Privacy policy

Privacy policy of the Alpaca Expo Group

1 Information on the collection of personal data and the purpose of processing

(1) We, Alpaca Expo Group Ltd. (Alpaca Expo Group GmbH), Adolf-Vorwerk-Straße 105,
42287 Wuppertal, Germany, phone: +49 202 69754130, e-mail: info@alpacaexpogroup.com, are responsible for the processing of personal data of you as a user of the website, available at https://alpacaexpogroup.com/de/ (hereinafter referred to as “website”), as our customers and suppliers and as any other person with whom we communicate (hereinafter referred to as “you”) under Art. 4 No. 7 of the EU General Data Protection Regulation (hereinafter referred to as “GDPR”).

(2) In the following, we would like to inform you in detail about the processing of your data (see section 2) as a visitor to our website, as a customer, supplier, contractor, or other person with whom we communicate in the context of trade fair construction and the associated services (see section 3) as part of our duty to inform. We will inform you about your rights to process your data in Section 6.

(3) We reserve the right to amend these data protection provisions at any time with effect for the future. A current version is always available on our website.

2. Processing of your data

(1) Personal data means any information relating to an identified or identifiable person. A data subject is a person whose personal data is processed. Processing includes any handling of personal data, including obtaining, storing, using, disclosing, and destroying. In particular, we process the personal data we receive from our customers and business partners as part of our business relationships with them and other persons involved or that we collect from their users when operating our website. In addition, we also obtain certain personal data from publicly accessible sources (e.g. the commercial register, the media, the Internet) or receive it from third parties (e.g. address dealers).

(2) Personal data will only be processed by us if and to the extent that

– you have given us your consent to data processing for one or more specific purposes (Article 6 (para. 1) (subparagraph 1) (letter a) of the GDPR);

– the processing is necessary for the performance of a contract to which you are party or to take steps at your request before entering into a contract (Article 6(1)(1)(b) of the GDPR);

– the data processing is necessary for compliance with a legal obligation to which we are subject (Art. 6 (1) (1) (c) of the GDPR); or

– data processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms that require the protection of personal data (Article 6(1)(1)(f) of the GDPR).

(3) The legal bases on which we base the processing of your data, in individual cases, as listed in paragraph 2, are set out in the following provisions of this privacy policy.

(4) When you contact us by e-mail or via a contact form on our website, the data you provide (your e-mail address, your name and telephone number as well as the text of your message sent to us) will be stored by us to answer your questions. We delete the data collected in this context after storage is no longer required, or restrict processing in case of statutory retention obligations.

(5) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes. We will also state the specified criteria for the storage period.

(6) You are not contractually or legally obliged to provide personal data. However, without personal data processing, we are not generally capable of performing our services to you or your employer/client.

(7) Automated individual case decisions or profiling measures are not applied.

3 Collection of personal data when visiting our website

(1) When using the website for information purposes only, i.e. if you do not send us information via the contact form, we only collect the personal data your browser transmits to our server. The data that we collect is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1)(1)(f) of the GDPR):

– IP address

– Date and time of the inquiry

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– Amount of data transferred in each case

– Website where the request comes from

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) Additionally to the abovementioned data, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard drive and assigned to the browser you are using, through which certain information flows to the body that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

(3) Use of Cookies

1. a) This website uses the following types of cookies, the scope and function of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

1. b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with the help of which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
2. c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in your browser’s security settings.
3. d) Our website uses different types of cookies. Some cookies are placed by third parties, that appear on our website. The cookies are categorized as “Necessary” (see e), “Statistics” (see f), and “Marketing” (see g).
4. e) Necessary cookies help us to make our website usable by enabling basic functions such as page navigation and access to secure areas of our website. Our website cannot function properly without these cookies.
5. f) Statistics cookies help us to understand how visitors interact with the website by anonymously collecting and reporting information. By using statistics tools such as Google Analytics (see section 4 below), we can, for example, analyze access to our website and measure the number of your page views.
6. g) Marketing cookies are used to follow visitors on websites. They are used to show relevant and engaging adverts to the individual user and therefore more valuable to publishers and third-party advertisers.

