information transferred during a session by 2048-bit SSL encryption.

Provision mandatory or required
You provide your personal data in a voluntary manner solely based on your consent. Without your consent, however, you cannot take part in the competition.

Withdrawal of consent
You may withdraw your consent with effect for the future at any time.

Please direct your withdrawal to datenschutz@ghm.de.

Registration as exhibitor (online exhibitor directory, incl. areas with restricted access)

Purpose, data categories and legal basis
In the following, we describe which personal data we collect and the purposes for which we use them whenever you use our exhibitor booking portal.

To be able to book services of GHM for trade fair media via the booking portal, you are required to register. On that occasion, we collect names and contact data of the contact person, the email address (concurrently used as user name) and password.
The data are used for the utilisation of the booking portal.

a. Bookings

If you log in as exhibitor, we publish the contents of your corporate profile already known to us (e.g. company name, address, contact data, contact person) as well as other company details (e.g. product category). All contents/data changed or added by the exhibitor via the booking portal will also be displayed publicly to everyone.

b. Marketplace (area with restricted access)

If you register with us as a visitor or exhibitor, a customer account will be created for you. With the data stored in the customer account, you can use additional services of the trade fair or register (more easily) for other services. The email address is required for registration. Other data are provided on a voluntary basis. To prove the trade visitor status, additional data on your company and/or position are collected and appropriate proof of trade visitor status may be requested. If you register with different email addresses, several customer accounts will be created for you.

The data you provide will be used for implementing your requests (e.g. ordering of brochures) and also for processing your orders (e.g. purchase of tickets).

The legal basis for such processing activities is Art. 6 (1) sentence 1 b) GDPR.

Use of your data for marketing purposes

We use your contact data to inform you of the relevant event or similar services and events by email (exhibitor info).

The legal basis for contacting you via email following your registration as exhibitor is sec. 7 (3) UWG. You may object to receiving advertising communications by email at any time. You may do so by emailing datenschutz@ghm.de or by clicking the appropriate link at the end of each email (marketplace info emails).

If the exhibitor registration has been completed and your express consent has been given to us upon registration, GHM will use your data to contact you by email to request your voluntary participation in customer surveys as well as to contact you with advertising contents either on the telephone or by facsimile. You give such consent on the basis of Art. 6 (1) sentence 1 a) GDPR and may withdraw it with effect for the future at any time by email to datenschutz@ghm.de.

Recipients of the data
Any transfer of your data will only be made subject to defined conditions and for very specific purposes as described in more detail below:

1. The booking portals are provided by external service providers in Germany and, consequently, they will process the data you provided. An order processing agreement pursuant to Art. 28 GDPR was entered into between the service providers and GHM.

They process personal data exclusively for providing their services in operating the booking portal and in keeping the online exhibitor lists rather than for their own purposes. The service provider uses web analysis, tracking and re-marketing tools in accordance with our instructions. You may as well book additional services for the performance of the trade fair directly with our service partners. When registering as exhibitor, you give us your consent to transferring the data to the service partners for this purpose. You give your consent based on Art. 6 (1) sentence 1 a) GDPR and may withdraw it with effect for the future at any time.

In any other respect, we will transfer your data to third parties only if we are required by law to do so, e.g. to law enforcement authorities or in case of prosecution of violations of law.

Storage duration
GHM and our service providers, respectively, will use your data for the purposes of the booking portal only. Of course, GHM will erase your data if you withdraw your consent, once they are no longer required for the purpose of their use and/or all contractual regulations with our customers or statutory periods have ceased to apply.

Provision mandatory or required
You provide your personal data on a voluntary basis. They are required to register you as exhibitor in our portals and to carry out bookings.

Withdrawal of consent
You may withdraw your consent to the participation in customer surveys with effect for the future at any time.
Please send your notice of withdrawal to datenschutz@ghm.de.

Press accreditation

Purpose, data categories and legal basis
As a member of the press, you may obtain your accreditation from us as defined in our accreditation policy. To this end, we save your first name and last name, your company, as well as your contact data (incl. email address) in our press database. As an accredited press member, you will receive a press ticket as well as access to our press centre and press car park.

The legal basis for accreditation and the issue of a press ticket is Art. 6 (1) sentence 1 b) GDPR.

