As of: September 2025

Messe Berlin GmbH (hereinafter “Messe Berlin”) attaches great importance to data protection. This information notice informs about the processing of the personal data in connection with the ticket sale and supplements the data protection notice on the website of Messe Berlin. For particular processing activities there may be separate data protection notices, that are provided separately at the time of data collection.

1. Controller and data protection officer

Messe Berlin GmbH, Messedamm 22, 14055 Berlin, Germany, e-mail info@messe-berlin.de is the economic sponsor and operational organizer of ILA Berlin 2026 and contractual partner for exhibitors, visitors and external organizers, whereby the German Aerospace Industries Association (BDLI), ATRIUM Friedrichstraße 60, 10117 Berlin, Germany, e-mail: kontakt@bdli.de is the ideational sponsor and supports the preparation and implementation of ILA Berlin 2026. Messe Berlin GmbH and BDLI are joint controllers within the meaning of the GDPR for the processing of personal data in connection with ILA Berlin 2026 and have concluded an agreement pursuant to Art. 26 of the GDPR, which specifies, in accordance with the aforementioned division of responsibilities, who fulfills which obligations pursuant to the GDPR.

For any queries relating to data protection, please contact the group data protection officer of Messe Berlin GmbH (address: as above; e-mail: datenschutz@messe-berlin.de), the data protection officer of the German Aerospace Industries Association (BDLI) (address: as before, e-mail: datenschutz@bdli.de).

MB Capital Service GmbH offers the order and registration as representative of the respective organizer and is authorized as representative to conclude the order and registration at its own discretion, but in the name and for the account of the organizer. Contractual relations are established exclusively with the buyer or user and the respective organizer.

2. Categories and origin of personal data

When using the ticket shop, users are asked to enter their e-mail address and certain personal data. For verification of the specified e-mail address, the user receives a confirmation code by e-mail, which must be entered in the registration mask in order to continue the ordering process. Providing the data enables to execute the ticket purchases and other benefits, such as the later personalization, modification or re-download of the tickets. The following categories of data are collected during the ordering process: e-mail address, title, salutation, first name, surname, company if applicable, language and address. In addition, further voluntary information can be provided. Furthermore, the payment processing for the online ticket requires the mandatory provision of payment data. If users register via a voucher code provided by a third party (in particular exhibitor), the redemption of the voucher including the code as well as the name and, if applicable, the company name will also be processed.

The tickets are not transferable, so personalization (i.e., provision of the name) of the purchased ticket is required. When user register or purchase a ticket for another person (third party) or provide a third party’s data (e.g., contact details of a contact person) users ensure and assure that they are authorized to provide these data to Messe Berlin and that Messe Berlin may lawfully process those data for the purposes mentioned in section 3 below and that the third party/ies concerned have been sufficiently informed by the users about the processing of the personal data pursuant to this notice.

3. Purposes and legal basis of processing

a. Performance of the contract and legitimate interest

Messe Berlin process the personal data pursuant to section 2 for the establishment and execution of the contractual relationship of the ticket buyers with Messe Berlin (legal basis: Art. 6 (1) (b) GDPR). Voluntary information provided in the registration form is used for better planning and organization of the event and for evaluation (market research) in the legitimate interest of Messe Berlin (see also section 3.e.) or, in the case of voucher redemption, in the legitimate interest of the third parties named in section 2 for the purpose of tracing the redemption (legal basis: Art. 6 (1) (f) GDPR).

In the case of events held in cooperation with associations or business partners, Messe Berlin will also pass on the data to them for this purpose. The payment processing of the ticket purchase is based on the performance of the contract. Users can thereby select various payment service providers who directly collect and process the personal data during the ordering process. The respective payment service provider is responsible for the processing of the payment data. Ticket dispatch also is based on the legal basis of performance of a contract pursuant to Art. 6 (1) (b) GDPR. The tickets will be e-mailed to the users so that the tickets can either be printed, saved as a file on a mobile device, or used as a wallet entry as proof of purchase on-site.

