Loading...
- Exhibitors
- Products
- Floorplan
- Programme
- Medienpartner
- News
- Show more
Last updated: October 2026
Privacy Policy of DLG e.V. and DLG Markets GmbH
Data protection and data security for our contractual partners/users and for consumers are a high priority for DLG e.V. and DLG Markets GmbH. The protection of your personal data is therefore very important to us and a matter of particular concern.
We collect, store and use your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR). In this policy, we would like to inform you about which types of data we process, for what purposes, and what rights you have.
DLG e.V. and DLG Markets GmbH work closely together in this regard. The two companies have jointly determined how your data is processed. They are therefore jointly responsible for the protection of your personal data for all of the processing operations described below.
DLG e.V.: Register of Associations, Frankfurt/Main – Registration no.: 5030, VAT ID: DE114234905
DLG Markets GmbH: HRB 28098, VAT ID: DE122113803
The contracting parties have divided responsibilities between them as follows:
| DLG e.V. | DLG Markets GmbH |
|---|---|
|
|
In addition, each contracting party ensures that the data processing it carries out is lawful under Art. 6(1) GDPR and that the information obligations under Art. 13 and 14 GDPR are fulfilled.
Data subjects may exercise their data protection rights with either DLG e.V. or DLG Markets GmbH.
We reserve the right to amend this privacy policy at any time. The privacy policy is updated regularly, and all changes are automatically published on our website.
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
This data is stored in our system’s log files.
The primary purpose of processing personal data is to establish a connection between your device and our website. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our IT systems. The data is not analysed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where data is collected to provide the website, this is the case when the respective session has ended.
The collection of data to provide the website and the storage of data in log files is essential for operating the website. Consequently, the user has no right to object.
Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable even after a page change.
In addition, we use cookies on our website that enable an analysis of users’ browsing behaviour.
In this way, the frequency of page views and navigation on our website can be tracked. Further information can be found in the section “Plugins”.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
Analytics cookies are used for marketing and statistical purposes. Analytics cookies tell us how the website is used, allowing us to continuously improve our offering. This is intended to improve the quality of our website and its content.
The legal basis for processing personal data using technically non-essential cookies is Art. 6(1)(a) GDPR.
The legal basis for processing personal data using technically necessary cookies is Art. 6(1)(f) GDPR.
Cookies are stored on the user’s computer and transmitted from it to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.
If you use a Safari browser from version 12.1 onwards, cookies are automatically deleted after seven days. This also applies to opt-out cookies that are set to prevent tracking.
Our website allows you to contact us via the email addresses and telephone numbers provided or via the contact form. In this case, the personal data transmitted by the user is stored. The data is used exclusively for handling the conversation.
The following personal data is regularly processed in this context:
Where contact is made by email or telephone, this also constitutes the necessary legitimate interest in processing the data.
Where the user has given consent, the legal basis for processing the data is Art. 6(1)(a) GDPR.
The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(f) GDPR.
If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. To do so, please send us a written objection to the storage to the contact details provided above. In this case, all personal data stored in the course of the contact will be deleted.
The controllers maintain company profiles on social networks, including on
On our company profiles, we provide information and offer users the opportunity to communicate. If you carry out an action on our company profile (e.g. comments, posts, likes, etc.), you may thereby make personal data public (e.g. your real name or the photo on your user profile). However, since we generally have little or no influence on the processing of your personal data by the companies jointly responsible for the company profile, we cannot make any binding statements about the purpose and scope of the processing of your data.
Our company profile on social networks is used for communication, exchange of information and presenting our company to (potential) customers, prospective customers and applicants. Publications via the company profile may include the following content:
Every user is free to publish personal data through their activities. Further information on data processing can be found in the specific privacy policy of the respective platform.
The legal basis for data processing is Art. 6(1)(a) GDPR.
You may object at any time to the processing of your personal data collected in the course of your use of our company profiles and assert your data subject rights mentioned above. To do so, simply send us an informal email.
Further information on the processing of your personal data by Instagram, Facebook, Twitter and YouTube and the corresponding options to object can be found here:
We use company profiles on professional networks. We maintain a company profile on the following professional networks:
On our page, we provide information and offer users the opportunity to communicate. The company profile is used for job applications, information/PR and active sourcing.
We have no information on the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in the privacy policy of
If you carry out an action on our company profile (e.g. comments, posts, likes, etc.), you may thereby make personal data public (e.g. your real name or the photo on your user profile).
Our company profile serves to inform users about our services. Every user is free to publish personal data through their activities.
The legal basis for processing your data in connection with the use of our company profile is Art. 6(1)(f) GDPR.
We store the activities and personal data you publish via our company profile until consent is withdrawn. In addition, we comply with the statutory retention periods.