When using statistics and marketing cookies, we may pass information about your use of our website on to our partners for social media, advertising, and analyses. Our partners may combine this information with other data provided to them or that they have collected perusing the services.

We only use statistical and marketing cookies if you have given us your consent via our cookie banner. You can consent by confirming the green “Accept cookies” button. You can configure the settings of statistics and marketing cookies yourself via the settings in the cookie banner on our website. You can revoke your consent to statistics and marketing cookies at any time with effect for the future by changing your browser settings.

1. h) If personal data is processed by individual cookies, the processing is carried out according to Art.6(1)(1)(b) of the GDPR either for the performance of the contract or according to Art.6(1)(1)(f) of the GDPR to safeguard our legitimate interests in the best possible functionality of our website and a customer-friendly and effective design of the visited page. Statistical and marketing cookies are processed based on your consent according to Art.6(1)(1)(a) of the GDPR.
2. i) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party or all cookies. We would like to point out that you might not be able to use all the functions of our website if you do so.

(4) Google Analytics

1. a) Our website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter referred to as “Google”). Google uses so-called “cookies”: text files that are stored on the user’s computer and enable the use of the website to be analyzed. The information generated by the cookies about the use of this website is usually transmitted to a Google server in the USA and stored there.

1. b) However, if IP anonymization is activated on this website, the IP address of Google users within European Union member states or in other signatory states to the Agreement on the European Economic Area will be shortened beforehand.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to analyze the use of the website by users, to compile reports on website activity, and to provide the website operator with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

1. c) Users can prevent the storage of cookies by selecting the appropriate settings in their browser software. However, the provider points out to users that in this case, they might not be able to use all functions of this website to their full extent. Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
2. d) Further information can be found here:
   https://www.google.com/analytics
   Google Ireland Limited,
   Gordon House, Barrow Street, Dublin 4, Ireland, VAT identification number: IE6388047V

(5) Social media plug-ins

Our website sometimes uses so-called plug-ins from social networks such as Facebook, Instagram, LinkedIn, Twitter, Xing, and YouTube. The plug-ins are labeled with the provider’s logo. We have configured these plug-ins so that they are deactivated by default. If you activate them (by clicking on them), the operator of the respective social network can recognize that you are on our website and use this information for its purposes. The operator is then responsible for processing your data according to its data protection provisions. We do not receive any information about you from them.

(6) Google Adwords

Our website uses Google Conversion Tracking. If you reach https://alpacaexpogroup.com/ via an advert placed by Google, Google Adwords places a cookie on your computer. These cookies lose their validity after a predefined period and are not used for personal identification. If the cookie has not expired yet and you visit certain pages of our website, again, Google and we, can recognize that you have clicked on an ad and have been redirected by it. Cookies are different depending on the customer, everyone receives their own. The conversion cookie tells us the total number of users who clicked on an advert and were redirected to a corresponding page. However, we do not receive any personal information that could identify you as a user. If you do not wish to be tracked, you can set a Do Not Track cookie or set your browser to block cookies from the domain “googleleadservices.com”.

(7) Facebook Remarketing

1. 
   a) Remarketing tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated into our website. When you visit our pages, a direct connection is established between your browser and the Facebook server via the remarketing tags. Facebook receives the information that you have visited our site with your IP address. This allows Facebook to associate your visit to our pages with your user account. We can use the information obtained in this way to display Facebook Ads. We would like to point out that, as the provider of the pages, we do not know the content of the transmitted data or its use by Facebook. 
2. b) Further information on this can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/. If you do not wish data to be collected via Custom Audience, you can deactivate Custom Audiences here.

(8) Google Maps

1. a) On our website we use the Google Maps service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google). This allows us to show you interactive maps directly on the website and, enables you to use the map function conveniently.