We use your contact data to inform you by email of the relevant event once the accreditation has been made and/or similar services and events.

The legal basis for contacting you by email following your press accreditation is sec. 7 (3) UWG. You may object to being contacted by email at any time. You may do so by emailing to datenschutz@ghm.de or by following the appropriate link at the end of each email (press notice).

Recipients of the data
Any transfer of your data will only be made subject to defined conditions and for very specific purposes as described in more detail below:

1. As part of its comprehensive services, GHM also uses other service providers within Germany, e.g. for the maintenance and administration of the data processing system or the servers. Those partners are subject to the same strict data protection provisions and are closely integrated with the data protection concept of GHM.
2. For the purpose of data security, GHM uses state-of-the-art data processing technologies. Your data will be stored in a CRM database with an external service provider.
3. We use a German service provider for the distribution of the emails based on an order processing agreement.

GHM will not transfer any other information to third parties, e.g. information on main areas of interest provided voluntarily. To governmental institutions and authorities, personal data will be transferred only as required under legal obligations or court orders.

Storage duration
GHM will use your data to provide you with information as accredited member of the press. Of course, GHM will erase your data if you object to the storage of data, once they are no longer required for the purpose of their use and/or all contractual regulations with our customers or statutory periods have ceased to apply.

Provision mandatory or required
You provide your personal data in a voluntary manner solely based on your press accreditation. Without such data, you cannot obtain accreditation.

Withdrawal of consent
You may withdraw your consent to receiving further press information with effect for the future at any time.
Please send us your notice of withdrawal in text form to the following email address: datenschutz@ghm.de or use the link indicated in the press email to opt out.

3. Which are your data protection rights?

Each data subject has the right to:

• obtain information pursuant to Art. 15 GDPR
• rectification pursuant to Art. 16 GDPR
• erasure pursuant to Art. 17 GDPR
• restriction of processing pursuant to Art. 18 GDPR
• object pursuant to Art. 21 GDPR, as well as
• data portability pursuant to Art. 20 GDPR.

The right to obtain information and the right to rectification are subject to the restrictions defined in sec. 34 and sec. 35 BDSG (German Federal Data Protection Act).

You may withdraw any consent given to us for the processing of personal data at any time. This also applies to the withdrawal of declarations of consent given to us prior to the application of the General Data Protection Regulation, i.e. prior to 25 May 2018. Please note that the withdrawal will be effective for the future only. Any processing conducted prior to the withdrawal will not be affected.

Moreover, there is a right to complain with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with sec. 19 BDSG). A list of the supervisory authorities (for the non-public area) with addresses is available at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

4. Information on data security

We only handle personal data to the extent possible under data protection provisions. In doing so, we also endeavour to take all required technical and organisational security measures to protect your personal data in an appropriate manner against unauthorised access and abuse at any time.

Where we store or process personal data, this will occur within our own computing centre. To protect the security of your data when they are transferred, we use encryption techniques (e.g. SSL) via HTTPS. Our servers are protected by a firewall and anti-virus software. Back-ups as well as role concepts and authorisation concepts are a matter of course to us.

Our employees are subject to the commitment to observe the regulations of the GDPR and the BDSG in handling data.

5. Modifications of our data protection provisions

We reserve our right to bring this Privacy Statement into line with the current legal requirements as applicable from time to time or to reflect modifications of our services in the Privacy Statement, e.g. on the occasion of launching new services. The new Privacy Statement will then apply to your next visit.

6. Links

The websites of GHM contain links to other websites. We check such direct links with reasonable care. GHM is not responsible for the contents of websites accessible via links on our website. Moreover, GHM is not responsible for the contents of websites referring to us.

As at: 23 May 2018

Information on the cookies, social plug-ins and tracking technologies used

Hereafter we inform you about which web analysis, re-marketing- and tracking tools we use on our websites (web tracking, advertising, cookies, plug-ins, etc.), how they work and how you can object to the processing of your personal data in detail or, as the case may be, how you can erase the personal data collected in the process. For more information, please consult our Privacy Statement.

I. Use of cookies

In some parts, "cookies" are used on our websites. This standard technology is based on small text files which are stored on the device you use, helping to make your visit to a website more convenient or more secure, among other things. Cookies may also have the function to better adapt the offer on a website to the interests of the visitors or to improve it in general terms based on statistical evaluations.