You may object at any time to the processing of your personal data that we collect in the course of your use of our company profile and assert your data subject rights set out under XIII. of this privacy policy. To do so, send us an informal email to the email address given in this privacy policy.
The website is hosted on servers operated by a service provider commissioned by us.
Our service provider is
Expoplatform Ltd.The website’s server is geographically located in Europe. The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website.
The information stored is:
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be recorded.
We use plugins for various purposes. The plugins used are listed below:
On our website, we use the Facebook Pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and its representative in the Union, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (hereinafter: Facebook). It allows us to track users’ actions after they have seen or clicked on a Facebook advertisement. Personal data may thereby be stored and analysed, in particular the user’s activity (especially which pages were visited and which elements were clicked), device and browser information (especially the IP address and operating system), data about the advertisements displayed (especially which advertisements were shown and whether the user clicked on them) and data from advertising partners (especially pseudonymised user IDs). This allows us to measure the effectiveness of Facebook advertisements for statistical and market research purposes.
In the process, data may be transferred to Facebook servers in the USA.
The data collected in this way is anonymous to us, meaning we cannot see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook may link this data to your Facebook account and also use it for its own advertising purposes in accordance with Facebook’s Data Policy.
Further information on Facebook’s processing of data can be found here: https://de-de.facebook.com/policy.php
The Facebook Pixel is used to analyse and optimise advertising measures.
The legal basis for processing users’ personal data is, in principle, the user’s consent pursuant to Art. 6(1)(a) GDPR. To ensure appropriate safeguards for the transfer and processing of personal data outside the EU, data is transferred to and processed by Instagram on the basis of appropriate safeguards pursuant to Art. 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses pursuant to Art. 46(2)(c) GDPR.
Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
You can prevent Facebook from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on options to object to and request erasure from Facebook can be found at: https://de-de.facebook.com/policy.php
We use Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google).
Google Analytics examines, among other things, the origin of visitors, the time they spend on individual pages and their use of search engines, thereby enabling better monitoring of the success of advertising campaigns. Google places a cookie on your computer for this purpose. Personal data may thereby be stored and analysed, including
We have activated IP anonymisation on this website. This prevents the personal reference of the information generated by the cookie about your use of this website from being transferred to and stored on Google servers in the USA.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data. You can prevent cookies from being stored by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to use all functions of our website to their full extent.
Further information on Google’s processing of data can be found here: https://policies.google.com/privacy?gl=DE&hl=de
We use Google Analytics (Universal Analytics) to evaluate the use of our website and to deliver targeted advertising to people who have already shown initial interest by visiting our website.
The legal basis for processing users’ personal data is, in principle, the user’s consent pursuant to Art. 6(1)(a) GDPR.
The legal basis for the transfer of your personal data to the United States of America is Art. 49(1)(a) GDPR.
If you consent to the use of Google Analytics, it cannot be ruled out that your personal data will not remain within the EU or EEA. To that extent, your personal data may be processed on servers in the United States of America, whose level of data protection has not been recognised by the European Union as adequate. To ensure appropriate safeguards for the transfer and processing of your personal data, which may be processed on servers in the United States of America and may therefore be requested by US security authorities, data is transferred to Google on the basis of appropriate safeguards pursuant to Art. 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses pursuant to Art. 46(2)(c) GDPR. A copy of the appropriate safeguards can be requested by sending an informal request to the contact details given above.
Due to the transfer and processing of your personal data in the USA, there is a possibility that US authorities, intelligence services or the government may gain full access to the transferred data. The scope, purpose and duration of such processing by these bodies are then beyond your control. Your rights under the GDPR will very likely no longer be safeguarded, or you will very likely be unable to assert them.
Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively, according to Google’s own statements.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
You can prevent Google from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
You can deactivate Google’s use of your personal data via the following link: https://adssettings.google.com
Further information on options to object to and request erasure from Google can be found at: https://policies.google.com/privacy?gl=DE&hl=en
You have the option of signing in via Google Single Sign-On (SSO). When you use Google SSO, we may collect certain personal data from you, such as your name, email address and profile picture. This information is provided by Google when you sign in with your Google account. The personal data we collect via Google SSO is used to give you simple and fast access to our services. We use this information to verify your identity and to grant you access to our platforms and applications. We store your personal data only for as long as necessary to provide our services or as required by law. If you wish to disconnect your Google account from our services, you can do so at any time via your Google account settings.
