Messe Berlin Americas, S. de R.L. de C.V. (hereinafter, “Messe Berlin Americas”), attaches great importance to data protection. This privacy and data protection notice provides information on the processing of personal data of Messe Berlin Americas employees; buyers or trade visitors; website visitors; visitors to trade fairs and events; customers who rent space or participate as exhibitors at trade fairs; suppliers; media and public relations contacts; and panelists or session participants. Information regarding specific processing activities will be provided separately.

1. Controller and data protection officer (Identity and address)

Controller within the meaning of the Mexican Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDP):  Messe Berlin Americas, S. de R. L. de C. V., Axayácatl 33, Col. Ciudad del Sol. CP 45050 Zapopan, Jalisco. México e-mail: [email protected]. Data protection officer: group data protection officer of Messe Berlin Americas (address: as before; e-mail: [email protected]).

2. Categories and sources of personal data

Depending on each individual’s relationship with Messe Berlin Americas, the following personal data will be processed:

Identification data, such as first name, last name, phone number, email address, marital status, date of birth, nationality, language, and identification document or professional accreditation document.

Professional and business data, such as the company’s full name or corporate name, job title, industry, history of participation in trade fairs or events, the company’s website, and the company’s LinkedIn profile. The company’s line of business may also be collected, as well as its business address (company address), including country or region, state/province, and city.

Trade fair and event participation data, such as registration, access category, credentials, tickets, session attendance, agenda preferences, participation in forums, press credential, or special buyers’ programs.

Audiovisual identification data, such as image, voice, photographs, video recordings, broadcasts, or ambient recordings made within the exhibition venue or at digital or hybrid events.

Travel and eligibility data, when applicable to special programs for buyers or guests, such as proof of professional eligibility, itineraries, arrival and departure information, date of birth, travel documents, or equivalent data strictly necessary for the logistics of the program.

For employees, sensitive personal data are collected, such as medical history, disabilities, diagnoses, treatments, information on medication use, psychometric or psychological assessments, information related to their financial situation and benefits, bank account number (CLABE) and bank for payroll deposits, salary payments, financial benefits, savings funds, contribution history with social security institutions, and tax information for invoicing purposes (federal taxpayer registry, tax regime).

The users themselves are the source of the personal data. In some cases, data may be obtained through another data subject by reference or recommendation. Information may also be obtained automatically or, in specific cases, transmitted through third parties (for example, when registration is performed by another person). Mandatory information is marked as such in online forms. Unless otherwise stated, in such cases the information is required for the conclusion of a contract or for access to a specific program. Individuals who provide information about third parties must ensure they have the data subject’s authorization to provide the data to Messe Berlin Americas.

Some data may be processed through third-party platform services operated on behalf of Messe Berlin Americas (such as Stripe, Swapcard, and Salesforce). Their privacy platforms are available at:

https://stripe.com/mx/legal/privacy-center

https://www.swapcard.com/legal/privacy-policy

https://www.salesforce.com/company/legal/privacy/#privacy-statement.

Stripe, Swapcard and Salesforce process information for Messe Berlin Americas. Pursuant to Stripe’s privacy policy it provides platforms to process payments on behalf of its clients, in this case Messe Berlin Americas. According to Swapcard’s privacy policy it is “a group company, that provides an event engagement platform (the “Platform”). [Their] Platform empowers event hosts to create unique event experiences, accessible by registered individuals (attendees) and by participating businesses (exhibitors). The Platform is then helping attendees and exhibitors connect, share content and grow their professional network before, during and after events and as part of the communities they belong to.”  On the other hand, Salesforce provides CRM’s services for Messe Berlin Americas. These companies are external service providers which process the personal data on behalf of Messe Berlin Americas (“person in charge” as defined in Art. 2 XII LFPDP) (legal basis: Arts. 2 XII, 6, 7, and 9 LFPDP). They are bound to Messe Berlin Americas by a contract and are obliged to process data exclusively within such agreement and for the purposes revealed herein.

