Your data is in good hands

Would you like to know what happens to your data and who you can contact? Find out here: What we do and what rights you have — our data protection summarized in short words:

  • We, MSM Messe Service Merkhoffer GmbH, are responsible for everything here.

  • We only store and use data from you that we need or that you have expressly consented to the processing of.

  • Of course, there is a § for everything. We only do what we're allowed to do.

  • Others only receive your data if we are unable to do something ourselves or on site. Of course, we have concluded contracts with our service providers to ensure that they take care of your data as much as we do.

  • If we no longer need your data, it will be deleted. If we have to keep it, e.g. for the tax office, then the data will be blocked. “Blocking” means that they are technically protected in such a way that they can no longer be changed or processed further.

  • Your data is secure — we're taking good care of that!

  • If you would like to know whether and which data we have about you, if you would like to delete or have this data handed over, or if you want to object to specific data processing, call us or write to us. You can also contact us if you would like to withdraw your consent.

  • If you are dissatisfied with how we handle your data, there is also a competent supervisory authority in the last step (in Bavaria: Bavarian State Office for Data Protection Supervision). You can call or write to them. Of course, we hope that we will talk beforehand and find a joint solution.

And now for everyone who wants to know more details, the whole thing in detail: Below you will find comprehensive information about the processing of your personal data when you visit our website. Personal data is all data relating to an identified or identifiable natural person, e.g. name, address, e-mail addresses, user behavior.

1. Who is responsible for processing?

Responsible person in accordance with Article 4 (7) GDPR:
You can contact our data protection officer at:

2. Website hosting

Our website is on the web server (hosting) of

Amazon Web Services & Fastly
We host our website at InterNetX GmbH. The provider is InterNetX GmbH, Johanna-Dachs-Straße 55, 93055 Regensburg (hereinafter InterNetX). When you visit our website, InterNetX collects various log files, including your IP addresses. For details, see InterNetX Online GmbH's privacy policy https://www.internetx.com/datenschutz/INTERNETX is used on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in presenting our website as reliably as possible. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider.

This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

3. Which data do we collect and store for which purposes?

a) When visiting the website for purely informational purposes

If you only visit our website for information purposes, do not register and do not otherwise enter any other data or actively send us, then we process the personal data that your browser transmits to our server. These are stored until they are automatically deleted without you doing anything. What information is that? This can be found below: IP address of the requesting computer,

  • date and time of access, time zone difference to Greenwich Mean Time (GMT)

  • Content of the request (page visited)

  • Access status/HTTP status code

  • Each amount of data transferred

  • browsers

  • operating system

  • language and version of the browser software.

We use the above data to operate our website, in particular to identify and eliminate website errors, to determine the load on the website and to make adjustments and improvements. The legal basis for data processing is Art. 6 Paragraph 1 S.1 lit. f GDPR. Our legitimate interest results from the data collection purposes just mentioned. In no case do we use the collected data for the purpose of drawing conclusions about you. The data is also not combined with other data sources.

The personal data mentioned will only be stored for the duration of your visit. They will then be deleted immediately.

If we use external links on our pages that redirect you to other service providers, you can recognize this by the link icon for external links, the mouse cursor changes shape when it is on a link and the link to which is redirected appears at the bottom left of the website. If you click on an external link, your IP address will be visible to the provider of the site.

b) When contacting by email and/or contact form

You can contact us via the email address provided or the contact form. In this case, the data you provide (your email address, possibly your name and telephone number) will be stored in order to process your request and answer your questions.

The legal basis for processing the data that you provide to us when you send us an email is our legitimate interest in answering your request and clarifying the facts described in the email (Art. 6 para. 1 lit. f DSGVO). If the aim is to conclude a contract with the e-mail contact, the legal basis for processing your data is Art. 6 para. 1 lit. b DSGVO.