The legal basis for processing your data is your consent. If you wish to withdraw your consent to the use of Google SSO, Google provides an opt-out function. More information on the processing of your data when using Google SSO can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
You have the option of signing in via Facebook Single Sign-On (SSO). When you use Facebook SSO, we may collect certain personal data from you, such as your name, email address and profile picture. This information is provided by Facebook when you sign in with your Facebook account. The personal data we collect via Facebook SSO is used to give you simple and fast access to our services. We use this information to verify your identity and to grant you access to our platforms and applications. We store your personal data only for as long as necessary to provide our services or as required by law. If you wish to disconnect your Facebook account from our services, you can do so at any time via Facebook Google account settings.
The legal basis for processing your data is your consent. If you wish to withdraw your consent to the use of Facebook SSO, Facebook provides an opt-out function. More information on the processing of your data when using Facebook SSO can be found in Facebook’s privacy policy: https://www.facebook.com/privacy/policy/?tid=331688105677.
To order an online ticket, we need to collect your first and last name, your address and your email address. This is necessary for issuing the ticket and creating the invoice. We process your personal data for the initiation, performance and handling of the contract. The legal basis is Art. 6(1)(b) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and statutory retention periods no longer require it to be kept.
When purchasing a ticket, you have the option of personalising your ticket. In this process, information about your company and your interests is requested. Ticket personalisation is carried out for marketing purposes (targeted communication for newsletters in accordance with section XVI., telephone campaigns, member acquisition) and statistical purposes (image barometer, market analysis, trade fair analysis). The legal basis for processing your data in the context of ticket personalisation is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
To process payments for you, we use the services of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, as payment service provider. If you use this service, PayPal receives the necessary data from us to process the contractual payment obligations.
Exhibitors have the option of inviting visitors to the trade fair. Exhibitors can use the invitation tool of our Ticket Service Center for this purpose. If the invitation tool is used, we receive your name and email address from the respective exhibitor in order to send you your individual registration link. Alternatively, exhibitors can send you a non-personalised registration link directly. After the event, the exhibitor can see in their Ticket Service Center whether their invited guest attended the trade fair.
You can obtain your online ticket using the registration link. For this, we need to collect your first and last name, your address and your email address. This is necessary for issuing the ticket. We process your personal data for the initiation, performance and handling of the contract. The legal basis is Art. 6(1)(b) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and statutory retention periods no longer require it to be kept.
When registering the voucher, you have the option of personalising your ticket. In this process, information about your company and your interests is requested. Ticket personalisation is carried out for marketing purposes (targeted communication for newsletters, mailings, telephone campaigns, member acquisition) and statistical purposes (image barometer, market analysis, trade fair analysis). The legal basis for processing your data in the context of ticket personalisation is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
When you purchase a ticket, register a voucher, have the barcode on your ticket scanned or use the event app, the personal data collected may be transferred to subsidiaries of DLG Markets GmbH or to exhibitors and processed there for the purpose of marketing and advertising their own services and products. This also includes data that you provide to the respective exhibitor when visiting their stand. Where the requirements of Section 7(3) of the German Act Against Unfair Competition (UWG) are met, the legal basis for processing your data for advertising purposes is our legitimate interest pursuant to Art. 6(1)(f) GDPR; otherwise it is your consent pursuant to Art. 6(1)(a) GDPR. You may object at any time to the use of your data for advertising purposes based on legitimate interest, or withdraw your consent at any time with effect for the future.
When you purchase a ticket or register a voucher, you receive an online ticket (as a PDF, m-ticket or wallet ticket). This ticket contains an encrypted barcode in which the personal data you provided when purchasing or registering is stored. When visiting an exhibitor, you can voluntarily have this barcode scanned as an electronic business card by an exhibitor participating in lead tracking.
Your personal data provided when purchasing the ticket or registering is then transferred to the exhibitor and processed there for the purpose of marketing and advertising their own services and products.
This also applies to the data you provided when personalising your ticket, e.g. information about your company or your interests. This also includes data that you provide to the respective exhibitor when visiting their stand.
The legal basis for processing your data for advertising purposes is your consent given to the respective exhibitor pursuant to Art. 6(1)(a) GDPR, which is declared by voluntarily having your ticket scanned. You may withdraw your consent at any time with effect for the future by contacting the respective exhibitor.
When the barcode on your ticket is scanned, the personal data collected may be transferred to affiliated companies of DLG Markets GmbH for the purpose of documenting consent or for advertising their own services and products. This also applies to so-called interaction data. This data is obtained from interaction with Scan2Lead.
The trade fair app is DLG’s digital platform and consists of a web app and a mobile app. The following describes how personal data is collected, used, disclosed and protected with the event app (hereinafter “App”).
Registration data: When registering for the App, certain personal data is collected:
This information can be edited during registration or at any time afterwards. This data is used to enable use of the platform, manage your account and give you access to the platform’s functions and resources.
