{"id":7946,"date":"2026-09-16T14:47:37","date_gmt":"2026-09-16T14:47:37","guid":{"rendered":"https:\/\/www.munichfabricstart.com\/data-protection\/"},"modified":"2026-10-12T08:01:14","modified_gmt":"2026-10-12T08:01:14","slug":"data-protection","status":"publish","type":"page","link":"https:\/\/www.munichfabricstart.com\/en\/data-protection\/","title":{"rendered":"Data protection"},"content":{"rendered":"\n<section class=\"mx-auto flex w-full max-w-theme flex-col gap-8 px-4 lg:px-10 2xl:gap-16\" data-heading-text id=\"heading-text-block_276383c1a6db07a93a0463f454e7ed12\">\n\n      <div class=\"flex flex-col [word-break:break-word]\">\n                    <h1>Data protection<\/h1>\n          <\/div>\n  \n  \n<\/section>\n\n\n\n\n<div id=\"container-block_4ccc0634943de64805a6aa07e698a0f0\" class=\"mx-auto w-full max-w-theme px-4 lg:px-10\">\n\n  <div class=\"w-full mr-auto max-w-none\">\n\n    <div class=\"acf-innerblocks-container\">\n\n<div id=\"richtext-block_65f396c728b7c629812c6daaeeb4c597\" class=\"richtext\">\n  <p class=\"p2\"><span class=\"s1\"><b>1. Controller and data protection officer<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\">The controller responsible for processing personal data on our websites and in connection with our events is:<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">MUNICH FABRIC START Exhibitions GmbH<br \/>\nThomas-Wimmer-Ring 17, 80539 Munich, Germany<br \/>\nPhone: +49 (0)89 4522470<br \/>\nEmail: <a href=\"mailto:visitor@munichfabricstart.com\"><span class=\"s2\">visitor@munichfabricstart.com<\/span><\/a><br \/>\nAuthorised managing directors: see Legal notice<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">This privacy policy applies to the following websites: <a href=\"https:\/\/www.munichfabricstart.com\/\"><span class=\"s2\">www.munichfabricstart.com<\/span><\/a> and its subdomains (e.g. guest.munichfabricstart.com), as well as to our trade shows and other events (together &#8220;MFS services&#8221;).<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">You can reach our data protection officer at:<\/span><\/p>\n<p>&nbsp;<\/p>\n<div>Bernhard Seidl<\/div>\n<div>Comperitum Dataprivacy GmbH &amp; Co. KG<\/div>\n<div>Lujo-Brentano-Stra\u00dfe 13<\/div>\n<div>83209 Prien am Chiemsee<\/div>\n<div>E-Mail: seidl@comperitum.de<\/div>\n<div>Web: <a href=\"http:\/\/www.comperitum.de\/\">www.comperitum.de<\/a><\/div>\n<p class=\"p4\">\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>2. General information on data processing<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Legal bases.<\/b> We only process personal data where there is a legal basis for doing so. The following in particular apply:<\/span><\/p>\n<ul class=\"ul1\">\n<li class=\"li5\"><span class=\"s1\">consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time with effect for the future<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">contract or pre-contractual measures, e.g. buying a ticket or registering (Art. 6(1)(b) GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">legal obligation, e.g. retention for tax purposes (Art. 6(1)(c) GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">legitimate interest (Art. 6(1)(f) GDPR); we state the specific interest for each processing activity<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">storing and accessing information on your device: consent under Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), unless strictly necessary (Section 25(2) no. 2 TDDDG)<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Storage period.<\/b> We delete data as soon as the purpose no longer applies or you withdraw your consent. Exception: statutory retention periods, for example under commercial and tax law (up to 10 years), require longer storage. In that case we restrict processing until the period expires.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Recipients.<\/b> We use service providers who process data on our behalf and with whom we have concluded contracts under Art. 28 GDPR. These cover hosting, email and newsletter delivery, consent management, ticketing and registration, payment processing, and the maintenance and development of the websites. Other recipients (e.g. exhibitors) are named in the relevant sections.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Transfers to third countries.<\/b> Data is only processed outside the EU\/EEA if there is an adequacy decision or appropriate safeguards are in place. For the USA, the adequacy decision on the EU-US Data Privacy Framework applies (Art. 45 GDPR), provided the recipient is certified. Otherwise we use the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Obligation to provide data, no automated decision-making.<\/b> You are not legally obliged to provide us with data. Without the information marked as mandatory, however, we cannot, for example, issue a ticket. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>3. Providing the websites<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Hosting.<\/b> Our websites are hosted by HostPress GmbH, Bahnhofstra\u00dfe 34, 66571 Eppelborn, Germany (server location: Germany). The provider processes the data generated when the websites are accessed on our behalf (Art. 28 GDPR).<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Server log files.<\/b> Each time you access our websites, your browser automatically transmits the following data:<\/span><\/p>\n<ul class=\"ul1\">\n<li class=\"li5\"><span class=\"s1\">IP address<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">date and time of the request<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">page or file accessed and amount of data transferred<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">referrer URL (previously visited page)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">browser type and version, operating system<\/span><\/li>\n<\/ul>\n<p class=\"p3\"><span class=\"s1\">We need this data to deliver the websites, ensure their stability and security, and fend off attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted after 7 days. They are only kept longer if a security incident needs to be investigated. The data is not combined with other data sources.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>TLS encryption.<\/b> We use TLS encryption to protect data in transit. You can recognise an encrypted connection by &#8220;https:\/\/&#8221; and the padlock symbol in the address bar.