MC² Europe GmbH data protection declaration
Effective Date: June 2025
Introduction
Thank you for your interest in MC² Europe GmbH. The protection of your personal data is very important to us. In this privacy policy, we inform you about the type, scope, purposes, and legal bases of the processing of personal data on this website and, where applicable, on our online presences (e.g., on social networks).
Please note our separate privacy policy for the landing page at www.messe.mc2-europe.com, especially regarding the use of optional tracking services.
This policy fulfills our information obligations pursuant to Articles 13 and 14 of the GDPR. Gender-neutral language is used throughout.
Responsibility
Responsible within the meaning of the General Data Protection Regulation (GDPR) is the company named in the imprint: MC² Europe GmbH
Data Protection Officers
MC² Europe GmbH: Christian Krause – privacy@mc-2europe.com
MCH Group: dpo@mch-group.com
Principles of personal data processing
We only collect and process personal data insofar as it is necessary for the provision of a functional website or for the delivery of our services. Processing is based on consent, legal requirements, or legitimate interests.
To protect personal data, we use technical and organizational measures, which we regularly update and review. Employees of MC² Europe GmbH are obliged to maintain confidentiality in accordance with Article 28 GDPR.
Purposes and Legal Bases of Processing
Personal data is processed primarily for the following purposes:
- Implementation of pre-contractual measures and fulfillment of existing contracts
- Handling of inquiries and communication
- Sending information about products, events, or services
- Operation and provision of this website and other telemedia services
Processing is carried out based on the following legal bases:
- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Contract execution / pre-contractual measures
- Art. 6(1)(c) GDPR – Legal obligation
- Art. 6(1)(f) GDPR – Legitimate interest (e.g., IT security, customer communication)
Recipients and Data Sharing
Personal data is only shared if legally permitted or if you have given your consent. Recipients may include:
- Public authorities where overriding legal provisions exist
- Group companies of the MCH Group
- Foreign representatives of the MCH Group
- Service providers (e.g., for hosting, CRM, newsletter distribution, IT support)
- Shipping and logistics providers
- Data processors within the meaning of Art. 28 GDPR
Data transfers to non-EU countries
Such transfers only take place with appropriate safeguards in accordance with Articles 44 ff. GDPR (e.g., EU Standard Contractual Clauses).
Data Retention and Deletion
Personal data is stored only as long as necessary for the respective purposes or as long as legal retention periods apply. Afterwards, data is either deleted or anonymized.
Server Log Data
When visiting this website, we automatically collect technical access data (e.g., IP address, date, browser). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security). Retention period: 7 days, after which data is automatically deleted unless required for security-related analysis.
Cookies and Web Analytics
Technically necessary cookies are required for the operation of the website (e.g., to store language settings). Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Matomo (Web Analytics)
To optimize our website, we use the open-source tool Matomo. Legal basis: Art. 6(1)(f) GDPR – legitimate interest in improving our website.
- Hosted on our own servers
- IP addresses are anonymized (only two octets are stored)
- No personal analysis
- No consent required pursuant to Recital 26 GDPR
You can technically prevent data collection by setting corresponding filters in your browser or ad blocker (e.g., for the domain matomo.dxm.space).
Contacting
When you contact us (e.g., via e-mail or form), we process your data to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR. Data may be stored in our CRM system. Please note that emails may be subject to statutory archiving requirements and therefore cannot always be completely deleted.
Rights of Data Subjects
If we process personal data about you, you have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent (Art. 7(3) GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR)
Right to Object (Art. 21 GDPR)
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, including profiling based on those provisions. The controller will then no longer process your personal data unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or if the processing serves the establishment, exercise, or defense of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling to the extent it is related to such direct marketing.
Right to Notification
If you exercise your right to rectification, erasure, or restriction of processing, we will inform all recipients to whom the personal data has been disclosed, provided this is possible and reasonable.
Automated Decision-Making Including Profiling
Automated decision-making as defined in Article 22 GDPR does not take place.
Obligation to Provide Personal Data
In certain cases, providing personal data may be legally or contractually required. If you do not provide the data, it may not be possible to conclude a contract or deliver specific services. We will inform you individually if any such obligation exists.
Updates to this Privacy Policy
This privacy policy is reviewed and updated regularly. Please check this website for the latest version. We expressly reserve the right to make changes.
If you have any questions or wish to exercise your data protection rights, please contact our data protection officers.