Privacy Policy of BB Event GmbH

Last updated: September 2026

1. Data Controller

BB Event GmbH
Zum Schulhof 2
47053 Duisburg, Germany
Email: info@bbevent.nrw
Phone: +49 170 9615364
Managing Director: Mehmet Hilmi Arabaci

2. Overview

We take the protection of your personal data very seriously. This Privacy Policy explains what data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Data We Collect

We may collect and process the following personal data:

3.1 When you visit our website:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of your visit
  • Pages viewed

3.2 When you purchase tickets or services:

  • Full name
  • Email address
  • Phone number
  • Billing address
  • Payment information (processed securely by our payment providers — we do not store your full card details)

3.3 When you register as an exhibitor or sponsor:

  • Company name and address
  • Contact person name and details
  • Business registration information
  • Banking details for invoicing

3.4 When you contact us:

  • Name
  • Email address
  • Phone number
  • Content of your message

4. Purpose and Legal Basis for Data Processing

We process your data for the following purposes:

Purpose Legal Basis (GDPR)
Fulfillment of ticket purchases and service contracts Art. 6(1)(b) — Performance of a contract
Processing payments Art. 6(1)(b) — Performance of a contract
Sending order confirmations and event updates Art. 6(1)(b) — Performance of a contract
Responding to inquiries Art. 6(1)(b) — Pre-contractual measures
Website functionality and security Art. 6(1)(f) — Legitimate interest
Marketing communications (with consent) Art. 6(1)(a) — Consent
Legal and tax obligations Art. 6(1)(c) — Legal obligation

5. Payment Processing

We use the following third-party payment service providers to process your payments securely:

Stripe, Inc.
354 Oyster Point Blvd, South San Francisco, CA 94080, USA
Privacy Policy: https://stripe.com/privacy
Stripe processes your payment data on our behalf. When you make a payment, your card details are transmitted directly to Stripe using industry-standard TLS encryption. We do not store your full credit card number, CVV, or other sensitive payment data on our servers.

Commerzbank AG
Kaiserstraße 16, 60311 Frankfurt am Main, Germany
For SEPA bank transfers and direct debit payments processed through our Commerzbank business account.

Data transferred to payment providers is limited to what is necessary for processing the transaction (name, email, payment details, transaction amount).

6. Cookies

Our website uses cookies to ensure functionality and improve user experience.

Essential cookies: Required for the website to function properly (e.g., session management, language preferences). These do not require consent.

Analytics cookies: Used to understand how visitors interact with our website. These are only set with your consent.

You can manage cookie preferences through your browser settings or through our cookie consent banner.

7. Data Sharing

We do not sell your personal data to third parties. We share your data only with:

  • Payment processors (Stripe, Commerzbank) for processing transactions
  • Hosting providers for website operation
  • Tax advisors and accountants as required by German tax law
  • Government authorities when legally required

All third-party processors are contractually bound to process your data in compliance with GDPR.

8. International Data Transfers

Some of our service providers (e.g., Stripe) are based in the United States. Data transfers to the US are conducted in compliance with GDPR, based on the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Transaction data: 10 years (German tax retention requirements under §147 AO and §257 HGB)
  • Marketing consent records: Until consent is withdrawn
  • Website analytics data: 26 months
  • Inquiry correspondence: 3 years after the last communication

10. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR): You may request information about the data we hold about you.
  • Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): You may request deletion of your data, subject to legal retention obligations.
  • Right to restriction of processing (Art. 18 GDPR): You may request that we restrict processing of your data.
  • Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest.
  • Right to withdraw consent (Art. 7(3) GDPR): You may withdraw marketing consent at any time.

To exercise any of these rights, contact us at: info@bbevent.nrw

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The relevant authority for BB Event GmbH is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4
40213 Düsseldorf
Website: https://www.ldi.nrw.de

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available at bbevent.nrw/datenschutz.

13. Contact

For questions about this Privacy Policy or your data, contact:

BB Event GmbH
Zum Schulhof 2, 47053 Duisburg, Germany
Email: info@bbevent.nrw
Phone: +49 170 9615364