Information pursuant to the EU General Data Protection Regulation (GDPR) for registration FRUIT LOGISTICA Mascot Race
Messe Berlin GmbH (hereinafter “Messe Berlin”) attaches great importance to data protection. This information notice informs about the processing of the personal data in connection with the event registration and supplements the Data Protection Notice on the website of Messe Berlin. For particular processing activities there will be separate information notices, where necessary.
1. Controller and data protection officer
Controller within the meaning of the General Data Protection Regulation (GDPR): Messe Berlin GmbH, Messedamm 22, 14055 Berlin, Germany, e-mail: info@messe-berlin.de. Data protection officer: group data protection officer of Messe Berlin (address: as before, Germany; e-mail: datenschutz@messe-berlin.de).
2. Categories and sources of personal data
Messe Berlin processes the following personal data in connection with this event: title, first name, surname, function, company, e-mail address and optional academic and honorary titles. With the exception of the optional data, these are mandatory details without a participation in the event is not possible. In addition, the status of registration and participation as well as related communication will be processed. Messe Berlin receives the data from the participants themselves or in connection with participation in its own events, as well as from public sources and list brokers. In the case of events held in cooperation with associations and partners, Messe Berlin also receives data from participants from them.
When user register for the event for another person (third party) or provide a third party’s data (e.g., contact details of a contact person) users ensure and assure that they are authorized to provide these data to Messe Berlin and that Messe Berlin may lawfully process those data for the purposes mentioned in section 3 below and that the third party/ies concerned have been sufficiently informed by the users about the processing of the personal data pursuant to this notice.
3. Purposes and legal basis of processing
Messe Berlin processes the personal data pursuant to section 2 in the legitimate interest of organizing and executing the event and providing an optimal service to participants (legal basis: Art. 6 (1) (f) GDPR). For organizational reasons, contact may be made by telephone in advance of the event.
In addition, the data are processed for the fulfillment of legal obligations, in particular retention and reporting obligations according to the German Fiscal Code (AO), company and statute law, other tax laws and the German Commercial Code (HGB) as well as EU regulations, the German Foreign Trade and Payments Act (AWG) (financial sanctions, ban on technical advice, assistance or training, ban on participation) and the German Act on the Tracing of Profits from Serious Crimes (GWG), such as in particular when comparing business partners or their beneficial owners with valid sanctions lists (EC) No. 881/2002), as well as for audits by the tax office or auditors and transmission of data in accordance with the Trade, Commerce and Industry Regulation Act (GewO) to which Messe Berlin GmbH or the respective associated company is subject (legal basis: Art. 6 (1) (c) GDPR in conjunction with the respective law). Furthermore, in cases of benefits in kind (e.g. hospitality, events, gifts), the personal data will be processed for the purpose of fulfilling legal obligations under the German Income Tax Act (EStG) and social security law.
If necessary, personal data will be transmitted to competent authorities (in particular the police, fire department, public order office and the ambulance and rescue service) on the basis of a legal obligation (legal basis: Art. 6 (1) (c) GDPR).
4. Categories of recipients of the data
External service providers or other companies of the Messe Berlin Group are used to carry out certain processing activities (in particular communication activities, hosting, IT support), which process the personal data on behalf of Messe Berlin (so-called “processors”). In the case of events held in cooperation with associations or business partners, Messe Berlin will also transfer the data to them for this purpose.
Insofar as persons subject to particular personal protection by the Federal Criminal Police Office (Bundeskriminalamt – BKA) or the Federal State Criminal Police Office (Landeskriminalamt – LKA) (for example, constitutional organs such as the Federal President or the Federal Government or foreign guests) participate in events, the BKA or LKA may examine all event participants. In the framework of such examination the BKA or LKA may request data such as name, company/organization and function from the organizer.
In the case of incidents, disorder, emergencies and crises the data of participants may also be transmitted to the police, law enforcement authorities, the fire brigade and ambulances, other public authorities (such as the Health Office (Gesundheitsamt)).
In addition, data are passed on to third parties for the purpose of performance of the contract. These are the following partners who are own controller within the meaning of the GDPR: Transport companies, courier services and postal services.
A disclosure of data to authorities and public bodies may occur if Messe Berlin is legally obliged to do so, be it due to laws and regulations (e.g., supervisory authority procedures) or due to a court order, resolution, judgement and the like. For compliance with tax and trade laws and regulations, the personal data are shared with the tax and other relevant public and regulatory authorities. The categories of recipients of the personal data also include courts and lawyers in the context of legal disputes, legal disputes as well as for the purpose of legal advice and furthermore auditors.
5. Data transfer to third countries
Some of the companies of the Messe Berlin group of companies and processors are located in third countries outside the EU, which do not provide the same level of data protection as the EU, in particular due to the absence of a legal framework, independent supervisory authorities or data protection rights and remedies. Messe Berlin will only transfer personal data to those third countries if the European Commission has adopted a so-called adequacy decision in this respect (Art. 45 (3) GDPR) or otherwise where appropriate safeguards in accordance with Art. 46 GDPR have been provided, in particular standard data protection clauses adopted by the European Commission pursuant to Art. 46 (2) (c) GDPR and, where necessary, supplementary measures. A copy of the safeguards can be obtained upon request (e.g., by e-mail – for contact details see section 1 above).
6. Storage period
Stored personal data will be erased, once they are no longer needed for achieving the relevant purpose of their processing. Insofar as processing is based on consent or based on a legitimate interest of Messe Berlin, the data concerned will no longer be processed for the associated purpose after receipt of the withdrawal of consent or the objection and, if applicable, will be deleted, unless there are statutory exceptional circumstances. Notwithstanding the foregoing, personal data which are subject to retention obligations under commercial or tax laws will only be deleted after the expiry of the statutory retention periods.
7. Data protection rights
To exercise the following rights, data subjects can contact the controller at any time (contact details see section 1 above).
Rights of the data subjects pursuant to Art. 12-21 GDPR: the right to access about personal data, the right to rectification, erasure and data portability as well as to restriction of processing. If consent has been given, this can be withdrawn at any time with effect for the future
Rights of objection
Insofar the processing is based on legitimate interests (see section 3 above), data subjects have the right to object to the processing of their personal data for reasons relating to the particular situation.
Furthermore, there is the right to object to the processing and use of data for advertising purposes at any time. The newsletters also include an unsubscribe link.
If data subjects are of the opinion that the data processing violates data protection law, they have the right to lodge a complaint with the competent supervisory authority of their choice (Art. 77 GDPR in conjunction with section 19 of the German Federal Data Protection Act (Bundesdatenschutzgesetz)).