1. Responsible person

2. General information on data processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, in particular the EU General Data Protection Regulation (GDPR), as well as this privacy policy.

3. What data we collect

We collect and process the following personal data when you use our services, participate in our events, or contact us:

• First and Last Name
• E-mail address
• Telephone number (including mobile number for SMS notifications)
• Postal address
• Payment information (for ticket purchases and bookings)
• Company data (for business partners and exhibitors)
• IP address and browser information (when using the website)
• Event preferences and booking history

4. Purpose of data processing

We use your data for the following purposes:

• Planning and organization of events
• Processing of ticket purchases and bookings
• Sending booking confirmations and event information
• SMS/MMS notifications about events (with your consent)
• Communication with business partners and exhibitors
• Improving our services
• Fulfillment of legal obligations

5. Legal basis

Your data is processed on the following legal grounds in accordance with the GDPR:

• Article 6 paragraph 1 letter a GDPR — Consent (e.g. for SMS notifications and marketing)
• Article 6 paragraph 1 letter b GDPR — Contractual performance (e.g. ticket purchase, bookings)
• Article 6(1)(c) GDPR — Legal obligations (e.g., tax retention requirements)
• Article 6 paragraph 1 letter f GDPR — Legitimate interests (e.g. improving our services)

6. SMS and MMS communication

If you choose to receive SMS/MMS messages, the following applies:

• Types of messages: Event updates, booking confirmations, schedule changes, announcements and promotional offers
• Frequency: The frequency of messages varies, with a maximum of approximately 5 messages per month.
• Costs: Standard messaging and data charges from your mobile provider may apply.
• Unsubscribe: You can unsubscribe at any time by replying STOP to one of our messages.
• Help: Reply to one of our messages using HELP or contact us at info@bbevent.nrw
• Data sharing: Your mobile phone number and personal data will not be sold or shared with third parties.

Your consent to receive SMS messages is voluntary and can be revoked at any time without any disadvantages to you.

7. Payment processing

We use the following payment service providers for payment processing:

• Stripe (Stripe Payments Europe Ltd.)
• Revolut Business
• Wise (Wise Europe SA)

Your payment details are processed directly by these providers and are not stored on our own servers. The respective privacy policies of the payment providers apply.

8. Data transfer to third parties

Your personal data will not be sold, rented, or otherwise shared with third parties for commercial purposes. Data will only be shared:

• To payment service providers for processing transactions
• To event partners, insofar as necessary for the execution of the event
• If we are legally obligated to do so
• With your explicit consent

9. Data security

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

10. Storage duration

We only store your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by statutory retention periods. Tax-relevant data is retained in accordance with statutory retention periods (generally 6 or 10 years).

11. Your rights (GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You can request information about your stored data.
• Right to rectification (Art. 16 GDPR) — You can request the rectification of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You can request the erasure of your data.
• Right to restriction of processing (Art. 18 GDPR) — You can request the restriction of processing.
• Data portability (Art. 20 GDPR) — You can receive your data in a commonly used format.
• Right to object (Art. 21 GDPR) — You can object to the processing of your data.
• Withdrawal of consent — You can withdraw your consent at any time.

To exercise your rights, please contact us at info@bbevent.nrw.

12. Right of appeal

You have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is:

13. Cookies and website analytics

Our website uses cookies to improve user experience. You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to block cookies in certain cases or entirely, and to automatically delete cookies when you close your browser.

14. Changes to this Privacy Policy

We reserve the right to amend this privacy policy from time to time to ensure it always complies with current legal requirements. The most up-to-date version can be found on our website.