Data protection policy
The protection of your personal data during the collection, processing and use of your data when you visit our website is important to us. Therefore, this data protection policy will inform you about the type, scope and purposes of the collection and use of personal data.
I. Name and address of the responsible party
We are responsible for data processing.
Bundesverband der Hörgeräte-Industrie e.V. (German Association of the Hearing Instruments Industry e.V.)
Herriot Strasse 1, 60528 Frankfurt am Main
Phone: +49 (0)69 664 26 34 0
II. Collection and storage of personal data and the nature and purpose of their use
1. When visiting the website/legal basis/length of storage
When you call up our website www.ausstellung-euha.org, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically erased:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which the access takes place (referrer URL),
- The browser used and, if applicable, the operating system of your computer and the name of your access provider.
We process the data mentioned above for the following purposes:
- To ensure easy connection to the website,
- To guarantee ease of use of our website,
- For evaluation of system security and stability and
- For other administrative purposes.
If we obtain consent for the processing of your personal data, the legal basis for the processing of the data is Art. 6 (1)(a) GDPR. If we process your personal data because this is necessary for the performance of a contract or in the context of a relationship with you similar to a contract, the legal basis for the processing of the data is Art. 6 (1)(b) GDPR. If we process your personal data for the fulfilment of a legal obligation, the legal basis for the processing of the data is Art. 6 (1)(c) GDPR.
Furthermore, Art. 6 (1)(f) GDPR is the legal basis for data processing if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.
Within the framework of this data protection policy, we always indicate the legal basis on which we base the processing of your personal data.
We always erase your personal data when the purpose for storing it no longer applies. However, it may be stored beyond this if this is a legal requirement. In these cases, we erase your personal data after the relevant legal requirement has ended.
2. Registration on our website
You have the option of registering on our website by providing personal data (“account”). The respective input mask used for registration determines which personal data is transmitted to us during this process.
The following data are mandatory for registration:
- Your company data
- Your address
- Your VAT number/VAT ID
- The contact details of a contact person (name, address, phone number and email address)
You also have the option of entering the following additional data in your account:
- The contact details of a further contact person (name, address, phone number and email address)
- An alternative billing address
- The contact details of your exhibition stand provider
You have the option of managing, updating and also erasing all the data you have entered. The legal basis for processing the data for registration is Art. 6 (1)(a) GDPR in the case of consent and Art. 9 (2)(a) GDPR in the case of health data. If you register with us for the purpose of fulfilling or initiating a contract, the legal basis for processing the data is also Art. 6 (1)(b) GDPR and for health data Art. 9 (2)(h).
The data accrued when using your account is generally stored for the duration of the existence of the account and only erased upon request. Large parts of your user data can be viewed and changed or erased directly by you in your account. You can also erase your account completely at any time. This will be done after you have notified us accordingly.
The personal data you enter is collected and stored exclusively for our internal use and for our own purposes. We may arrange for it to be passed on to one or more order processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use determined by us. For further data processing contractors, please refer to our notes on the ordering process under VII.
When you register on our website, we also store the IP address assigned by your internet service provider (ISP) and the date and the time of registration. This data is stored because it is the only way to prevent misuse of our services and, if necessary, to enable us to investigate criminal offences that have been committed. In this respect, the storage of this data is necessary for our protection. As a matter of principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or it is necessary for criminal prosecution.
Your registration and the voluntary provision of your personal data allows us to offer you content and services that can only be offered to registered users due to the nature of our services.
3. Use of registration data for the online exhibitor directory
If you place an order in our online shop and your data is thereby transmitted to our cooperation partner NEUREUTER FAIR MEDIA GmbH for the purpose of creating an entry in our online exhibitor directory (see V. 1.), the access data to your account will also be used for your access to the website www.exhibitors.ausstellung-euha.de so that you can log in there (single log in). You can view the Data Protection Policy of that website at www.exhibitors.ausstellung-euha.de.
III. The passing on of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
- You have given your express consent pursuant to Art. 6(1)(1)(a) GDPR,
- The disclosure pursuant to Art. 6(1)(1)(f) GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- In the event that there is a legal obligation to pass on the data pursuant to Art. 6(1)(1)(c) GDPR, and
- This is legally permissible and required pursuant to Art. 6(1)(1)(b) GDPR for the processing of contractual relationships with you.
See VI. 1 for details on the transfer of data to our cooperation partners.