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>4. Cookies and consent management<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\">We use cookies and similar technologies (e.g. local storage, pixels). We use technically necessary cookies without consent because the websites would not work otherwise, e.g. for login, the shopping cart or storing your cookie choice (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). We only use all other cookies and services (statistics, marketing, external media) with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">We manage your consent with the consent tool CookieYes (CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes MK12 5NW, United Kingdom). There is an adequacy decision of the European Commission for the United Kingdom (Art. 45 GDPR). We store your choice, the date and time, and a pseudonymous ID so that we can prove your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). Your choice is stored for 12 months.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">You can change or withdraw your consent at any time via &#8220;Cookie settings&#8221; in the footer. You will also find an overview of all cookies used there, with provider, purpose and storage period.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>5. Contact, registration and ticketing<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Contact.<\/b> If you contact us via a contact form, email or phone, we process your details to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract, otherwise our legitimate interest in responding (Art. 6(1)(f) GDPR). We delete the data once the enquiry has been fully dealt with and no retention period applies.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Registration and tickets.<\/b> For visiting the trade show, a user profile or buying a ticket, we process:<\/span><\/p>\n<ul class=\"ul1\">\n<li class=\"li5\"><span class=\"s1\">name, title, language<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">company, position, industry, country and address<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">email address and, where applicable, phone number<\/span><\/li>\n<li class=\"li6\"><span class=\"s1\">information on interests and product groups<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">ticket and invoice data<\/span><\/li>\n<\/ul>\n<p class=\"p3\"><span class=\"s1\">The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). We retain invoice data due to legal obligations (Art. 6(1)(c) GDPR). Registration is restricted to persons of legal age.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">Registration and ticketing are handled by VIMA as our processor. Payments in the shop are processed by PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; alternatively, you can pay by invoice. We do not receive complete payment data, and it is never passed on to exhibitors.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">We store your user profile until you delete it.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>6. Visiting the trade show: admission, lead scanning and exhibitors<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Admission control.<\/b> At the entrance, we or our service providers scan your ticket or name badge. This allows us to check your admission rights and record visitor numbers. The legal bases are the performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in security and access control (Art. 6(1)(f) GDPR).<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Lead scanning by exhibitors.<\/b> Exhibitors can scan your name badge at their stand, but only if you show it to them voluntarily. With the scan, they receive your name, company, position, email address, country and interests from your registration, like a digital business card. The legal basis is the consent you give by allowing the scan (Art. 6(1)(a) GDPR). Bank and payment data are never transmitted. Once the data has been transmitted, the exhibitor is responsible for it and may contact you in connection with the trade show. Please address any objections to the exhibitor.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Disclosure to partners.<\/b> We only pass your data on to affiliated companies or other trade show organisers if you have expressly consented to this when registering. Beyond that, we only disclose data if we are legally obliged to do so.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Photos and videos.<\/b> At our events, we take photos and videos for coverage on our websites and social media channels. The legal basis is our legitimate interest in documenting the event (Art. 6(1)(f) GDPR). Notices at the entrance point this out. If you do not wish to be photographed or filmed, please speak to our photography team.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>7. Newsletter<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\">With your consent (Art. 6(1)(a) GDPR), we regularly send you information about our events, exhibitors and partners. We use the double opt-in procedure: the newsletter only starts once you have clicked the link in our confirmation email. As proof, we store the time and IP address of your sign-up and confirmation (Art. 6(1)(c) GDPR).<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">The newsletter is sent via Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) as our processor. We also use Brevo to send emails relating to forms and orders.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">You can unsubscribe from the newsletter at any time: via the unsubscribe link in every email, in your user profile, or by sending a message to <a href=\"mailto:visitor@munichfabricstart.com\"><span class=\"s2\">visitor@munichfabricstart.com<\/span><\/a>. We will then remove your address from the mailing list. To prevent you from being contacted again, we may keep it on a blocklist (Art. 6(1)(f) GDPR). Data in your user profile is not affected.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>8. Web analytics and marketing<\/b><\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">We only use the following services if you have given your consent in the consent tool (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time via the cookie settings.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p7\"><span class=\"s1\"><b>Google Analytics 4 <\/b><\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates how visitors use our websites, e.g. pages viewed, time spent, device type and approximate location. We use this to create statistics that help us improve our services. Google Analytics 4 does not store IP addresses for users in the EU. Google Signals and the link to Google Ads are disabled.