You may decide yourself whether the browser you use should or should not allow cookies. Please note that the functionality of websites may be reduced or even disabled if cookies are not allowed.

Deletion of cookies

You may delete individual or all cookies by way of your browser settings. Moreover, you can obtain information and instructions on how to delete such cookies or block their storage in advance. Depending on the provider of your browser, you can find the required information at the following links:

Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Google Chrome: https://support.google.com/accounts/answer/61416?hl=en

Opera: https://www.opera.com/help

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

List of cookies

If you allow us to use cookies by way of your browser settings or your consent, the following cookies may be used on our websites:

Overview of the cookies on the relevant website

II. Use of tracking, re-marketing and web analysis technologies

Adform

On our website, we use a web tracking service of Adform Germany GmbH, Gr. Burstah 50-52, 20457 Hamburg, DE (hereinafter: Adform). As part of its web tracking, Adform uses cookies that are stored on your computer, enabling us to analyse the use of our website and your surfing behaviour (so-called "tracking"). We conduct this analysis based on the tracking service of Adform so as to continue optimising our Internet offer and improve its availability. When our website is used, data including in particular your IP address and your user activities are therefore transferred to the servers of Adform and processed and stored within the European Union. For more information on the handling of the transferred data, please consult the Adform privacy policy: https://site.adform.com/privacy-policy-opt-out/. You may prevent the collection and transfer of personal data (particularly your IP address) as well as the processing of such data by deactivating the execution of script code in your browser, by installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com) or by activating the "Do Not Track" setting of your browser.

AppNexus/Adnxs.com

On our website, we use a web tracking service of AppNexus Inc., 28 W. 23rd Street, New York, NY 10010, USA (hereinafter: AppNexus/Adnxs.com). As part of its web tracking, AppNexus/Adnxs.com uses cookies that are stored on your computer, enabling us to analyse the use of our website and your surfing behaviour (so-called "tracking"). We conduct this analysis based on the tracking service of AppNexus/Adnxs.com so as to continue optimising our Internet offer and improve its availability. When our website is used, data including in particular your IP address and your user activities are therefore transferred to the servers of AppNexus/Adnxs.com and processed and stored within the European Union. For more information on the handling of the transferred data, please consult the privacy policy of AppNexus/Adnxs.com: https://www.appnexus.com/en/company/platform-privacy-policy. You may prevent the collection and transfer of personal data (particularly your IP address) as well as the processing of such data by deactivating the execution of script code in your browser, by installing a script blocker in your browser (this is available from e.g.www.noscript.net or www.ghostery.com) or by activating the "Do Not Track" setting of your browser.

DataXu- w55c.net

The services of DataXu GmbH (www.dataxu.com) are designed to collect statistical data on the use of the web offer in order to optimise advertising for you accordingly. To do so, anonymised browser data are collected in the form of Internet cookies and analysed. The collection of any personal data which could identify the visitor as an individual is expressly refrained from. For more information on the use and processing of data, please consult the privacy policy of DataXu GmbH at https://www.dataxu.com/about-us/privacy.
You may object to the collection and storage of data by DataXu GmbH with effect for the future at http://www.youronlinechoices.com at any time.

Doubleclick

A web service of Google LLC, 1600 Amphitheatre Parkway, CA 94043 Mountain View, USA (hereinafter: DoubleClick) is downloaded to our website. We use those data to ensure the full functionality of our website. In this connection, your browser will transfer personal data to DoubleClick, if applicable. DoubleClick has obtained its own certification under the EU-US Privacy Shield (cf. https://www.privacyshield.gov/list). The data will be erased once the purpose of their collection has been achieved. For more information on the handling of the transferred data, please consult the privacy policy of DoubleClick: https://www.google.com/intl/de/policies/privacy/. You may prevent the collection as well as the processing of your data by DoubleClick by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com)

Eyeota

Eyeota is provided by Eyeota Pte Ltd, 1 Primrose St, London EC2A 2EX, GB.

This tool allows you to object to the collection and/or evaluation of your data by downloading or setting and storing the opt-out cookie available at the following link: http://www.eyeota.com/privacy-policy/.

