Buy tickets
Buy tickets

Impressum

Privacy Policy

With the following information, we provide you with an overview of the processing of your personal data by us and your rights under data protection law.

Who is responsible for data processing and whom can I contact?

The responsible entity is:
 
Südwestdeutsche Warenbörsen e.V.
Böblingerstr. 245
70199 Stuttgart
 
Telephone: +49 711 / 252 79 500
  

Website: https://www.warenboersen-suedwest.de/
Contact: https://www.warenboersen-suedwest.de/kontakt/

To whom does this Privacy Policy apply?

This Privacy Policy applies to visitors to our website, in particular to interested parties as well as to persons who wish to use our services or obtain information about Südwestdeutsche Warenbörsen e.V. and its events. It also serves as initial information for all persons whose data we have researched from publicly accessible sources or obtained through business cards.

Which data do we use?

Visiting our website

Log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. In order for the pages to be displayed in your browser, the IP address of the device you use must be processed. Additional information about the browser of your device is also processed.

Under data protection law, we are obliged to ensure the confidentiality and integrity of personal data processed with our IT systems.

For this purpose, the following data are logged:

The data are also used to rectify errors on the website.

Our website is hosted by a service provider within the European Economic Area. A data processing agreement pursuant to Article 28 GDPR exists.

The legal basis for this data processing is our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest is the operation of this website and the implementation of the protection objectives of confidentiality, integrity, and availability of data.

Contacting us

If you contact us by email or via contact forms, for example to request information, the information you provide will be stored for the purpose of processing the request. The information requested in the contact form is required in order to process your request, address you correctly, and provide you with a response.

Newsletter

Newsletter registration

If you wish to receive our circulars and information letters, we require your email address as well as information that allows us to verify that you are the owner of the specified email address and that you consent to receiving the circulars. Further data are not collected or are collected only on a voluntary basis. These data are used exclusively for sending the requested information and are not passed on to third parties.

The processing of the data entered into the newsletter registration form is carried out exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may revoke your consent to the storage of the data, the email address, and its use for sending the circulars at any time by email. The legality of data processing operations carried out prior to the revocation remains unaffected.

The data stored for the purpose of receiving the newsletter are retained until you unsubscribe from the distribution list and are deleted after cancellation. Data stored for other purposes remain unaffected.

Newsletter-Analyse

Our newsletters may be subject to statistical analysis of usage data. For this purpose, we may record email openings and internal clicks. This information serves to measure and optimize the success of our newsletter campaigns by making the content more relevant to our target audience.

The legal basis for this analysis is our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest is the evaluation and optimization of communication with customers and interested parties.

Newsletter-Dienstleister

We use an external service provider as a processor for the dispatch and analysis of our newsletters on the basis of a data processing agreement pursuant to Article 28 GDPR.

Cookies

Our website uses cookies. Cookies are information transmitted by our web server or third-party web servers to your browser and stored there for later retrieval. Cookies may be small files or other forms of information storage.

Cookies store information related to the specific device used. Cookies contain a characteristic string that enables unique identification of the browser when the website is accessed again. A cookie also contains information about its origin and storage duration. This does not mean that we obtain direct knowledge of your identity.

When visiting our website, cookies that are strictly necessary for operating the website are set. These essential cookies may include cookies required for displaying the website via a content management system (e.g. TYPO3), cookies that recognize language settings, or cookies that document whether you have consented to or rejected the use of additional (non-essential) cookies.

The legal basis for processing personal data using essential cookies is our legitimate interest pursuant to Article 6(1)(f) GDPR. Our overriding legitimate interest is the operation of our website.

We also use non-essential cookies to collect additional information about the interests or usage behavior of website visitors in order to analyze and optimize our website and customer interactions.

The legal basis for processing personal data using non-essential cookies is your explicit consent, which we request before such cookies are set.

Google Analytics

We use the web analytics service Google Analytics with IP anonymization. Google Analytics is a web analytics service provided by Google Ireland Limited. Cookies are used as part of Google Analytics.