3. Purposes and legal basis of processing

For purposes of this notice and based on Article 6 LFPDP, Messe Berlin Americas will process your personal data for the following primary purposes, which are necessary for the legal relationship or for the provision of services, activities, and trade fair operations:

1. In the case of buyers and participants in buyer programs:

• To evaluate and validate the profile and eligibility of the potential buyer, as well as to manage their registration and accreditation;
• Where applicable, to establish, manage, and execute the relationship related to the program, as well as the necessary administrative processes for this purpose.
• Advertising, communication, and promotion of the events. Buyers expressly authorizes Messe Berlin Americas to use their image to the extent that the images were taken during the trade show and in the vicinity of the exhibition grounds or within its facilities.
•  

When such processing involves refunds or payments, it may require financial data and, where applicable, the corresponding express consent. For more details, please refer to the data protection notice related to the Hosted Buyer Program: [ https://itb-americas.com/hosted-buyer-program-terms-and-conditions/]

2. For website visitors and users of forms or digital platforms:

• Manage registration, authentication, and account management;
• Respond to requests for information, contact, or support;
• Operate, maintain, and ensure the technical functioning of the sites and platforms (including security measures, technical audits, and abuse prevention); and
• Manage preferences and settings related to features offered on the site or platforms.
•  

For more details, please refer to the privacy notice regarding cookies and tracking technologies: [ https://itb-americas.com/cookies/]

3. In the case of visitors to trade fairs and events organized by Messe Berlin Americas (a visitor is any person who comes to, or is present in, the fairs and events, without regard the reason of his/her presence):

• Manage registration, access, credentials, and entry control;
• Visitor services, event operations, and support;
• Security at facilities and venues, including access controls and for security and operational purposes; and
• Administer participation in sessions, forums, and event activities.
• Advertising, communication, and promotion of the events. The visitor expressly authorizes Messe Berlin Americas to use their image to the extent that the images were taken during the trade show and in the vicinity of the exhibition grounds or within its facilities.

4. In the case of clients who rent spaces or participate as exhibitors;

• To handle requests, quotes, and the booking of spaces and services;
• To manage the contractual relationship (including billing, collection, payments, access, and event operations);
• To provide exhibitor tools; and
• To coordinate matters related to setup/teardown, services, and trade show operations.
• Advertising, communication, and promotion of the events. Such persons expressly authorize Messe Berlin Americas to use their image to the extent that the images were taken during the fair and in the vicinity of the fairgrounds or within its facilities.

5. In the case of suppliers, for evaluation, onboarding and engagement, procurement administration and service provision, invoicing and payments, and compliance, auditing, and quality and incident management.

6. In the case of media and public relations contacts, to administer press databases; manage accreditations; send press releases, announcements, and invitations; coordinate interviews or press activities; and follow up on coverage and information requests.

7. In the case of Messe Berlin Americas employees, for the preparation of the employment file, physical access to and control of facilities, administration of electronic access to systems and technological infrastructure, compliance with obligations arising from labor, tax, and social security laws, administration of payroll services, as well as the granting of benefits provided for under Mexican labor legislation.

Additionally, Messe Berlin Americas may process your data for the following secondary purposes, which are not necessary for the principal legal relationship: (i) marketing, promotion, and publication, including the periodic sending of, or sending in connection with events, information about Messe Berlin Americas and, where applicable, about its own events or third-party events organized or promoted by the group, as well as opinion surveys, market research, contests, or promotional activities; and (ii) invitations to future events organized or promoted by Messe Berlin Americas, including future editions of the applicable events. These secondary purposes shall be carried out on the basis of your consent, and you may object to them or request the restriction of processing in accordance with the section on rights and options set forth in this notice.

Finally, Messe Berlin Americas may process data without obtaining consent where such data are required to comply with obligations arising from a legal relationship between the data subject and Messe Berlin Americas, where required by a legal provision, or where there is a duly grounded and reasoned order from a competent authority. If Messe Berlin Americas intends to process your data for a purpose other than those established in this notice, your consent shall be obtained again (Art. 11 LFPDP).

