I. Contact details and company data protection officer

The controller pursuant to Article 4 (7) of the GDPR is Nordwestdeutsche Messegesellschaft Bremen-Hannover mbH, Heidplackenweg 9, 26209 Hatten, Germany, telephone: +49 (0) 441 92070-777, fax: +49 (0) 441 92070-572, email: info@iaw-messe.de. The company data protection officer of Nordwestdeutsche Messegesellschaft Bremen-Hannover mbH can be contacted at the above address, for the attention of the data protection department, or at datenschutz@iaw-messe.de.

II. Purposes of data processing and legal basis

The data is collected, stored and, where appropriate, shared by us to the extent required in order to take and publish photographs during an event or trade fair. The data is therefore collected, stored and shared for the purposes of a legitimate interest, which is weighed by a balancing of interests in individual cases if it is contrary to a protectable interest (especially in the case of children) on the basis of Article 6 (1) (f) of the GDPR. Data is published on the basis of Sections 22 and 23 of the German Copyright Act for Works of Art (KUG). Our legitimate interest is to fulfil and ensure documentation of the event or trade fair. This is achieved via the production of photos, visual and audio recordings of events and distribution of these recordings on websites, social media channels and in our own print media or for dissemination for editorial and journalistic use by third parties, for purposes of press and public relations work and presentation of the activities of the controller in order to raise the profile of the controller, encourage participation in similar events and advertise said controller’s activities. Failure to provide this data would result in the following:
1. the data is not recorded and events and trade fairs cannot be documented.
2. the data cannot be published and consequently no press or public relations work can be carried out.

1. Personal data can be accessed only by responsible staff/departments.
2. We publish photos on these channels:
- website
- advertising materials
- advertisements in print magazines
- online banner advertising
- direct mailings (post)
- email newsletters
- provision (online) for press reports by third parties
- Facebook
- Instagram
- LinkedIn
- Xing

We employ the latest technical measures to ensure the protection of personal data. These are adapted to the current state of the art.

III. Duration of data storage

If we do not process your data for internal purposes, we store the data collected for photo processing and photo publication until the purpose for which the data was collected has been fulfilled and it is no longer required. Your data is also erased if storage is not permissible. Upon completion of its use, the data collected for this process is erased or blocked if erasure is not possible.

IV. Your data protection rights

You have the right to request information from us at any time about the personal data we have stored about you (Article 15 of the GDPR). This also applies to the recipients or categories of recipient with whom this data is shared and the purpose of storage. In addition, you have the right to request that data be rectified under the conditions laid down in Article 16 of the GDPR and/or erased under the conditions laid down in Article 17 of the GDPR and/or that its processing be restricted under the conditions laid down in Article 18 of the GDPR. Furthermore, you can request that data be transmitted at any time under the conditions laid down in Article 20 of the GDPR provided that we still have the data stored. In order to safeguard legitimate interests (Article 6 (1) (f) of the GDPR), you can at any time object to the processing of your personal data with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the above purposes unless:
- there are compelling and legitimate grounds for processing that override your interests, rights and freedoms, or
- the processing is necessary for the establishment, exercise or defence of legal claims.
Under the conditions laid down in Article 21 (1) of the GDPR, data processing can be objected to on grounds relating to the particular situation of the data subject.

V. Contact All information

requests, access enquiries, revocations or objections to data processing should be sent by email to our data protection officer at datenschutz@iaw-messe.de or by letter to the address given in section I. For more detailed information please refer to the complete text of the GDPR, which is available online at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN and our privacy policy, which can be accessed online at www.iaw-messe.de/privacy-policy.aspx. You can also submit a complaint about data protection issues to the competent supervisory authority (Lower Saxony Supervisory Authority – the data protection authority for the German state of Lower Saxony): Niedersachsen Aufsichtsbehörde – Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstr. 5, 30159 Hannover, Germany