Within the scope of IP anonymization, IP addresses collected are shortened by Google within the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transmitted to the USA and shortened there. The transmitted IP addresses are not merged with other Google data.

You can prevent the storage of cookies via your browser settings. You can also prevent Google from collecting and processing data by installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

The use of Google Analytics may involve the transfer of personal data to a third country outside the EU without an adequate level of data protection. Appropriate safeguards pursuant to Article 46 GDPR exist. Evidence of such safeguards can be provided upon request.

ReCAPTCHA

We use the reCAPTCHA service of Google Ireland Limited. This service serves to distinguish whether the input in a form is made by a natural person or abusively by machine and automated processing. As part of reCAPTCHA, your IP address and other data required by Google for the reCAPTCHA service are transmitted to Google. Further information on the privacy policies of Google Inc. can be found at https://www.google.com/intl/de/policies/privacy/

The legal basis for this data processing when using reCAPTCHA is Art. 6(1)(f) GDPR. Our legitimate interest is the security of our website and the protection against spam.

When using reCAPTCHA, personal data may be transferred to a third country outside the EU without an adequate level of data protection. Appropriate safeguards for the data transfer pursuant to Art. 46 GDPR exist. Evidence of the appropriate safeguards (standard contractual clauses / standard data protection clauses) will be provided to you upon request at any time. Please contact us for this purpose using the contact details stated above.

Registration for the event

If you register via our website as a participant for participation in one of our events, our external service provider processes your personal data within the scope of registration as a processor of the organizer.

Registration for the event

If you register to participate in one of our events, the organizer processes the data provided by you during registration in order to enable your participation in the event, in particular to send you a registration confirmation, if applicable for identification at admission to the event and, if applicable, for carrying out the payment process for paid events.

The legal basis for this is Art. 6(1)(b) GDPR; the processing of your data is necessary for the performance of the contract regarding your participation in the event.

If the organizer additionally collects data that is not necessarily required for the performance of the contract with you, this data collection serves to optimize the event or your event experience, for example to adapt and optimize the event according to the interests of the participants and the target group and for the preparation, evaluation and analysis of the event.

The legal basis for this processing is Art. 6(1)(f) GDPR, the overriding legitimate interest of the organizer in the optimization, evaluation and analysis of the event.

If, as part of registration, you additionally give your explicit consent for the processing of certain data for specific purposes, the legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR, which can be revoked by you at any time.

For registration for our events, the organizer uses the booking system WooCommerce and, for the booking of meeting rooms, the plugin Amelia Pro as processors on the basis of corresponding data processing agreements pursuant to Art. 28 GDPR.

In the following, it is explained which data are processed for which purposes within the scope of registration for an event.

Payment information

If you order paid tickets for the event, your data and payment information for carrying out the payment are processed either by Stripe Inc. in Germany as payment service provider or by a payment service provider selected by the organizer. The payment service provider is the controller for these payment data and payment information.

Detailed information on data processing and data protection can be found here: https://stripe.com/de/privacy

Participation in our events

When participating in the event, data are collected and processed. During admission control, the data stored on the ticket relating to the person of the ticket holder are collected and processed. If applicable, data on the time of admission and, if applicable, also on the time of leaving the event may be stored.

The legal basis for this is Art. 6(1)(b) GDPR; the processing of your data is necessary for the performance of the contract regarding your participation in the event.

For carrying out admission control, the organizer uses the ticketing system used within the scope of ticket purchase via WooCommerce as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Event photography

Photo and film recordings may be made within the scope of the event. These photo and film recordings may show event participants and make them identifiable. These photo and film recordings may be used for public relations and the documentation of the event. Publication of the photo and film recordings may take place both offline (print) and online, in particular on the website of the organizer or on the pages of the organizer on various social media websites.

The legal basis for this processing is Art. 6(1)(f) GDPR, the overriding legitimate interest of the organizer in documenting the event and using photo and film recordings of the event for public relations purposes.