Facebook Re-marketing/Re-targeting

Re-marketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our websites. When you visit our website, the re-marketing tags establish a direct connection between your browser and the Facebook server. In this manner, Facebook receives information that you visited our website with your IP address. This allows Facebook to allocate the visit to our websites to your user account. We can use the information so obtained for the display of Facebook ads. Please note that we as the providers of the websites have no knowledge of the contents of the data transferred or their use by Facebook. For further information, please consult the Facebook privacy policy at https://www.facebook.com/about/privacy/. If you do not wish data to be collected via Custom Audience, you may deactivate Custom Audiences here.

Conversion measurement with the visitor action pixel of Facebook

With your consent, we use the "visitor action pixel" of Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA ("Facebook") on our website. It helps us to track user actions once they have seen or clicked a Facebook advertisement. In doing so, we can record the effectiveness of Facebook advertisements for statistical purposes and market research purposes. The data so recorded are anonymous to us, i.e. we cannot see the personal data of individual users. Those data, however, are stored and processed by Facebook, of which we inform you as far as we have knowledge thereof. Facebook may also link such data to your Facebook account and use them for its own advertising purposes in conformity with the data usage policy of Facebook https://www.facebook.com/about/privacy/. You may enable Facebook and its partners to show advertisements inside and outside of Facebook. Moreover, a cookie may be stored on your computer for this purpose.

Only users aged 13 or older may give such consent. If you are younger, kindly ask your parent or legal guardian for advice.

Please click here if you wish to withdraw your consent.

Google

A web service of Google LLC, 1600 Amphitheatre Parkway, CA 94043 Mountain View, USA (hereinafter: Google) is downloaded to our website. We use those data to ensure the full functionality of our website. In this connection, your browser will transfer personal data to Google, if applicable. Google has obtained its own certification under the EU-US Privacy Shield (cf. https://www.privacyshield.gov/list). The data will be erased once the purpose of their collection has been achieved. For more information on the handling of the transferred data, please consult the Google privacy policy: https://www.google.com/intl/de/policies/privacy/. You may prevent the collection as well as the processing of your data by Google by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com).

Googletagmanager.com

A web service of Google LLC, 1600 Amphitheatre Parkway, CA 94043 Mountain View, USA (hereinafter: Googletagmanager.com) is downloaded to our website. We use those data to ensure the full functionality of our website. In this connection, your browser will transfer personal data to Googletagmanager.com, if applicable. Googletagmanager.com has obtained its own certification under the EU-US Privacy Shield (cf. https://www.privacyshield.gov/list). The data will be erased once the purpose of their collection has been achieved.

For more information on the handling of the transferred data, please consult the privacy policy of Googletagmanager.com: https://www.google.com/intl/de/policies/privacy/. You may prevent the collection as well as the processing of your data by Googletagmanager.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com).

Googletagmanager.com / Googletagservices

A web service of Google LLC, 1600 Amphitheatre Parkway, CA 94043 Mountain View, USA (hereinafter: Googletagmanager.com/Googletagservices) is downloaded to our website. We use those data to ensure the full functionality of our website. In this connection, your browser will transfer personal data to Googletagmanager.com/Googletagservices, if applicable. Googletagmanager.com/Googletagservices has obtained its own certification under the EU-US Privacy Shield (cf. https://www.privacyshield.gov/list). The data will be erased once the purpose of their collection has been achieved. For more information on the handling of the transferred data, please consult the privacy policy of Googletagmanager.com/Googletagservices: https://www.google.com/intl/de/policies/privacy/. You may prevent the collection as well as the processing of your data by Googletagmanager.com/Googletagservices by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com).

gstatic

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called „cookies", i.e. text files stored on your computer, enabling the analysis of your use of the website. As a rule, the information generated by the cookie regarding your use of this website will be transferred to a Google server in the USA and stored there. On our website, IP addresses are generally anonymised automatically by Google by way of truncation. Only in exceptional cases will IP addresses be transferred to Google servers in the USA where they are anonymised by way of truncation. On the instruction of the operator of this website, Google will use such information to evaluate your use of the website, prepare reports about website activities, and provide further services to the website operator associated with the use of the website and of the Internet. The IP address transmitted by your browser in applying Google Analytics will not be combined with other data of Google. You may prevent the storing of cookies by a corresponding setting of your browser software; nevertheless, please note that in such a case you may not be able to use the full functionality of this website. Moreover, you may prevent the recording of data generated by the cookie relating to your use of the website (incl. your IP address) to Google and their processing by Google by downloading and installing the browser plug-in available at the following link: Browser add-on to deactivate Google Analytics.

