Responsible controller within the meaning of Article 4 Z 7 GDPR is:
Wiener Messe und Congress GmbH
Messeplatz 1
1021 Vienna
Austria
T: + 43 1 727 20 – 0
The controller will be referred to hereinafter as “Wiener Messe und Congress GmbH“.
You can reach our data protection officer of Wiener Messe und Congress GmbH at
Wiener Messe und Congress GmbH
Messeplatz 1
1021 Vienna
Austria
Wiener Messe und Congress GmbH store and process the data that you provide in the request form, your order, in the lease agreement or in the course of the execution of the lease contract in order to enable you to use the premises of Messe Wien Exhibition & Congress Center (herafter also referred to as „Messe Wien“) in particular to offer you such premises and handle the respective lease agreement, to provide stand construction (with appropriate order), marketing and advertising services ordered as well as other additional services. Insofar as Wiener Messe und Congress GmbH uses external partners to fulfil ancillary services or additional orders and special agreements, your data disclosed at the time of the registration will be passed on to the extent necessary.
In addition, the data you provide will be used for the purpose of conducting surveys and advertising for events of the companies of Wiener Messe und Congress GmbH, as well as for the transmission of email newsletters with information on services of Wiener Messe und Congress GmbH and for the promotion of other companies who offer products or services that may be of interest in connection with fairs.
In the case of advertising and informational newsletters sent to you by email, Wiener Messe und Congress GmbH will record whether the newsletter is being correctly delivered to your inbox server, whether you have opened the newsletter sent to you, if and which contents of the newsletter you are clicking on and, if applicable, whether or not you have unsubscribed from the newsletter. The collection and processing of the data collected for your use of the newsletter sent by Wiener Messe und Congress GmbH is used to generate statistical evaluations, which should provide a representative picture of the reading habits of the newsletter, so that the content of future newsletters can be adapted to the target audience or different content according to the interests of the respective users can be provided.
The contact details you provide will be made available to the contracts partners listed at //messecongress.at/ueber-uns/partner/?lang=en to enable them to inform you about their services in connection with the event.
The legal basis for the processing of your data for the purpose of providing services results from the admissibility of data processing required for contractual purposes, which is standardised in accordance with Article 6 (1) (b) GDPR.
The legal basis for the use of the data you have provided for the advertising and marketing measures described, including the sending of personalised newsletters, is based on the legitimate interest of Wiener Messe und Congress GmbH to promote the sale of its services, including the promotion of services and products of third-party providers who support or supplement the own range of services (Art. 6 (1) (f) GDPR). Passing on your contact details to contract partners of Wiener Messe und Congress GmbH, in view of your own interest to obtain offers from companies with a relevant range of services and experience in the field of event organisation and with regard to possibilities for optimising your event (Art. 6 (1) (f) GDPR).
The processing of data of third natural persons, which are disclosed in the request form, an order, the lease agreement or in the course of the execution of the lease contract, in particular as a representative, responsible or other employees of your company, is permitted due to the legitimate interest of Wiener Messe und Congress GmbH and yourself in order to address directly the specifically responsible and informed person in your company in the course of processing the exhibitor contract concluded with your company or in case of queries, in order to avoid information or legal losses as well as to be able to clearly direct information and advertising to a unique recipient (Art. 6 (1) (f) GDPR).
If you do not or not entirely provide the data requested in the registration form, the preparation of an offer or conclusion of a lease contract would not be not possible. The provisioning of further data is only required insofar as you would like to order stand construction, advertising or marketing services or wish to take out a liability insurance.
The contract partners listed at //messecongress.at/ueber-uns/partner/?lang=en will receive your contact information in order to inform you about event-related products and services offered by them.
If you order additional fair-related services (e.g. insurance, stand security, transport services, catering, etc.) during the course of your registration, the data you provide will also be forwarded to those companies at //messecongress.at/ueber-uns/partner/?lang=en, which provide the ordered services in each case.
For receiving advertising and informational newsletters via email as well as the collection of data concerning your use of these newsletters, Wiener Messe und Congress GmbH uses Salesforce.com, inc., The Landmark @ One Market St., Suite 300, San Francisco, California 94105, USA as a processor. Since Salesforce.com, inc. is based in the USA, there is thus a transfer of the collected data to a third country within the meaning of the GDPR.
The Salesforce.com, inc. is registered in the US Department of Commerce’s US Privacy Shield List. The transfer of data to the US to Salesforce.com, inc. is therefore permissible under Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-US Privacy Shield (‘adequacy decision’ within the meaning of Article 45 of the GDPR).
The storage of the data processed by Wiener Messe und Congress GmbH for the described purposes of advertising and marketing will continue until you object to further data processing for these purposes. The data processed in connection with the newsletter will be saved until you unsubscribe from the email newsletter. Press photos and thus – insofar as you are identifiable on these – your personal data is stored for documentation and archiving purposes for an indefinite period. Otherwise your data will be stored for as long as necessary for each processing purpose. In addition, data storage takes place insofar and as long as it is necessary to retain your processed data in order to safeguard legal interests (e.g. until the expiry of contractually agreed or statutory warranty or statute of limitations) or with regard to statutory retention requirements, in particular pursuant to Article 132 BAO (Austrian Federal Fiscal Code). Insofar as further processing is carried out for statistical purposes, the relevant data will only be used anonymously.
You have the right of access to the processing of personal data pursuant to Art.15 GDPR and the right to rectification pursuant to Art.16 GDPR towards the companies jointly responsible for processing (see section 1). In addition, you may request the deletion of your data, provided that there is a reason for deletion referred to in Art. 17 (1) (a) to (f) GDPR and there is no justification under Art.17 (3) GDPR for the refusal of the deletion. You also have the right to demand the restriction of data processing under Art.18 GDPR if necessary or to file an objection against the data processing according to Art.21 GDPR. Furthermore, pursuant to Art.20 GDPR, you are entitled to demand that all data that you have provided yourself and that we process in an automated way are provided to you on a data medium in a common file format or are transmitted to a third party named by you (right of data portability).
If you have any questions, comments, complaints or requests concerning this Privacy Policy or our processing of your information, please contact us.
If you believe that the processing of your personal data by us violates applicable data protection law, you are entitled to file a complaint with the Data Protection Authority.
Last update January 2025