If the request is assigned to a contract, we delete the data arising in this context after the deadlines for the contract period, otherwise after 3 months, or restrict processing if there are legal storage obligations.

c) For other features and offers on our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other usual functions to analyze or market our offers, which are presented in more detail below under Sections 8 and 9. To use these additional services and functions, you must generally provide additional personal data or we process this additional personal data in order to provide the respective services and enable functions. For all data processing purposes described here, the following data processing principles apply.

4. How long do we store your data and when do we delete it?

If this data protection declaration does not specify specific deletion periods for each case, we will delete your personal data as soon as the purpose of storage no longer applies. However, we must continue to store your data if we are required to do so by European or national legislators in EU regulations, laws or other regulations to which we are subject.

However, if the storage period prescribed in the above standards expires, your data will of course be deleted — unless it is still required at that time to conclude a contract with us or to fulfill a contract that you have concluded with us.

5. What rights do you have as a data subject?

a) Information

In accordance with Article 15 GDPR, you can request information from us about the personal data we process at any time. In particular, if you request this, we will provide you with information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, and the existence of automated decision-making, including profiling and, if applicable, provide meaningful information about their details.

b) Correction

In accordance with Article 16 GDPR, you can immediately request the correction of incorrect or completed personal data stored by us.

c) Deletion

In accordance with Article 17 GDPR, you have the right to request the deletion of your personal data stored by us.

d) Restriction of processing

In accordance with Article 18 GDPR, you can request that the processing of your personal data be restricted.

f) Withdrawal of consent

You can revoke your consent given to us at any time in accordance with Article 7 (3) GDPR. As a result, we are no longer allowed to continue data processing based on this consent in the future.

g) Objection to data collection in special cases and to direct marketing

In accordance with Article 21 GDPR, you can object to the processing of your personal data, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. You can communicate your objection informally by telephone, e-mail, or to our postal address listed at the beginning of this privacy policy.

If you would like to exercise one or more of your rights or need more information about this, please feel free to contact us using the contact details provided above.

6. When and where do we share your data?

We only transfer your data to third parties if:

  • you have given your express consent in accordance with Art. 6 Paragraph 1 S.1 lit.a GDPR,

  • the transfer in accordance with Article 6 (1) (f) GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

  • in the event that there is a legal obligation to transfer data in accordance with Art. 6 Paragraph 1 S.1 lit.c GDPR, and

  • This is legally permitted and is required in accordance with Art.6 Paragraph 1 S.1 lit.b GDPR to process contractual relationships with you.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below. In doing so, we also state the defined criteria for the storage period.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this fact in the respective description of our offer.

8. Do we collect and use data from your devices (cookies and tracking)? Yes!

Many websites use technical tools for various functions, in particular cookies, which can be stored on your device. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the location that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but are primarily used to make the website faster and more user-friendly.

However, we do not use any cookies or collect any tracking information on our website.

9. How secure is your data?

All information that you submit to us is stored on servers within the European Union. Unfortunately, the transmission of information over the Internet is not completely secure, which is why we cannot guarantee the security of the data transmitted to our website via the Internet. However, we use technical and organizational measures to secure our website and other systems against loss, destruction, access, alteration or distribution of your data by unauthorized persons. In particular, we transmit your personal data in encrypted form. We use the SSL (Secure Socket Layer) [or TLS (Transport Layer Security)] coding system.

10. Status and update of this privacy policy

We reserve the right to change this privacy policy at any time with effect for the future. The latest version is available on the website. Please visit our website regularly and find out about the applicable data protection regulations.

This “slightly different kind” privacy policy is based on the privacy policy of Dr. Adina Weiß, attorney for data protection law (https://weisdatenschutzrecht.de)

Dr. Weiß is a member of the DSZ expert network (https://dsz365.de). Data Protection Officer Wolfgang Evers, Brandlweg 5, 83543 Rott am Inn from DSZ GmbH (wolfgang.evers@dsz365.de) (also a member of the DSZ expert network) has created this privacy policy and regularly monitors it. If you would also like such a privacy policy, you are welcome to contact us or Dr. Weiß.

As of August 2022