As an alternative to the browser add-on described above or in browsers on mobile devices, you may stop tracking by Google Analytics on our websites by clicking this link. This will entail the storing of an opt-out cookie on your device. It will prevent the future data collection by Google Analytics on this website or in this browser for as long as the cookie remains installed in your browser.

Krxd.net

A web service of Perfect Privacy, LLC., 12808 Gran Bay Parkway West, FL 32258 Jacksonville, USA (hereinafter: Krxd.net) is downloaded to our website. If you have activated JavaScript in your browser and no JavaScript blocker has been installed, your browser will transfer personal data to Krxd.net, if applicable. For more information on the handling of the transferred data, please consult the privacy policy of Krxd.net: https://assets.web.com/legal/English/PrivacyPolicy.pdf. You may prevent the collection as well as the processing of your data by Krxd.net by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com).

Matomo (formerly Piwik)

We use our order processor for the websites specified in the Privacy Statement to analyse the use of and to continue improving our website. By way of the statistics obtained, we can improve our offer and make it more interesting for you as user.

For such evaluation, cookies will be stored on your computer. The service provider of GHM will store information so collected exclusively on a server within the EU.

You can prevent the evaluation by activating the "Do Not Track" setting in your browser and by deleting existing cookies.

If you prevent the storing of cookies, please note that as a result, you may not be able to fully use our websites.
IP addresses are processed in a truncated condition, which means that such addresses can in no event be directly associated with a person. The IP address transferred by your browser using Matomo will not be combined with other data collected by our service provider.

Matomo is an open-source project. For privacy information of the third-party provider, please consult https://matomo.org/privacy-policy.

The Trade Desk

Diese Seite verwendet eine Technologie der The Trade Desk Inc., 42 N Chestnut St, Ventura, California, CA – 9300, USA. Es werden Informationen über das Surfverhalten der Webseitenbesucher zu Marketingzwecken in rein anonymisierter Form gesammelt und hierfür Cookies gesetzt. Hierbei werden keine personenbezogenen Daten erhoben oder gespeichert. Sie können jederzeit der Verarbeitung der durch The Trade Desk erzeugten Cookie-Daten unter www.adsrvr.org/opt-out.html widersprechen. Weitere Informationen zum Datenschutz bei The Trade Desk finden Sie unter www.thetradedesk.com/general/privacy-policy This website uses a technology of The Trade Desk Inc., 42 N. Chestnut St, Ventura, CA 93001, USA. Information on the surfing behaviour of the website visitors are collected in a purely anonymised form for marketing purposes. To this end, cookies are set. In doing so, no personal data are collected or stored. You may object at any time to the processing of the cookie data generated by The Trade Desk at www.adsrvr.org/opt-out.html. For further information of The Trade Desk on data privacy, please consult www.thetradedesk.com/general/privacy-policy.

VisualDNA

On our website, we use a web tracking service of Imagini Europe Ltd, 54 – 56 Camden Lock Place, NW1 8AF London, GB (hereinafter: VisualDNA). As part of its web tracking, VisualDNA uses cookies that are stored on your computer, enabling the analysis of the use of our website and your surfing behaviour (so-called tracking). We conduct this analysis based on the tracking services of VisualDNA to continue optimising our Internet offer and improve its availability. When our website is used, data including in particular your IP address and your user activities are therefore transferred to the servers of VisualDNA and processed and stored within the European Union. The data will be erased once the purpose of their collection has been achieved. For further information on the handling of the transferred data, please consult the privacy policy of VisualDNA: https://www.visualdna.com/privacy-policy/. You may prevent the collection and transfer of personal data (particularly your IP address) as well as the processing of such data by deactivating the execution of script code in your browser, installing a script blocker in your browser (this is available from e.g. www.noscript.net or www.ghostery.com) or by activating the „Do Not Track" setting of your browser.