1. b) When you visit our website, Google receives the information that you have accessed the corresponding subpage of our website. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or customizing its website. Such an analysis is carried out in particular (even for users who are not logged in) to provide customized advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

1. c) The legal basis for the use of Google Maps is your consent according to Art.6 (1)(1)(a) of GDPR. The processing of your personal data to provide the map content is carried out in cooperation between us and Google. For this purpose, we have concluded a joint controllership agreement with Google following Art. 26 of GDPR, which you can view at the following link: https://cloud.google.com/maps-platform/terms/maps-controller-terms/.

1. d) Further information on the purpose and scope of data collection and processing by Google, can be found in Google’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy:

http://www.google.de/intl/de/policies/privacy .

1. e) When using Google Maps, it cannot be ruled out that personal data may be transmitted to the servers of Google LLC in the USA. For these cases, Google LLC has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(9) Google Remarketing

Remarketing tags from Google Inc. (“Google”) are integrated into our website. A remarketing tag establishes a direct connection between your browser and Google when you visit our website. We received the information that your IP address has visited our website via Google. This information can be used by us for specific advertising.

(10) Application and use of Google AdSense

1. a) The controller has integrated Google AdSense on this website. Google AdSense is an online service that enables the placement of adverts on third-party websites. Google AdSense is based on an algorithm that selects the adverts displayed on third-party sites to match the content of the respective third-party sites. Google AdSense allows interest-based targeting of Internet users, which is implemented by generating individual user profiles.

1. b) The operating company of the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

1. c) The purpose of the Google AdSense component is the integration of adverts on our website. Google AdSense places a cookie on the data subject’s IT system. What cookies are, has already been explained above. By setting the cookie, Alphabet Inc. is enabled to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Google AdSense component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for online advertising and billing of commissions. During this technical procedure, Alphabet Inc. gains knowledge of personal information, such as the IP address of the data subject, which serves Alphabet Inc. inter alia to understand the origin of visitors and clicks, and subsequently create commission settlements.

1. d) The data subject may, as stated above, prevent the setting of cookies through our website at any time using a corresponding adjustment of the used web browser and thus permanently deny the setting of cookies. Such an adjustment to the used Internet browser would also prevent Alphabet Inc. from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs.

1. e) Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in Internet pages to enable log file recording and analysis and allows statistical evaluation to be carried out. Using the embedded tracking pixel, Alphabet Inc. can recognize whether and when a website was opened and which links were clicked on by the data subject. Tracking pixels are used, among other things, to analyze the flow of visitors to a website.

1. f) Via Google AdSense, personal data and information, which also includes the IP address and is necessary for the collection and billing of the advertisements displayed, is transferred to Alphabet Inc. in the United States of America. This personal data is stored and processed in the United States of America. Alphabet Inc. may pass this personal data collected via the technical process on to third parties.

1. g) Google AdSense is explained in more detail at this link https://www.google.de/intl/de/adsense/start/.

4. Use of collected data

We use the data collected as part of our services solely for processing the inquiry, communicating to clarify the details of the order, and sending our offer to our customers.

1. 
   a) Before we use information, for purposes other than those listed in this privacy policy, we will inform you and ask for your consent.
2. 
   b) Alpaca Expo Group Ltd. processes personal data exclusively on servers located in Germany.

5. Data security

We take appropriate and suitable organizational and technical measures to ensure data security and protection. Despite appropriate and suitable organizational and technical measures, personal data processing on the Internet can always have security gaps. We therefore cannot guarantee absolute data security.

6. Your rights

(1) Concerning the processing of personal data concerning you, you are entitled to the rights listed below under letters a – h vis-à-vis us under the legal requirements. Please contact us or our data protection officer for this purpose. You will find the contact details under Section 1.