If users have started an order process in the ticket shop but have not yet completed it or have not yet paid, the users will receive a reminder e-mail to the e-mail address provided. Messe Berlin also process the personal data to remind the personalization and printing out the ticket(s) already purchased before the event begins. Legal basis is the legitimate interest of Messe Berlin in allocating the valid ticket to the correct person (identification purpose) and thus ensuring smooth admission to the event (Art. 6 (1) (f) GDPR).

b. Payment methods and credit check

If users choose electronic payment methods such as credit cards, PayPal, Klarna or similar when purchasing tickets, a credit check will be carried out. During this process, a payment service provider processes the personal data for the purpose of checking the solvency in order to avoid non-payment. Legal basis is the legitimate interest of Messe Berlin (Art. 6 (1) (f) GDPR). If the credit check is negative, another payment option must be selected.

c. Support of companies with headquarters outside Germany

Insofar as a company is established outside Germany, the data will be transmitted to the competent foreign representative in the respective country for the purpose of providing advice. This representative will be available as a local contact, in particular for providing information in connection with the event, including subsequent events, and support at the event. For the competent foreign representative, please see here. The transmission of the personal data is carried out for the execution of the contract between Messe Berlin and the company (legal basis: Art. 6 (1) (b) GDPR).

d. Lead Scanning App

Messe Berlin offers exhibitors the use of a lead scanning app. This service allows the exhibitor to scan the ticket or badge of the participant of an event and thus obtain their contact information similar to the exchange of business cards. If the exhibitor scans a QR code on the participant's ticket or badge using the QR code scanner of the Lead Scanning App, the matching data record is determined in the customer database of Messe Berlin and the following data are made available to the exhibitor, also for the purpose of direct advertising: title, name, company, function, department, industry, areas of responsibility, postal address and e-mail address. The exhibitor may supplement this data record at his own discretion with further information, such as a note, evaluation or categorization of the participant by the exhibitor. Messe Berlin has no influence on this and does not use this additionally collected data for further purposes. The exhibitor can download the complete data record including any additions made by the exhibitor. Exhibitors must separately inform visitors about their processing activities, including processing purposes, and must obtain the consent of visitors to the transfer of their data from Messe Berlin to the exhibitor when they scan the QR code on the ticket or badge (legal basis: Art. 6 (1) (a) GDPR). The exhibitors themselves are responsible for any data enrichment they initiate and any subsequent data processing for their own purposes. A list of exhibitors is available on the website of the respective event.

e. Contact for informational and promotional purposes by the Messe Berlin and its affiliated companies

The personal data is being processed for the purpose of contacting user in order to provide them with information accompanying the trade fair/event. Furthermore, users receive periodically or event-related electronic dispatch of information about Messe Berlin and its affiliated companies, trade fair/event-related information about Messe Berlin's own events and guest events, including exhibitors, sponsors, association and other cooperation partners of the respective event, as well as their products and services, and information about opening, accompanying and subsequent events. Subsequent events also include other trade fairs and events organized or held by Messe Berlin or other Messe Berlin group companies in Germany and abroad. Messe Berlin also process the personal data for purposes of market research and online surveys. The processing is based on the legitimate interest of Messe Berlin in providing the users with support before, during and after the trade fair or event and in advertising identical and similar products or services from the trade fair portfolio of the Messe Berlin group of companies (legal basis: Art. 6 (1) (f) GDPR) and is conducted in individual controllership of Messe Berlin. If consent has been given to be contacted by phone for marketing purposes, the processing is based on the consent of the user (legal basis: Art. 6 (1) (a) GDPR). If consent has been given to be contacted regarding participation as an exhibitor at the next ILA, the processing is based on the consent of the user (legal basis: Art. 6 (1) (a) GDPR).

4. Categories of recipients of the data

As described in sections 3 above, Messe Berlin will transmit the personal data to foreign representatives or other companies of the Messe Berlin group of companies for the afore-mentioned purposes. MB Capital Services GmbH is used in connection with the ticket purchase and the operation of the ticketing platform and otherwise other external service providers are used to carry out certain processing activities (in particular lead tracking service, for an event app, event platform, communication activities, hosting, IT support), which process the personal data on behalf of Messe Berlin (so-called “processors”). In the case of events held in cooperation with associations or business partners, Messe Berlin will also pass on the data to them. In the event of registration via a voucher code provided by a third party (in particular an exhibitor), these third parties will receive an overview of the redeemed voucher codes as well as the name and, if applicable, the company name of the respective users.

