Data protection information for the webpages of the International Motor Show (IAA)
We take the protection of your personal data very seriously. The following information outlines how we process your personal data and your rights based on the data protection legislation.
1. Contact data
Organization responsible for data processing (controller):
Verband der Automobilindustrie e. V. (VDA)
Tel.: +49 30 897842-0
Fax: +49 30 897842-600
Questions concerning data protection and your data privacy rights (section 7) may be addressed to firstname.lastname@example.org.
Contact details for our data privacy officer:
Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Tel.: +49 228 227226-0
Contact form: https://www.scheja-partner.de/kontakt/kontakt.html
2. The sources and data we use
We process only the personal data that are required for the specific purpose for which they are processed (cf. section 3 below). These are data that we have received directly from you (e.g. data that you have entered to subscribe to a newsletter).
3. Why we process your data (purpose of processing) and the legal basis
The personal data mentioned above are processed by us in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG, amended). The VDA represents and promotes the interests of the entire German automotive industry. To this end, the VDA organizes the IAA, which has established itself as the leading trade show for mobility. The trade shows IAA Cars and IAA Commercial Vehicles take place in alternate years.
a) Internet presence:
The VDA wishes, inter alia, to offer a fully functional Internet presence and provide the best possible services on the IAA webpages in order to ensure the smooth running of an attractive trade fair and thus the representation of the interests of the automotive industry. This represents a legitimate interest in the meaning of Article 6(1) f of the GDPR for subsequent data processing (wherever this involves processing of personal data by the VDA):
- Server log files
Every time our Internet presentation is accessed and every time a file stored there is retrieved, this is recorded in a log file. Storing this information serves internal system-related and statistical purposes. The log records the following data: name of the file that was accessed, date and time, volume of data transmitted, notification of successful retrieval, the web browser and the requesting domain. IP addresses of the requesting computer are also logged. The legal basis for processing the data is Article 6(1) f of the GDPR, which permits the processing of data for the performance of a contract or of pre-contractual measures.
We use session cookies on this website to enable you to browse quickly, and to ensure that information you enter is remembered. Your data remain stored in the cookie file in your browser as long as the connection is operating, but may then be deleted when you end your browser session, depending on your browser settings. If you do not wish to allow cookies, you must change the settings in your browser accordingly. In this case you may not be able to use all the interactive features of our website or all of our services.
Additional cookies are also used on the website for the following purposes:
- Social media and plug-ins
“Recommend this page” function
Our Internet presence supports the social media function “Share this page” or “Recommend this page” via the following social media platforms: Facebook, Twitter.
Our website enables users of social media platforms to share the VDA website with other users of these social networks through the integration of links indicated by the corresponding symbols. By clicking on the relevant link, you leave the VDA website and navigate to the website of the social media platform. Data are exchanged with the above-named social media operators only if the relevant symbol button is clicked. When you click one of these symbol buttons, a page of the relevant social media operator will open in a pop-up window. We wish to point out that data transfer between the user and the provider of the social media platform can already be triggered by this process, and always occurs once you have logged in on a social media platform. We have no knowledge of, and no influence on, which data are transmitted in individual cases to the respective providers by the activation of social plugins, or the purposes for which the data are used there.
Our website uses content from the Twitter networking service. The content is provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you access a lower-level page containing integrated content from Twitter, a connection to Twitter servers is established so that the content can be displayed. Data are also transmitted to Twitter. If you are logged in to your Twitter account, Twitter is able to attribute your surfing behavior to your account. You will find more detailed information about data processing by Twitter and the settings you can adjust to protect your privacy on https://twitter.com/privacy. Content from Twitter is integrated on the basis of Art. 6(1) f of the GDPR for attractive presentation of our online offerings.