Information is stored in the cookie that is related to the specific device used. This does not mean, however, that we obtain direct knowledge of your identity as a result of this. Some browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. Although, completely deactivating cookies may mean that you cannot use all the functions of our website.
You can prevent or restrict the installation of cookies by changing the settings in your internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the particular browser you use. If you have any questions, please use the help function or documentation of your browser or contact the manufacturer or support desk.
In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the particular Flash player you use. If you have any questions, please also refer to the help function or documentation of your Flash player or contact the manufacturer or support desk.
Nevertheless, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
V. Online shop
Your personal information for order processes is used exclusively within our company and affiliated companies as well as by the company we commission with the processing of orders.
1. Data processing for orders
When processing your orders, we work with other companies who are responsible, for example, for the actual implementation of the stand layout at the trade fair, the production of exhibitor passes and the creation of an online exhibitor directory. In so doing, we ensure that our cooperation partners also comply with the provisions of data protection. The legal basis for passing on your address data to the shipping company is Art. 6(1)(b) GDPR. If you place an order the processing of your personal data is absolutely necessary for the fulfilment of the contract with you. The order process data will be stored by us as long as necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and for commercial- and tax-law retention periods for the period prescribed by law. This retention period is usually 10 years to the end of the respective calendar year.
We pass on your company data and the data of your contact persons to Deutsche Messe AG, Messegelände, 30521 Hannover, for the purpose of processing orders for stand and additional space, conference rooms and lead tracking licences. The legal basis for this is Art. 6 (1)(b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you. The data will be stored by us as long as necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and for commercial- and tax-law retention periods for the period prescribed by law. This retention period is usually 10 years to the end of the respective calendar year.
We pass on your company data and the data of your contact persons to ADITUS GmbH, Straße der Nationen 5, 30539 Hannover, for the purpose of producing exhibitor passes. The legal basis for this is Art. 6 (1)(b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you. The data will be stored by us as long as necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and for commercial- and tax-law retention periods for the period prescribed by law. This retention period is usually 10 years to the end of the respective calendar year.
We pass on your company data and the data of your contact persons to NEUREUTER FAIR MEDIA GmbH, Zenettiplatz 2, 80337 Munich, for the purpose of creating an online exhibitor directory. After you have placed your order in our online shop (e.g., for a stand and additional space), you can use your access data to customise your company profile as an exhibitor on www.exhibitors.ausstellung-euha.de. The legal basis for this is Art. 6 (1)(b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you. The data will be stored by us as long as necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and for commercial- and tax-law retention periods for the period prescribed by law. This retention period is usually 10 years to the end of the respective calendar year.
2. Data access by us
We use your stored data to carry out our business relationship and, if you have given your consent, to send you information about our other offers.
3. Contact by us
We will contact you within the scope of our business relationship with you. For this purpose, we use the contact data provided by you. This includes, in particular, order confirmations and shipment notifications. As a rule, we contact you by email.
4. Communication between you and us
You can contact us using the contact data contained in the legal notice of our website (e.g., email address, telephone number, postal address). After processing your request, the data will initially be stored in case of queries. However, you can request erasure of the data at any time. If you do not request erasure of the data, the data will be erased after processing of the matter has been completed, provided that there are no legal obligations to retain the data.
VI. Rights of data subjects
You have the right:
to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, relevant information on the details of the data;
pursuant to Art. 16 GDPR, to demand without delay the rectification of incorrect or incomplete personal data stored by us;
pursuant to Art. 17 GDPR, to demand the erasure of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful and we no longer require the data, but you refuse its erasure as you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, to receive your personal data that you have provided us with in a structured, standard and machine-readable format or to request its transfer to another responsible party;
pursuant to Art. 7(3) GDPR, to revoke your consent to us at any time. As a result, we may no longer continue data processing based on this consent for the future and
you may complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can turn to the supervisory authority of your usual place of residence, workplace or our headquarters.
VII. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR if there are reasons for doing so arising from your particular situation or if the objection is related to direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without the indication of any particular situation.
If you wish to exercise your right of revocation or objection, simply send an email to firstname.lastname@example.org.
VIII. Data security
We use the standard SSL (Secure Socket Layer) protocol in conjunction with the highest encryption level supported by your browser. Generally speaking, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
IX. Current validity and amendment of this data protection policy
This data protection policy is currently valid as of April 2021.
Due to the further development of our website and our services mentioned above or due to changes in legal or official requirements, it may become necessary to change this data protection policy. You can access and print out the current data protection policy from the website at any time at www.ausstellung-euha.org/Datenschutz.