III. Use of social media applications

Social plug-ins of Facebook, Twitter, Google+, LinkedIn, and Xing etc.

For those visitors of our website who intend to use social media plug-ins, we would like to offer this option. Please note that when you use social media services, the following data may be gathered and further processed by such social media services, e.g.:

• the address of the website where the activated social media plug-in is located
• the date and time of access to the website or, as applicable, activation of the social media plug-in
• your current IP address
• information on the browser and the operating system used

If you are logged in to the social media service, there is the possibility that the provider may find out your user name and perhaps also your real name from such data. The data determined by the provider may also be processed outside the European Union. The trade fair company has no impact on the purpose, the type and the scope of the processing of such data by the social media service provider. Particular attention should be paid to the fact that the data enable the provider of the social media service to prepare both pseudonymised and personalised user profiles.

On our websites, we offer the option of using so-called "SocialPlug-ins" of the following companies:

• Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA;
• "Tweet" button of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA;
• "+1" button of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
• "Recommended-Button" of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA;
• "Share-Button" of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany;
• Instagram of Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA

To protect your data, we rely on the "Shariff" solution in the implementation of such plug-ins. Its purpose is to show the plug-ins on the website only as graphics containing a link to the respective website of the plug-in provider. By clicking on the graphics, you will be redirected to the relevant services of the providers. Only then will your data be sent to the appropriate services. If you do not click on the graphics, there will be no exchange between you and any of the aforementioned social networks.

For information on the collection and the use of your data in social networks, please consult the applicable terms of use of the respective provider. Here you can find more information on the Shariff solution.

Not all providers are activated on each web page of GHM. You can identify activated providers by their logo on our web pages and/or if a Google Map has been integrated on the page.

Integration of Vimeo and YouTube videos

(1) We have integrated YouTube videos on some of our web pages; these videos are stored on https://www.youtube.com and can be viewed directly from our website.

(2) As a result of the visit to the web page, YouTube receives the information that you have accessed a sub-page of our website. Moreover, the data referred to in paragraph (3) are transmitted. This occurs regardless of whether YouTube provides a user account you can use to log in or whether no user account exists. If you are logged in to Google, your data will be directly linked to the account. If you do not wish the link to your YouTube profile, you will need to log out prior to activating the button. YouTube saves your data as user profiles for the purposes of advertising, market research and/or the adaptation of the website in line with demand by way of Google DoubleClick. You have the right to object to the creation of user profiles, which you have to exercise vis-à-vis YouTube.

(3) For more information on the purpose and the scope of data collection and processing of such data by YouTube, please consult the privacy policies of the provider. There you will also find more information on your rights and setting options in this respect to protect your privacy. https//:www.google.de/intl/de/policies/privacy. Google processes your data in the USA and has committed itself to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework.

On some of our websites, we also use the video provider Vimeo, Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA. The use of the data of your browser is required to provide the video service. In this respect, we refer to the privacy policies of Vimeo: https://vimeo.com/privacy.

Vimeo guarantees that it will comply with the Privacy Shield requirements. You can find more information here.

Use of Google Maps

On this website, we use the offer of Google Maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Through this application, we can show you interactive maps directly on the website, offering you the convenient use of the map function.

As a result of the visit to the web page, Google receives the information that you have accessed a sub-page of our website. This occurs regardless of whether Google provides a user account you can use to log in or whether no user account exists. If you are logged in to Google, your data will be directly linked to your account. If you do not wish the link to your Google profile, you will need to log out from Google prior to activating the button. Google saves your data as user profiles for the purposes of advertising, market research and/or the adaptation of its website. Such an analysis is made particularly (even for users that are not logged in) to provide personalised advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of such user profiles, which you have to exercise vis-à-vis Google.

If you do not wish Google to collect, process or use data about you via our website, you may deactivate JavaScript in your browser settings. In such a case, however, you cannot or not fully use our websites.

For more information on the purpose and scope of data collection and processing of such data by the plug-in provider, please consult the privacy policies of the provider. There you will also find more information on your rights and setting options in this respect to protect your privacy. http:www.google.de/intl/de/policies/privacy. Google processes your data in the USA and has committed itself to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

As at: 30 April 2021 - The information is subject to changes.