We also use a plug-in from the provider Walls.io for presenting social media content on our website. The provider is the “Die Socialisten” Social Software Development GmbH, Andreasgasse 6, Top 1, 1070 Wien, Austria. When you visit a lower-level page with social media content presented using Walls.io, a connection is created with Walls.io servers. You will find further information about data processing by Walls.io at: https://walls.io/privacy. You also have the option of sharing the contents presented using Walls.io via the services of the respective social media provider, after you click on them. The information in the section on “Recommend page” function also applies here. Social media content is integrated using Walls.io on the basis of Art. 6(1) f of the GDPR for attractive presentation of our online offerings.
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Every time you access one of our sites that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited our websites with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn is able to attribute your visit on our website to you and your user account. We wish to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data or its use by LinkedIn.
The use of the LinkedIn plug-in is based on Art. 6(1) f of the GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.
You will find further information on this subject in LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.
- Analysis tools
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics cookies are installed, and this analysis tool is used, only if you have given your consent on the basis of Art. 6(1) a of the GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize its web offering and its advertising.
We have activated the IP anonymization function on this website. This means that your IP address is truncated by Google within member states of the European Union and the other member states of the European Economic Area, before transmission to the US. Only in exceptional cases is the complete IP address transmitted to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about the website activities, and to provide the website operator with additional services associated with the website use and internet use. Google will not associate the IP address transmitted by your browser in the context of Google Analytics with other data.
You can prevent the installation of cookies by adjusting your browser settings; however, we wish to point out that in this case you may not be able to make full use of all the functions of this website. Furthermore, you can prevent transmission of the data that are generated by the cookies and relate to your use of the website (incl. your IP address) to Google and the processing of these data by Google, by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
On this website we use the tool Adform from the firm Adform A/S, Wildersgade 10B, sal. 1, DK-1408 Copenhagen, Denmark, to collect data for the purposes of analysis, marketing and optimization, which helps us improve our marketing measures, our website and our app. The data collected are used by Adform to link advertising contacts and clicks on advertisements with the resulting use of our website. In this way we can determine whether internet users who have seen our ads then visit our website, and to identify which products they are interested in. This helps us to make more efficient use of our advertising budget. We may also use the collected data to run advertisements based on your interests (e.g. products viewed). The collection of data involves the use of pseudonymous online identification numbers (online IDs) such as cookie IDs, IP address, device IDs, advertising ID / IDFA (e.g. on Android or Apple smartphones). During this process no data are stored that can be unequivocally attributed to users, such as name or address. All the IDs we use enable only recognition of your device, your internet browser or the app being used. The data collected are not used to identify you personally as a user of our website or app without your specific consent. The legal basis for the data processing is Art. 6(1) (a) and 1 (f) of the GDPR in conjunction with Section 15(3) of the German Telemedia Act (TMG). If you wish your data not to be collected by Adform, you can proceed as follows:
Under the following links you will find instructions for deactivating data collection on your computer or mobile device:
English version: https://site.adform.com/privacy-center/platform-privacy/opt-out/
We have concluded a contract with Google on contract data processing, and implement the strict requirements of the German data protection authorities in full in our use of Google Analytics.
b) IAA services:
On its websites used for realizing the IAA and for enhancing the attractiveness of the trade show, the VDA also offers a range of services in connection with the IAA:
- Registration of exhibitors and co-exhibitors:
Interested firms register for the IAA as exhibitors by using the registration function for exhibitors and co-exhibitors. The data required for registration are provided by the exhibitor during online registration. The data are processed for the purpose of performing the contract pursuant to Article 6(1) b of the GDPR. During this procedure, the VDA deploys service providers in accordance with section 4 below.
- Exhibitor directory:
Exhibitors and co-exhibitors at the IAA are listed in the exhibitor directory on the IAA website and in the official app. The name of the firm and the stand number are required items. The exhibitor/co-exhibitor may decide whether further information about the company is to be published. The legal basis for the data processing is Article 6(1) b of the GDPR (performance of a contract).
- New Products Directory:
Exhibitors/co-exhibitors have the option of publishing new products/premieres. To do so, interested exhibitors/co-exhibitors must fill out an online form. The data required for the New Products Directory service are processed; the legal basis for this is performance of a contract in accordance with Article 6(1) b of the GDPR.
