Privacy Policy
The following information provides you with an overview of how we process your personal data and your rights under data protection law.
1. Who is responsible for data processing and who can I contact?
The responsible body is:
Bayerische Warenbörse München-Landshut e.V.
Clemensstr. 1
80803 Munich
Tel: +49 89 53 27 27
Fax: +49 89 38 38 47 - 47
Website: www.bwab.de
Email: info(@)bwab.de
2. Who does this privacy policy apply to?
This privacy policy concerns visitors to our website, in particular our members, interested parties, and persons who use or wish to use our services, or who wish to learn more about the Bayerische Warenbörse München-Landshut eV, as well as providing initial information for all persons whose data we have researched from publicly accessible sources or obtained through business cards, and use for the purposes of the association's work.
3. What data do we use?
You can generally visit our website without disclosing your identity, unless you send us an email or a message via a contact form, register for our events, or apply for a position with us. In these cases, we only process the data necessary to answer your inquiry or provide our services. The specific data collected is indicated in the respective input forms. Required data fields are marked as mandatory. Any requests for additional information are voluntary. We use this information to personalize our offers and better tailor them to your needs. In all other cases, we only use the data necessary to contact you.
4. Purpose and legal basis of data use
We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Please also note our information regarding your right to object under Article 21 of the GDPR.
a) To fulfill contractual obligations (Art. 6 para. 1b EU GDPR)
Personal data is processed for the purpose of providing our services and for carrying out pre-contractual measures at your request. This includes: • Registration as a member • Participation in our events • Arbitration proceedings and communication.
b) Based on your consent (Art. 6 para. 1a EU GDPR)
If you have given us your consent to process your personal data for specific purposes (e.g., participation in one of our events or subscribing to a newsletter), the lawfulness of this processing is based on your consent. You can withdraw your consent at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal remains unaffected.
c) Within the framework of the balancing of interests (Art. 6 para. 1f EU GDPR)
Where necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties.
• Answering your request
• Assertion of legal claims and defense in legal disputes
• Ensuring IT security
• Processing your application
4.1. Data protection policy for receiving circulars / information letters
If you would like to receive our newsletters and information letters, we require your email address and information that allows us to verify that you are the owner of the specified email address and that you consent to receiving the newsletters. No further data will be collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not share it with third parties.
The processing of the data entered in the newsletter registration form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of your data, email address, and its use for sending newsletters at any time by email. The lawfulness of data processing operations already carried out remains unaffected by the revocation.
The data you provided for the purpose of subscribing to our mailing list will be stored by us until you unsubscribe and will be deleted after you unsubscribe. Data stored for other purposes (e.g., email addresses for the members' area) will remain unaffected.
4.2. Data protection policy for applications
The legal basis for processing your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) as amended on May 25, 2018. According to this provision, the processing of data necessary for the decision regarding the establishment of an employment relationship is permitted. Should the data be required for legal proceedings after the application process has concluded, data processing may be carried out based on the requirements of Article 6 of the EU General Data Protection Regulation (GDPR), in particular for the purposes of pursuing legitimate interests pursuant to Article 6(1)(f) GDPR. Our interest in this case lies in asserting or defending against legal claims.
By submitting your application, you consent to us storing and processing your data for the purposes of application, recruitment, and hiring. You may revoke this consent and withdraw your application at any time.
The personal data you provide in your application will be processed by us solely for the purposes of application processing and the recruitment process. Positions are filled within the management team. Your data will be deleted six months after the application process is completed, unless you consent to longer storage so that we can consider you for future job openings. If you are hired, your data will be transferred to our personnel records.
5. Integration of third-party services and content
Our website includes content, services, and features from other providers. These include, for example, maps provided by Google Maps, videos from YouTube, and graphics and images from other websites. The transmission of the IP address is essential for this data to be accessed and displayed in the user's browser. The providers (hereinafter referred to as "third-party providers") therefore receive the IP address of the respective user. While we strive to use only third-party providers who require the IP address solely for content delivery, we have no control over whether the IP address is subsequently stored. This process may be used, among other things, for statistical purposes. If we become aware that the IP address is being stored, we will inform our users.
6. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that in this case, you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: Browser Add-on to deactivate Google Analytics. Besides installing the browser add-on, there is another alternative to prevent data collection by Google Analytics. This is particularly relevant for users of mobile devices. Please click on this link. This will install an opt-out cookie that prevents data tracking on this website. This function will remain active until the cookie is deleted. If the cookie has been deleted, simply click the link again.
