Data privacy statement

I. Name and address of the data controller

The data controller within the meaning of the EU General Data Protection Regulation (“GDPR”) is:

World Money Fair Berlin GmbH

Ollenhauerstraße 97
13403 Berlin, Germany
www.worldmoneyfair.de  
info@worldmoneyfair.de
Phone +49 30 32 76 44 01
Fax +49 30 32 76 44 02

II. General information on data processing

Scope of the processing of personal data

As a matter of principle, we collect and use the personal data of our users only to the extent that this is necessary for the provision of a functional website, as well as of our content and services. The collection and use of the personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases in which the processing of data is permitted by legal regulations.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis for this processing. When processing personal data that is necessary for the fulfillment of a contract, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is committed, Art. 6 (1) lit. c GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the above-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

Data deletion and storage duration

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the processing no longer applies. In addition, storage may take place if a legal retention period, e.g., from the General Fiscal Law or the German Commercial Code, precludes deletion.

Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

1. Data regarding the browser type and version used
2. The operating system of the user
3. The internet service provider of the user
4. The IP address of the user
5. Date and time of access
6. Websites from which the user’s system accesses our website
7. Websites that are accessed by the user’s system via our website

The legal basis for the temporary storage of data in log files is Art. 6 (1) lit. f GDPR.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. These purposes also represent our legitimate interest in data processing according to Art. 6 (1) lit. f GDPR.

The data is stored by us until the end of the respective session and then automatically deleted. Since this data is absolutely necessary for the operation of the website, you, as a user, have no option to object to the processing.

Disclosure of data

Insofar as this is necessary for the fulfillment of our service offers, we may pass on your data to third parties. This may involve the following partners: Exhibition stand construction company, transport company, graphic design studio, advertising agency, printing company. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR, insofar as the transfer of data is necessary for the performance of the contract.
Data may also be disclosed if we are obliged to disclose it to public authorities or if ordered to do so by a court of law. In this case, Art 6 (1) lit. c GDPR is the legal basis for our actions, as we pass on the data to fulfill legal obligations.

III. Registration to the webshop

If you wish to use our webshop, you will need a user account. When registering the user account, we process the following data:

– E-mail address (mandatory).

The legal basis for this data processing is Art. 6 (1) lit. b GDPR, as it concerns necessary pre-contractual measures. The purpose of the data processing is to make our webshop available, which cannot be used without the registration and use of a user account.

The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there is no longer a legal obligation to retain the data. The necessity no longer applies as soon as the user deletes his user account. In the case of legal archiving obligations, deletion takes place after its expiry (end of retention obligation under commercial law (6 years) and tax law (10 years).

IV. Order in webshop

If you place an order in our webshop, we store the information you enter during the order process. This includes the following data:

– Form of address (mandatory)
– Name,  first name (mandatory)
– Business name (mandatory)
– Address (mandatory)
– Telephone number (mandatory)
– E-mail address (mandatory)
– VAT-ID (optional)
– Payment method (invoice)

The legal basis for the processing of this data is Art. 6 (1) lit. b GDPR. The purpose of this data processing is the implementation of the contractual relationship concluded between you and us (e.g., ordering an exhibition stand or other services) or the necessary pre-contractual measures. The data will not be processed for any other purposes. The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there is no longer a legal obligation to retain the data. In the case of legal archiving obligations, deletion takes place after its expiry (end of retention obligation under commercial law (6 years) and tax law (10 years).

V. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is revisited.

We use cookies to make our offers more user-friendly, effective and secure. We use both so-called temporary cookies, which are automatically deleted when you close your browser (“session cookies”), and permanent cookies. You have the choice whether to allow cookies to be set. You can make appropriate changes in your browser settings. In principle, you have the choice of accepting all cookies, being informed when cookies are set, or rejecting all cookies. Furthermore, cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

When using cookies, a distinction must be made between technically necessary cookies and those that serve more far-reaching purposes (e.g., measuring access figures).