For information on rights, in particular the right to object to the processing and use of data for advertising or invitation to future events purposes, see section 6.

4. Data transfer

Your personal data may be transferred to third parties, provided that such transfer is related to the purposes referred to in the preceding section. Your personal data may be processed by third parties within or outside the national territory, provided that such transfers are necessary and are related to the purposes that have been disclosed to you.

Some of the foreign representatives, companies of the Messe Berlin Americas group of companies, processors and third-party providers are located in third countries outside Mexico, which may or may not provide the same level of data protection as Mexico, in particular due to the absence of a legal framework, independent supervisory authorities or data protection rights and remedies. Such transfer would only be made if necessary and whenever the related recipient party is obliged to the same level of protection as the controller.

With regard to the transfer of data to companies of the Messe Berlin Americas group of companies, or to third parties, the transfer of data may take place when it is necessary for the performance of the contract or the business relationship you have established with Messe Berlin Americas (Arts. 6, 7, 9, 35 and 36 LFPDP). Such transfers include, without limitation, insurance companies, financial institutions, the Company’s internal and external auditors who monitor the quality of the services provided, as well as authorities that so require in accordance with applicable law.

5. Storage period

Stored personal data will be erased once they are no longer needed for achieving the relevant purpose of their processing.

Insofar as processing is based on consent or on the basis of the legitimate interest of Messe Berlin Americas or a company of the Messe Berlin Americas group of companies, the data in question will no longer be processed for the associated purpose after receipt of the withdrawal of consent or receipt of the objection and, if applicable, will be deleted, unless there are legal exceptions to this rule. Irrespective of this, data with regard to which there are obligations to retain data under commercial or tax law will only be deleted after expiry of the statutory periods (generally 6 or 10 years).

6. Data protection rights (ARCO Rights)

To exercise the following rights, data subjects can contact the controller at any time (see section 1 above for contact details). Pursuant Art. 28 LFPDP, to exercise ARCO Rights, data subjects must send a request to the controller including the following information:

1. Name, address and email to receive notices and answers relate to his/her request.
2. If applicable, evidence of the identity of the data subject, and/or its representative.
3. Clear, concise and precise description of the data related to his/her request.
4. Description of the right to be exercise.
5. Any other element that may facilitate the localization of the related data.

Rights of the data subjects pursuant to Arts. 21-34 LFPDP: the right to access about personal data, the right to rectification, erasure as well as to opposition of processing. If consent has been given, this can be withdrawn at any time with effect for the future.

Rights of objection

Insofar as the processing is based on the legal basis of legitimate interest (Arts. 6 and 7 LFPDP) (see section 3 above), the data subject has the right to object to the processing of personal data at any time on grounds relating to the particular situation of the data subject.

Furthermore, an objection to the processing and use of the data for advertising purposes can be lodged at any time with effect for the future. The newsletters also include an unsubscribe link.

7. Options and means offered to limit and protect the process and transfer of data.

Messe Berlin Americas implements various security measures to safeguard personal data, including restricted access to physical and electronic databases; confidentiality undertakings assumed, in accordance with the Company’s internal policies, with respect to all information to which individuals providing services to the Controller have access in the performance of their duties; confidentiality clauses with our suppliers; security systems; locked files with restricted access; and confidentiality and liability agreements with third parties who receive personal data as a result of transfers that are necessary for, or related to, the purposes set out in Section 3. In addition, data update campaigns are carried out in order to cleanse the databases and to comply with the data quality principle, as reflected in LFPDP.

If data subjects are of the opinion that the data processing violates data protection law, they have the right to lodge a complaint with the competent supervisory authority (Secretaría Anticorrupción y Buen Gobierno) (Arts. 38-57 LFPDP).

8. Changes to the Privacy Notice

Any changes to this Privacy Notice or to the purposes for the processing of the personal data you have provided to us will be communicated to you through reasonable means, as well as by publication on the Messe Berlin Americas website and/or in visible locations at Messe Berlin Americas’ facilities.

Last update: April 2026