1. a) Right to information

Following Art.15 of GDPR, you can request confirmation as to whether personal data concerning you is being processed by us. In this case, you have a right to information about the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom we have disclosed or will disclose the personal data, the planned storage period or criteria for determining the storage period, the existence of a right to rectification or erasure by Art.15(1) of GDPR, the criteria for determining the storage period, the existence of a right to rectification or erasure of your data and restriction of processing or objection to processing, the existence of a right of appeal to a supervisory authority, the origin of the data if we have not collected your data from you, the existence of automated decision-making including profiling and, according to Art.15(2) of GDPR, the right to be informed of the appropriate safeguards under Art.46 of GDPR in the context of the transfer of personal data to third countries.

1. b) Right to rectification

According to Art.16 of GDPR, you can demand that we rectify and/or complete your personal data without undue delay, taking into account the purposes of the processing, if your data is incorrect or incomplete.

1. c) Right to cancellation

According to Art.17 of GDPR, you can demand that we erase your personal data without undue delay if there is a reason under Art.17 (1) (a-f) of GDPR. However, the right to the erasure of your personal data does not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or the establishment, exercise or defence of legal claims (Art.17 para. 3 of GDPR).

1. d) Right to restriction of processing

You can demand that we restrict the processing of your personal data according to Art.18 of GDPR as long as we verify the accuracy of your data that you dispute, if you refuse to delete your data due to unlawful processing and instead demand the restriction of the use of your data, if you need your data for the assertion, exercise or defence of legal claims, or if you have lodged an objection to the processing as long as it is not yet clear whether our legitimate reasons prevail.

1. e) Right to information

We will notify all recipients to whom your personal data has been disclosed of any rectification or erasure of your personal data or restriction of processing according to Art.16, 17 (1), and 18 of GDPR unless this proves impossible or involves disproportionate effort. According to Art.19 (2) of GDPR, you have the right to be informed about these recipients upon request.

1. f) Right to data portability

According to Art 20 of GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another controller, provided that the other requirements of Art.20 of GDPR are met, in particular, that this is technically feasible.

1. g) Right to object

Insofar as we base the processing of your personal data on legitimate interests according to Art.6 (1)(1)(f) of GDPR, you can object to the processing under Art.21 of GDPR. This will be the case if the processing is in particular not necessary for the fulfilment of a contract with you, which is described in each case in the above description of the offers. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have. In the event of your justified objection, we will examine the situation and, following Art.21 (1)(2) of GDPR, either no longer process the personal data or provide you with evidence of our compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms. We also reserve the right to further processing if the processing serves the assertion, exercise, or defence of legal claims.

Of course, you can object to personal data processing for advertising and profiling purposes, insofar as it is associated with direct advertising, at any time following Art.21(2) of GDPR.

You can inform us or our data protection officer of your objection using the contact details given in Section 1.

1. h) Right to withdraw consent

According to Art. 7 (3) GDPR, you have the right to withdraw any consent you have given us under data protection law at any time with effect for the future. However, this does not affect the lawfulness of the processing, that took place, based on your consent up to the time of revocation.

(2) If you believe that the processing of your data violates data protection regulations, you also have the right to complain to a supervisory authority following Art. 77 of GDPR. Please contact a supervisory authority in the member state of your place of residence, your place of work, or the place of the potential infringement.

7. Storage

We store the abovementioned data on your behalf and by your specifications as the client exclusively on servers located in Germany. We do not store any data locally on PCs.

The duration of data retention is 12 months.

However, the data will not be deleted, should it be relevant for an investigation or dispute resolution. They are kept until these cases have been fully clarified.

8. Disclosure of Data

Alpaca Expo Group Ltd. as a data processor grants the following external companies access to your data under the following circumstances:

– If Alpaca Expo Group Ltd. is reorganized or sold as a data processor, personal data will be transferred to a buyer who can continue to provide the services to you.

– If it is required by law or regulatory requirements or by our practices or if we are requested to do so by a public or supervisory authority, e.g. the police, we will transfer personal data.

– If we defend ourselves against legal claims, your personal data will be transmitted as required for defense against these claims.

9 Concluding

If you have any questions or suggestions on the subject of data protection concerning our services, please do not hesitate to contact us using the contact details given above (see section 1).

Status 09. 09. 2024