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. The data is deleted after 14 months. More: <a href=\"https:\/\/policies.google.com\/privacy?hl=en\"><span class=\"s2\">Google&#8217;s privacy policy<\/span><\/a>.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p7\"><span class=\"s1\"><b>Meta Pixel <\/b><\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. With the Meta Pixel, we measure how effective our ads on Facebook and Instagram are (conversion tracking). We can also show visitors to our websites relevant ads there (Custom Audiences). If you are logged in to Facebook or Instagram, Meta can link your visit to your account.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">We are jointly responsible with Meta for collecting the data and transmitting it to Meta (Art. 26 GDPR), on the basis of the <a href=\"https:\/\/www.facebook.com\/legal\/controller_addendum\"><span class=\"s2\">joint controller agreement<\/span><\/a>. Meta is solely responsible for any further processing. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. We have no influence on how long Meta stores the data. More: <a href=\"https:\/\/www.facebook.com\/privacy\/policy\/\"><span class=\"s2\">Meta&#8217;s privacy policy<\/span><\/a>.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p7\"><span class=\"s1\"><b>LinkedIn Insight Tag <\/b><\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. With the LinkedIn Insight Tag, we measure how effective our ads on LinkedIn are (conversion tracking) and can show visitors to our websites relevant ads there (retargeting). We only receive aggregated reports, no information about individual people. If you are logged in to LinkedIn, LinkedIn can link your visit to your account. Data may be transferred to LinkedIn Corporation in the USA, which is certified under the EU-US Data Privacy Framework. LinkedIn deletes the data after 180 days at the latest. More: <a href=\"https:\/\/www.linkedin.com\/legal\/privacy-policy\"><span class=\"s2\">LinkedIn&#8217;s privacy policy<\/span><\/a>.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>9. Fonts<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\">Our fonts are hosted locally on our server. No connection to Google or other font providers is made when a page loads.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>10. Social media presence<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\">On our websites, we link to our profiles on Instagram, Facebook, LinkedIn and YouTube. These are simple links without embedded plugins. Data is only transferred when you click a link and open the platform. The privacy policy of the respective platform then applies.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">For our company pages on Facebook and Instagram, we are jointly responsible with Meta Platforms Ireland Limited to the extent that Meta provides us with statistics (Insights) (Art. 26 GDPR). The same applies to LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). You can exercise your rights with us or directly with the respective provider.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">We show recent posts from our Instagram and LinkedIn profiles on our websites. We retrieve them on our server and store the images there; your browser does not connect to Instagram or LinkedIn in the process.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>11. Your rights<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\">You have the following rights with regard to your personal data:<\/span><\/p>\n<ul class=\"ul1\">\n<li class=\"li5\"><span class=\"s1\">access (Art. 15 GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">rectification (Art. 16 GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">erasure (Art. 17 GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">restriction of processing (Art. 18 GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">data portability (Art. 20 GDPR)<\/span><\/li>\n<li class=\"li5\"><span class=\"s1\">withdrawal of consent with effect for the future (Art. 7(3) GDPR)<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Right to object (Art. 21 GDPR).<\/b> If we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">To exercise your rights, an informal message to <a href=\"mailto:visitor@munichfabricstart.com\"><span class=\"s2\">visitor@munichfabricstart.com<\/span><\/a> or to our data protection officer (section 1) is sufficient.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p2\"><span class=\"s1\"><b>12. Right to lodge a complaint, changes, last updated<\/b><\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Right to lodge a complaint.<\/b> You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt f\u00fcr Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, <a href=\"https:\/\/www.lda.bayern.de\/\"><span class=\"s2\">www.lda.bayern.de<\/span><\/a>.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p class=\"p3\"><span class=\"s1\"><b>Changes.<\/b> We update this privacy policy when our services or the legal situation change. The version published here applies.<\/span><\/p>\n<p class=\"p3\"><span class=\"s1\">Last updated: October 2026<\/span><\/p>\n<\/div>\n\n<\/div>\n\n  <\/div>\n\n<\/div>\n\n\n\n\n<section id=\"spacer-block_0613e12db447a640cf9d7df181c99f85\" class='h-40 lg:h-40 ' data-block-id='spacer-block_0613e12db447a640cf9d7df181c99f85'><\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-7946","page","type-page","status-publish","hentry"],"acf":{"meta_title":"Privacy Policy | MFS","meta_description":"Privacy policy of Munich Fabric Start Exhibitions GmbH: how we process personal data on our websites and in our services, and what rights you have.","meta_image":null,"canonical_url":"","meta_robots_noindex":false,"meta_robots_nofollow":false,"thumbnail":{"media_type":"image","image":"","video":{"source_type":"select_video_from_library","library":null,"poster":null,"embed":null,"embed_video_options":[],"video_options":[]}},"excerpt":""},"_links":{"self":[{"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/pages\/7946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/comments?post=7946"}],"version-history":[{"count":5,"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/pages\/7946\/revisions"}],"predecessor-version":[{"id":10989,"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/pages\/7946\/revisions\/10989"}],"wp:attachment":[{"href":"https:\/\/www.munichfabricstart.com\/en\/wp-json\/wp\/v2\/media?parent=7946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}