- Press accreditation:
Journalists have the option of accreditation for the IAA. The data required for this procedure can be entered in an online registration form. The data are processed for the purpose of accreditation in accordance with Article 6(1) b of the GDPR.
- Electronic press boxes:
Exhibitors can publish their own press releases on the IAA website. The data entered by the exhibitor are processed for performing this service in accordance with Article 6(1) b of the GDPR (performance of a contract).
- Ordering the newsletter:
The VDA offers free newsletters about the IAA and the New Mobility World. Subscription to the newsletters is voluntary and may be cancelled at any time. The information necessary for dispatching a newsletter can be entered in an online form. By ordering a newsletter you agree to the processing of your data for the purpose of dispatching the newsletter. You can cancel your subscription at any time. Every newsletter provides an opportunity to cancel the subscription. The legal basis for the processing is Article 6(1) a of the GDPR.
- Holding specialist events and information events:
During the IAA, specialist events and information events for which participants can register are held as forums for expert and political debate on the topics of the automotive industry. For registration, the data required must be entered in a contact form. The data are processed in order to perform contractual obligations (Article 6(1) b of the GDPR). If such an event is filmed and/or photographed, by participating you give the VDA your consent to the creation, processing and use of the image, video and sound recordings for documentation purposes and within the scope of the press and publicity work surrounding the IAA. Your data are stored until you inform us that you withdraw your consent. If you do not agree to this, please contact us at email@example.com.
4. Who obtains my Data
Access to your data within the VDA is restricted to those persons and departments that need to access them in order to fulfill the purpose of the processing. In some cases (e.g. for hosting services or for dispatching newsletters) the VDA deploys service providers that process data on our behalf for this purpose. We deploy these service providers only if they follow our written data protection instructions and guarantee that they comply with the requirements of the EU General Data Protection Regulation (and of the German Federal Data Protection Act).
We endeavor to take all technical and organizational measures in order to store your personal data so that they are inaccessible to third parties.
6. How long my data are stored for
The period for which your data are stored depends on the purpose of the data processing. Accordingly, we store your data only for as long as is required for the purposes for which they are processed.
If the data are no longer required in order to fulfill the purpose, they are deleted regularly unless the further processing is required for the purpose of complying with retention obligations under commercial or taxation law, or in order to keep documentary evidence in compliance with the statute of limitations.
7. Your rights arising from data protection
Access to information, rectification, erasure, limitation of processing, objection, data portability, complaints
You have the right free of charge and at any time to obtain information about the origin, recipient(s) and purpose of your stored personal data in accordance with Article 15 of the GDPR. Furthermore, you have the right to rectification under Article 16 of the GDPR, to erasure under Article 17 of the GDPR, and to restriction of processing under Article 18 of the GDPR, the right to object to processing based on Article 21 of the GDPR, and the right to data portability based on Article 20 of the GDPR. In the case of the right to access to your information and the right to erasure, restrictions apply pursuant to Sections 34 and 35 of the German Federal Data Protection Act (BDSG). You can address questions at any time about any aspect of your data privacy rights to firstname.lastname@example.org. Additional contact details of the data controller and our data privacy officer can be found in section 1 above. In the case of infringements of data protection regulations, you are entitled to lodge a complaint with a competent supervisory authority in accordance with Article 77 of the GDPR in conjunction with Section 19 of the BDSG.
You can withdraw your consent given to us to data processing at any time by sending us an informal message via e-mail to email@example.com (for additional contact details, see section 1 above). Withdrawal of your consent applies solely to the future. Any processing of your data, which has already taken place on the basis of the consent you gave, before withdrawal of your consent, remains lawful.
Right to object under Article 21 of the EU GDPR
You can object to processing of your personal data for the purposes of advertising – including profiling related to direct marketing – at any time without giving reasons.
Furthermore, you have a general right to object (cf. Article 21(1) of the GDPR). In this case, reasons for the objection to data processing must be given.