NRW is blooming 2027
Buy Tickets

Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Cannabismesse NRW GmbH
Alte Grenzstraße 151E
45663 Recklinghausen
Germany

Email: info@cannabismesse.nrw

Represented by the Managing Director:
Miguel Brinkmann

2. General Information on Data Processing

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.

Personal data means any information that can be used to identify you personally.

Personal data is processed exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting

Our website is hosted by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

When you visit our website, IONOS collects various log files, including your IP address.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our online services securely, reliably and efficiently.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

4. Server Log Files

When you access our website, information is automatically transmitted by the browser on your device to our server.

The following data may be processed in particular:

  • IP address
  • Date and time of access
  • Browser type and browser version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device
  • Pages accessed

Processing is carried out on the basis of Art. 6(1)(f) GDPR.

Our legitimate interest lies in ensuring system security, analysing errors and preventing misuse.

5. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device that contain certain information.

Technically necessary cookies are used on the basis of Section 25(2) TDDDG.

All other cookies, in particular analytics and statistics cookies, are used only after you have given your explicit consent in accordance with Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can withdraw or change your consent at any time via the cookie settings.

6. Consent Management with Complianz

We use the consent management tool “Complianz”.

The provider is:

Complianz B.V.
Kalmarweg 14-5
9723 JG Groningen
The Netherlands

Complianz enables us to obtain, manage and document consent in accordance with data protection law.

The following data may be processed in particular:

  • Consent status
  • Time of consent
  • Browser information
  • Anonymised IP address
  • Device information

Processing is carried out to fulfil our legal obligations pursuant to Art. 6(1)(c) GDPR and on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

7. Contact and Contact Forms

If you contact us by contact form or email, the data you provide will be processed for the purpose of handling your enquiry.

This may include in particular:

  • Name
  • Email address
  • Telephone number
  • Company or organisation details
  • Message content

Processing is carried out:

  • to take steps prior to entering into a contract pursuant to Art. 6(1)(b) GDPR, or
  • on the basis of our legitimate interest in handling enquiries pursuant to Art. 6(1)(f) GDPR.

The data will be deleted once the purpose for which it was stored no longer applies, provided that no statutory retention obligations prevent deletion.

8. CRM and Web Forms with Pipedrive

For the management and processing of enquiries, in particular from exhibitors, Cannabis Social Clubs, business partners and other interested parties, we use the customer relationship management system (CRM) Pipedrive. Web forms provided by Pipedrive may also be integrated into our website.

The provider for customers within the European Union is:

Pipedrive OÜ
Mustamäe tee 3a
10615 Tallinn
Estonia

When you submit a corresponding form or contact us, the information you provide may be transferred to and processed by Pipedrive.

Depending on the respective form, this may include in particular:

  • Name and contact details
  • Email address
  • Telephone number
  • Company or organisation details
  • Information relating to your enquiry
  • Interests and preferred forms of participation
  • Message content
  • Time and technical information relating to the form submission

The processing is carried out for the purpose of handling your enquiry, organising our communication and managing prospective and business contacts.

Depending on the nature of your enquiry, processing is carried out to take steps prior to entering into a contract pursuant to Art. 6(1)(b) GDPR or on the basis of our legitimate interest in efficiently processing and managing enquiries pursuant to Art. 6(1)(f) GDPR.

Pipedrive generally processes personal data on our behalf as a data processor within the scope of the services we use. A data processing agreement pursuant to Art. 28 GDPR is in place with Pipedrive.

In connection with the provision of its services, data may also be processed by affiliated companies or subprocessors of Pipedrive outside the European Economic Area. Where no adequacy decision applies to such transfers, Pipedrive states that appropriate safeguards are used, in particular the Standard Contractual Clauses adopted by the European Commission.

Further information on data processing by Pipedrive can be found at:

https://www.pipedrive.com/en/privacy

Information on data processing agreements can be found at:

https://www.pipedrive.com/en/privacy/dpa

9. Google reCAPTCHA

We use Google reCAPTCHA to protect our forms against abusive automated submissions and spam.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

reCAPTCHA analyses the behaviour of website visitors based on various characteristics. The following data may be processed in particular:

  • IP address
  • Browser information
  • Operating system
  • Mouse movements
  • Keyboard input
  • Time spent on the website
  • Language settings
  • Referrer URL

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future.

Further information:

https://policies.google.com/privacy

https://policies.google.com/terms

10. Google Tag Manager

We use Google Tag Manager.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager is used to manage and deploy website tags.

Google Tag Manager itself does not create user profiles and generally does not store cookies.

Its use is based on your consent pursuant to Art. 6(1)(a) GDPR.

11. Google Analytics 4

Where you have given your consent, we use Google Analytics 4.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics enables us to analyse user behaviour on our website.

The following data may be processed in particular:

  • IP address (shortened)
  • Browser information
  • Device information
  • Usage data
  • Page views
  • Interactions with the website
  • Approximate location data

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You may withdraw your consent at any time.

We have enabled IP anonymisation functions where these are technically provided by Google.

Further information:

https://policies.google.com/privacy

https://support.google.com/analytics

12. Ticket Sales via ticket.io

We use the ticket.io service to manage and sell admission tickets.

The provider is:

ticket i/O GmbH
Bismarckstraße 10–12
51373 Leverkusen
Germany

A ticket shop may be embedded on our website via an iFrame.

When accessing the ticket area, a connection to the servers of ticket.io may be established. Technical data such as your IP address, browser information and usage data may be processed.

If you purchase tickets, ticket.io independently processes the personal data required for the transaction.

This may include in particular:

  • First and last name
  • Address
  • Email address
  • Payment information
  • Booking information
  • Ticket information

Processing is carried out for the purpose of taking steps prior to entering into a contract and performing a contract pursuant to Art. 6(1)(b) GDPR.

Further information can be found in the privacy information provided by ticket.io.

13. Social Media Presence

We maintain profiles on social networks in order to communicate with interested parties, visitors and business partners and to provide information about our events and services.

We currently maintain profiles on:

  • Instagram
  • TikTok

When visiting our social media profiles, personal data may be processed by the respective platform operators.

Please note that data may be processed outside the European Union and that we have only limited influence over the processing carried out by the platform operators.

The privacy policies of the respective providers apply.

14. Locally Hosted Fonts

Fonts used on this website are hosted locally.

When accessing the website, no connection is established with Google servers or other third-party providers for the purpose of loading fonts.

15. Recipients of Personal Data

Personal data may be transferred to the following categories of recipients:

  • Hosting providers
  • IT service providers
  • CRM and web form providers
  • Ticket service providers
  • Analytics and statistics service providers
  • Authorities and public bodies where required by law

16. Data Retention

We store personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply.

Once the respective purpose no longer applies, the data will be deleted unless statutory retention obligations prevent deletion.

17. Your Rights

Within the framework of the applicable legal provisions, you have the following rights:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR

18. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The competent supervisory authority is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

Kavalleriestraße 2–4
40213 Düsseldorf
Germany

https://www.ldi.nrw.de

19. Updates and Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy in order to ensure that it continues to comply with current legal requirements or to reflect changes to our services.

The version applicable at the time of your subsequent visit shall apply.