We use session cookies, which are technically necessary for the use of our websites. This includes cookies that allow us to recognize you while you are visiting the site as part of a single session. These session cookies contribute to the secure processing of the shopping cart and other shop functions. The legal basis for the technically necessary cookies is Art. 6 (1) lit. b and f GDPR.

For the use of cookies that are not technically necessary, we obtain your consent at the beginning of use of the website in accordance with Art. 6 (1) lit. a GDPR with the help of the cookie consent tool used. You can refuse your consent for these cookies or revoke your given consent at a later time in the cookie consent tool.

 

VI. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files that are stored on your computer, to help analyze how users use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website usage and Internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

You may refuse the storage of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.

The legal basis for the storage of the cookie is your consent (Art. 6 (1) lit. a GDPR), which we obtain at the beginning of use of the website using our cookie consent tool. If you refuse to give your consent, no user tracking will be carried out by Google Analytics.

The further evaluation of the collected data by means of Google Analytics takes place over a period of fourteen months on the basis of your declaration of consent. Subsequently, the collected data is automatically deleted.

Please note that data processing by Google may take place outside the EU/EEA. Google also processes your personal data in the USA and uses the so-called EU standard contractual clauses for this purpose. You can find information about this at https://policies.google.com/privacy/frameworks?hl=de

You can find further information on data protection at Google at

https://policies.google.com/privacy?hl=de

 

VII. Newsletter

On our website, you have the option to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us. This includes the following data

– E-mail address (mandatory
– Titel (optional)
– First name (optional)
– Last name (optional)
– Business name (optional)

whereby the data marked with “(optional)” is voluntary information provided by the user.

For the processing of the data, your consent is obtained during the registration process by means of a so-called double opt-in procedure and reference is made to this privacy policy. Consequently, Art. 6 (1) lit. a GDPR serves as the legal basis. In the double opt-in procedure, you will initially be sent only an authentication link to the e-mail address you provided after registering for the newsletter on our website. The registration to the newsletter is completed only after confirming the authentication link.

Insofar as personal data is collected and processed for registration and for sending the newsletter, this serves the purpose of preventing misuse of the services and delivering the newsletter. Your data will be deleted when it is no longer required to achieve the purpose. The data will be stored until you have unsubscribed from our newsletter. Unsubscribing can be done through the unsubscribe link in each newsletter.

VIII. E-mail contact

If you contact us by e-mail, your e-mail will be processed by us. Your data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation. Legal basis for the data processing is a consent (Art. 6 (1) lit. a GDPR). If you contact us in order to conclude a contract, the legal basis is the fulfillment of the contract or a pre-contractual measure (Art. 6 (1) lit. b GDPR). Your data will be deleted when the purpose of the data processing has been achieved. When contacting us, this may depend on the circumstances of the individual case. There may be a legal retention period that prevents immediate deletion. You can revoke your consent to us at any time for the future.

IX. Rights of the data subject

You are a data subject and you have the following rights against us:

– You can request information concerning the personal data, its origin and the purpose for which it is stored. Likewise, you must be informed if your data is transferred to third parties. In this case, you must be informed of the identity of the recipient or the categories of recipients.

– If your personal data is incorrect or incomplete, you may request that it be corrected or completed.

– You can object to the processing of your personal data for advertising purposes. Your data must then be blocked for these purposes

– You have a right to restrict processing if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data, the processing is unlawful and you object to the deletion of the personal data and request instead the restriction of the use of the personal data; the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims, or if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate grounds of the controller override your grounds.

– You can request the deletion of your data. This is possible if the legal basis for the data processing is missing or is no longer applicable. The same applies in the event that the purpose of the data processing is no longer applicable due to the effluxion of time or other reasons. Please note that deletion may conflict with an existing retention period or other interests of our company that are worthy of protection. We will be happy to inform you of this on request. If we have made your data public, we are obliged to inform each recipient that you have requested the deletion of all links to this personal data or copies of this personal data.

– You also have the right to object if your interest worthy of protection due to a personal situation outweighs the interest in the processing. However, this shall not apply if we are obliged to carry out the processing on the basis of a legal provision.

– Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes data protection.

– You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided.

State: 14. September 2022