If you have consented to the creation and publication of photo and film recordings, the legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR, which can be revoked by you at any time.

Purpose and legal basis of data use

We process your personal data in accordance with the provisions of the General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG). Please also note our information about your right to object under Article 21 EU GDPR.

a) For the performance of contractual obligations (Art. 6(1)(b) EU GDPR)
The processing of personal data is carried out for the performance of our services as well as for the performance of pre-contractual measures which are carried out at your request.

b) On the basis of your consent (Art. 6(1)(a) EU GDPR)

Insofar as you have given us consent to process personal data for specific purposes (e.g. participation in one of our events or ordering a circular), the lawfulness of this processing is given on the basis of your consent. Consent given may be revoked at any time. Please note that the revocation only takes effect for the future. Processing carried out before the revocation is not affected by it.

c) Within the scope of balancing of interests (Art. 6(1)(f) EU GDPR)

Insofar as necessary, we process your data beyond the actual performance of the contract to safeguard legitimate interests of us or third parties.

Integration of third-party services and content

Our offering may include content, services and performance of other providers. These include, for example, maps provided by Google Maps, videos from YouTube, as well as graphics and images from other websites. In order for these data to be accessed and displayed in the user’s browser, the transmission of the IP address is mandatory. The providers (hereinafter referred to as “third-party providers”) therefore perceive the respective user’s IP address. Even though we endeavor to use only third-party providers who require the IP address only in order to deliver content, we have no influence on whether the IP address may be stored. This process serves, among other things, statistical purposes. Insofar as we become aware that the IP address is stored, we inform our users accordingly.

Who receives my data?

Within Südwestdeutsche Warenbörsen e.V., those entities receive access to your data which require it to fulfill our contractual and legal obligations or within the scope of balancing of interests. In order to answer inquiries, it may be necessary that these have to be transmitted to third parties. Service providers and agents used by us may also receive data for these purposes if they maintain confidentiality and comply with our data protection instructions. Data are passed on to third parties exclusively within the scope of the regulations of the EU GDPR and the BDSG.

Transfer for the ordering of publication

The personal data collected by us are passed on to the delivery company commissioned with delivery (e.g. DHL).

Are data transferred to a third country?

A transfer of data to countries outside the EU or the EEA (so-called third countries) does not generally take place.

How long are my data stored? 

We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations. If the data are no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their temporary further processing is necessary to comply with commercial and tax law retention obligations, such as the German Commercial Code and the Fiscal Code. The retention or documentation periods specified there are six to ten years.

Data protection rights

You have the right of access under Article 15 EU GDPR, the right to rectification under Article 16 EU GDPR, the right to erasure under Article 17 EU GDPR, the right to restriction of processing under Article 18 EU GDPR, the right to object under Article 21 EU GDPR, as well as the right to data portability under Article 20 EU GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 EU GDPR in conjunction with Section 19 BDSG).

A list of the supervisory authorities and their contact details can be found at the following link:
www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

You may revoke consent granted to the processing of personal data at any time vis-à-vis us. Please note that the revocation only takes effect for the future. Processing carried out before the revocation is not affected by it. Please also note our information about your right to object under Article 21 EU GDPR.

To exercise your rights, please use the contact details stated above.

Obligation to provide data

Within the scope of our business relationship or the ordering of services, you must provide those personal data which are necessary for the performance of the business relationship or the provision of a service and the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without these data, we will generally have to refuse the conclusion of the contract or the execution of the order, or we will no longer be able to perform an existing contract and may therefore have to terminate it.

Information about your right to object under Article 21 EU GDPR

Right to object in individual cases

You have the right, on grounds relating to your particular situation, to object to the processing of your personal data. The prerequisite for this is that the data processing is carried out in the public interest or on the basis of a balancing of interests. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or your personal data serve the assertion, exercise or defense of legal claims.

Status and update of this Privacy Policy

This Privacy Policy is dated 11 December 2024. We reserve the right to update the Privacy Policy at an appropriate time in order to improve data protection and/or to adapt it to changed administrative practice or case law.