7. Online ticketing, Eventbrite
The Bavarian Commodity Exchange Munich-Landshut eV uses Eventbrite software as its online ticketing system. If visitors to our website wish to purchase an online ticket for our events, their data will be transmitted to Eventbrite.
a. Eventbrite as data controller:
When an event organizer creates an account with Eventbrite for event organization and ticket booking, Eventbrite acts as the data controller for the personal data that the organizer provides about themselves when creating the account. Similarly, when a consumer provides personal data to Eventbrite when creating an account, Eventbrite acts as the data controller for the personal data directly provided by that consumer. Eventbrite also acts as the data controller for personal data obtained through an organizer's or consumer's use of Eventbrite services, which may then be used for research and analysis, to improve Eventbrite's products and features, and to provide personalized recommendations.
b. Eventbrite as a data processor:
Eventbrite acts as a data processor with respect to the personal data of consumers that Eventbrite obtains in the course of providing its core ticketing functions to event organizers, for example when requesting user-defined data when the organizer purchases tickets, sending emails to consumers on behalf of the organizer, processing payments, and providing event reports and tools that enable organizers to measure the effectiveness of different distribution channels.
Because Eventbrite processes consumers' personal data both indirectly when providing services to the event organizer and directly when serving the consumers who use these services, the company can be both the controller and the processor of this personal data and is therefore subject to different obligations when processing it.
As a data processor, Eventbrite is subject to the provisions of a data processing agreement when processing personal data on behalf of the event organizer. This data processing agreement (DPA) for event organizers , which is included in Eventbrite's Terms of Service , outlines Eventbrite's legal obligations as a data processor in accordance with the GDPR.
Furthermore, Eventbrite has published a publicly accessible list of its sub-processors , which is referenced in the DVN for event organizers . This link provides information about Eventbrite's privacy policy.
8. Who receives my data?
At the Bavarian Commodity Exchange Munich-Landshut e.V., access to your data is granted only to those departments that require it to fulfill our contractual and legal obligations or within the framework of a balancing of interests. Answering inquiries may require forwarding them to third parties, such as umbrella organizations or individual members. Service providers and agents we employ may also receive data for these purposes, provided they maintain confidentiality and comply with our data protection instructions. Disclosure to third parties occurs exclusively within the framework of the provisions of the EU GDPR and the German Federal Data Protection Act (BDSG).
9. Forwarding for the purpose of ordering publications / correspondence of the arbitration tribunal
The personal data we collect will be passed on to the delivery company commissioned with the delivery (e.g. DHL).
10. Will data be transferred to a third country?
Data is generally not transferred to countries outside the EU or the EEA (so-called third countries).
If the online ticketing system (Eventbrite) is used, Eventbrite stores personal data on servers in the USA. To ensure compliance with applicable law regarding data transfers between the EU and the servers in the USA, Eventbrite is certified under the EU-US Privacy Shield agreement, which is overseen by the US Department of Commerce. Eventbrite's certification has been in effect since October 14, 2016. Information about the EU-US Privacy Shield is directly linked in Eventbrite's privacy policy .
11. How long will my data be stored?
We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations. If the data is no longer required for fulfilling contractual or legal obligations, it is routinely deleted, unless its continued processing – for a limited time – is necessary to comply with commercial and tax law retention periods, such as those stipulated by the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified therein range from six to ten years.
12. Data protection rights
You have the right to information under Article 15 of the EU GDPR, the right to rectification under Article 16 of the EU GDPR, the right to erasure under Article 17 of the EU GDPR, the right to restriction of processing under Article 18 of the EU GDPR, the right to object under Article 21 of the EU GDPR, and the right to data portability under Article 20 of the EU GDPR. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 of the EU GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG)).
A list of supervisory authorities and their contact details can be found at the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
You can withdraw your consent to the processing of your personal data at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal remains unaffected. Please also see our information about your right to object under Article 21 of the EU GDPR.
To exercise your rights, please use the contact details above.
13. Obligation to provide data
As part of our business relationship or when ordering services, you must provide the personal data necessary for conducting the business relationship or providing a service and fulfilling the associated contractual obligations, or which we are legally obligated to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order, or we may no longer be able to perform an existing contract and may therefore have to terminate it.
14. Information about your right to object pursuant to Article 21 of the EU GDPR
Right to object in individual cases: You have the right to object, on grounds relating to your particular situation, to the processing of your personal data. This applies provided that the data processing is carried out in the public interest or on the basis of a balancing of interests. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims.
15. Status and updates of this privacy policy
This privacy policy is dated July 3, 2026. We reserve the right to update this privacy policy from time to time to improve data protection and/or to adapt it to changes in official practice or case law.