Privacy Policy

Controller

The controller for the processing of personal data on this website is:

Ceramex Media GmbH
Bruchwiesen 10
21217 Seevetal
E-mail: a.kirchner@ceramex-media.de

When you visit this website

When you open a page, your browser transmits data to our server, which stores it temporarily in a log file: IP address, date and time, the address requested, the volume of data transferred, a message on whether the request succeeded, and your browser type and operating system.

This processing is necessary in order to deliver the page, keep it stable and detect attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in secure operation.

Log data is deleted after seven days.

Cookies and analytics

This website sets strictly necessary cookies only: a session cookie and a cookie protecting forms against misuse (CSRF). They are required for an order process spanning several steps and expire when you close your browser or shortly thereafter.

There is no analytics and no behavioural tracking. We embed no fonts, maps, videos or other content from third parties; when you open these pages, your IP address is transmitted to no one but our own server. This is also why there is no consent banner here: no consent is required for strictly necessary cookies (§ 25 (2) no. 2 TDDDG).

The trade fair calendar

The public calendar contains information about trade fairs: name, period, location, venue and organiser. As a rule this is not personal data.

Exhibitor and company data

We compile directories of the exhibitors of individual trade fair editions and supply them to business customers for a fee. Because a business e-mail address such as `firstname.lastname@company.com` may relate to an identifiable person, the following information applies.

**Where the data comes from.** We do not collect it from you, but from publicly available sources:

• the exhibitor directories published by the trade fair organisers themselves
• the websites of the companies, in particular the home page, imprint and contact page

**What data this is.** Company name, address, country, website, business contact details such as e-mail address and telephone number, hall and stand number, and the trade fair at which the company exhibited.

**Why we process it.** To compile and supply exhibitor directories to commercial customers seeking contact with exhibitors.

**Legal basis.** Art. 6 (1) (f) GDPR. Our legitimate interest, and that of our customers, lies in initiating business contacts. We process business data only; we do not process special categories of personal data within the meaning of Art. 9 GDPR.

**Recipients.** Purchasers of a directory receive the data it contains as a file. They are independently responsible for any further processing and are contractually obliged to comply with applicable data protection and competition law.

**Retention.** We store the data for as long as the directory for the trade fair edition concerned is offered, and beyond that where statutory retention obligations apply.

**Information pursuant to Art. 14 GDPR.** We provide it by means of this statement. Notifying each individual company separately would involve disproportionate effort (Art. 14 (5) (b) GDPR), as the data originates from published directories and is processed in large numbers.

**Your right to object.** You may object to the processing of your data at any time under Art. 21 GDPR — informally, to a.kirchner@ceramex-media.de. We will then remove the entry from our directories.

**The suppression list.** We add an address that has been objected to onto a suppression list. This is necessary so that it does not re-enter our records the next time we compare them against our sources. For this purpose we store the address itself and nothing else, and use it for this purpose only. This is how an objection takes lasting effect rather than lasting until the next data run.

Orders, payment and invoices

For a purchase we process the details you enter in the order form: name, e-mail address, company, address, country and, where applicable, VAT identification number. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

We also record the time and IP address of your consent to immediate commencement of performance. This is provided for by law (§ 356 (5) BGB) and is the precondition for us being allowed to supply the file immediately. The legal basis is Art. 6 (1) (c) GDPR.

**Payment via PayPal.** For payment you are forwarded to PayPal. PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, then processes the data required for the payment. PayPal's privacy policy applies. The legal basis is Art. 6 (1) (b) GDPR. PayPal collects no data before you are forwarded; we embed no PayPal script on our pages.

**Invoices.** We send invoices by e-mail. We retain invoice data in accordance with commercial and tax law (§ 147 AO, § 257 HGB), as a rule for ten years. The legal basis is Art. 6 (1) (c) GDPR.

Notification when a directory becomes available

If a directory is not yet for sale, you can ask to be notified. For this we store your e-mail address and the trade fair edition you are interested in, and use both for that single message only. The legal basis is your consent under Art. 6 (1) (a) GDPR; you may withdraw it at any time by an informal message to a.kirchner@ceramex-media.de.

Contact form

You can write to us using the contact form. We process what you enter — your name, your e-mail address and the text of your message — as well as the IP address the message was sent from.

**Purpose.** We use your name, address and message solely to answer your enquiry. We process the IP address solely to detect and prevent misuse of the form; it plays no part in answering you.

**Legal basis.** Art. 6 (1) (b) GDPR where your enquiry concerns a contract or aims at one, otherwise Art. 6 (1) (f) GDPR — our legitimate interest in answering enquiries. For the IP address, Art. 6 (1) (f) GDPR (protection against misuse).

**Recipients.** Your message is additionally delivered to our own mailbox and processed there by our e-mail provider (see “Processors”). We do not pass it on to any third party.

**Retention.** We keep the message until your enquiry has been dealt with, and at most six months after our last reply. Where commercial or tax law requires longer retention of the correspondence, those periods take precedence.

**Voluntary.** Providing this information is voluntary. Without a name, an e-mail address and a message we cannot answer your enquiry. You may instead contact us at any time by any of the means given in the imprint.

To guard against automated submissions the form contains a hidden field that only form robots fill in. No third-party service is used for this, and no data is transferred to third parties.

Processors

We use the following service providers, which process data on our behalf under a contract pursuant to Art. 28 GDPR:

• HQ GmbH, Triptiser Str. 20, 07955 Auma-Weidatal — operation of the website
• HQ GmbH, Triptiser Str. 20, 07955 Auma-Weidatal — sending invoices and notifications

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future.

To do so, write informally to a.kirchner@ceramex-media.de.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
poststelle@lfd.niedersachsen.de · +49 511 120-4500

No automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

Status of this statement

We adapt this statement when our processing changes. The version published at the time applies; the date is shown at the foot of the page.

Governing version

This is a translation. The German version of this page prevails.