If, before registering in the trade fair app, the user purchased a ticket for the respective trade fair in DLG’s trade fair ticket shop and registered there to purchase the ticket, the data required for registration in the trade fair app is pre-filled. In addition, your purchased ticket is added to the ticket wallet of the trade fair app. This is done by entering the email address, which is used to query the operator of the ticket shop (Aditus GmbH, Straße der Nationen 5, 30539 Hannover, Germany) as to whether the user has previously purchased a ticket for the trade fair. No automatic registration in the trade fair app takes place when purchasing the trade fair ticket in the ticket shop.
Communication and networking: The networking function gives users the opportunity to contact exhibitors directly.
If you communicate with other users via the platform (e.g. via the chat function), your messages and information may be stored to enable the exchange and ensure the security of the platform.
Barcode scanning: Using the “Scan barcode” function in the mobile trade fair app, users can scan a barcode (QR code) at the stands of participating exhibitors. After scanning the barcode, the user receives information about the exhibitor and access to further information that the exhibitor has provided for this purpose. In return, the respective exhibitor receives the data collected when the ticket was purchased or the voucher was registered, including any voluntarily provided interests, and may use this data for advertising purposes or to contact you. The legal basis for processing your data for these purposes is your consent given to the respective exhibitor pursuant to Art. 6(1)(a) GDPR, which is declared by scanning the barcode. You may withdraw your consent at any time with effect for the future by contacting the respective exhibitor.
Calendar synchronisation: Calendar synchronisation allows appointments arranged in the App to be displayed directly in your calendar. To synchronise calendar entries, our App requires access to your calendar.
Log data: When using the platform, certain information is collected automatically, such as your IP address, device information, browser type, operating system, and date and time of access. This information is used for statistical purposes, to improve the platform and to ensure security.
Recommendations and personalised content: Based on the information and data you provide, including your profile and your activities on the platform, we use automated technologies to generate recommendations for contacts, content and functions that may be useful to you. These recommendations may include, for example, events, exhibitors and products. An up-to-date and accurate profile helps us make these recommendations relevant and accurate.
Within the platform: Your personal data may be used within the platform for exchange and communication with other users.
By clicking on an exhibitor’s profile page, you consent to your visit to the exhibitor’s profile page being trackable by the exhibitor, who will be shown your first and last name, company and job title. The exhibitor then has the option of sending you a contact request within the trade fair app. If this request is accepted, further data (email address, telephone numbers, country of origin, interests, matchmaking information) is made available to the exhibitor.
If you interact with the exhibitor when visiting the exhibitor profile, e.g. by clicking the “Request meeting” or “Send message” buttons, your data (email address, telephone numbers, country of origin, interests, matchmaking information) is made available to the exhibitor.
Third-party service providers: DLG may commission third parties to provide services in connection with the platform, e.g. hosting services, data analysis or technical support. These service providers may have access to personal data, but only to the extent necessary to provide their services, and they are contractually obliged to comply with data protection requirements.
We process your personal data for the initiation, performance and handling of the respective contract. The legal basis for processing the data is therefore Art. 6(1)(b) GDPR.
Where consent has been given, the legal basis for processing the data is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and statutory retention periods no longer require it to be kept.
The mobile trade fair app offers indoor positioning, which shows your location on the site map. For this purpose, the app accesses Bluetooth and your device’s location permission; the location permission is technically required to detect the Bluetooth beacons installed on the exhibition grounds.
Processing is carried out by Crowd Connected Ltd., Surrey Technology Centre, Guildford, GU2 7YG, United Kingdom, as a processor on behalf of DLG.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Granting consent is voluntary; the app can be used without restriction without location sharing. You can revoke the permission at any time in your device’s settings.
Our website offers the option of subscribing to a free newsletter. When registering for the newsletter, your company name, your first and last name, your business or private address and your email address are transmitted to us from the input form.
In connection with the processing of data for sending newsletters, the data is passed on to the following service provider:
The user’s email address is collected in order to deliver the newsletter.
Where the user has given consent, the legal basis for processing the data after the user has registered for the newsletter is Art. 6(1)(a) GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored for as long as the newsletter subscription is active.
The user concerned may cancel the newsletter subscription at any time. Every newsletter contains a corresponding link for this purpose.
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
You may request confirmation from the controller as to whether personal data concerning you is being processed by them. Where such processing takes place, you may request information from the controller about the following:
You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must carry out the rectification without undue delay.
You may request the restriction of processing of personal data concerning you under the following conditions:
Where processing of personal data concerning you has been restricted, such data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay where one of the following grounds applies:
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase it, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copies or replications of, that personal data.
The right to erasure does not apply to the extent that processing is necessary
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision
However, these decisions must not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (b) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in 1. and 3., the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The supervisory authority responsible for the controllers is
Hessische Beauftragte für Datenschutz und Informationsfreiheit