At some events, separate consent is obtained to provide data to exhibitors for the purpose of direct marketing. In this case, the current list of these exhibitors can be requested from the respective event by e-mail or viewed on a separate website.

Insofar as persons subject to particular personal protection by the Federal Criminal Police Office (Bundeskriminalamt – BKA) or the Federal State Criminal Police Office (Landeskriminalamt – LKA) (for example, constitutional organs such as the Federal President or the Federal Government or foreign guests) participate in events, the BKA or LKA may examine all event participants. In the framework of such examination the BKA or LKA may request data such as name, company/organization and function from the organizer. In the case of a legal obligation to provide information, Art. 6 (1) (c) of the GDPR, in conjunction with this obligation, serves as the legal basis for the processing.

In the case of incidents, disorder, emergencies and crises the data of participants may also be transmitted to the police, law enforcement authorities, the fire brigade and ambulances, other public authorities (such as the Health Office (Gesundheitsamt)).

In addition, data are passed on to third parties for the purpose of performance of the contract. These are the following partners who are own controller within the meaning of the GDPR: Transport companies, courier services, postal services (for orders), banks, credit institutions and payment service providers (for payments) as well as, in the legitimate interest of the Messe Berlin in solvency to credit rating companies.

A disclosure of data to authorities and public bodies may occur if Messe Berlin is legally obliged to do so, be it due to laws and regulations (e.g., supervisory authority procedures) or due to a court order, resolution, judgement and the like. For compliance with tax and trade laws and regulations, the personal data are shared with the tax and other relevant public and regulatory authorities. The categories of recipients of the personal data also include courts and lawyers in the context of legal disputes, legal disputes as well as for the purpose of legal advice and furthermore auditors.

5. Data transfer to third countries

Some of the foreign representatives and processors are located in third countries outside the EU, which do not provide the same level of data protection as the EU. Messe Berlin will only transfer personal data to those third countries if the European Commission has adopted a so-called adequacy decision in this respect (Art. 45 GDPR) or otherwise where appropriate safeguards in accordance with Art. 46 GDPR have been provided, in particular standard data protection clauses adopted by the European Commission pursuant to Art. 46 (2) (c) GDPR and, where necessary, supplementary measures. A copy of the safeguards can be obtained upon request (e.g., by e-mail – for contact details see section 1 above).

With regard to the transfer of data to foreign representations, other participants and external service providers, the transfer is necessary for the performance of the contract (Art. 49 (1) (b/c) GDPR); otherwise, it takes place on the basis of explicit consent despite the lack of adequate data protection in the third countries outside the EU and the associated risks (Art. 49 (1) (a) GDPR).

6. Storage period

Stored personal data will be erased once they are no longer needed for achieving the relevant purpose of their processing. In so far as the processing takes place on the basis of consent or a legitimate interest of Messe Berlin, the data in question will no longer be processed for the purpose in question, and where appropriate, erased after receipt of the revocation of consent or objection to the processing, unless the conditions for a statutory exception are met. Notwithstanding the foregoing, personal data which are subject to retention obligations under commercial or tax laws will only be deleted after the expiry of the statutory retention periods (generally 6 or 10 years). Documentation of given consent will be stored for a maximum of three years after the date on which the consent is revoked or otherwise becomes invalid.

7. Data protection rights

Data subjects can exercise the following rights at any time by contacting any of the controllers (for contact details, see section 1 above). This also applies to further information on the agreement concluded by the joint controllers.

Rights of the data subjects pursuant to Art. 12-21 GDPR: the right to access the personal data, the right to rectification, erasure and data portability as well as to restriction of processing. If consent has been given, this can be withdrawn at any time with effect for the future.

Rights of objection

If the processing is based on legitimate interests, there is the right to object to the processing of personal data for reasons relating to the particular situation. Furthermore, there is the right to object to the processing and use of data for advertising purposes at any time. The e-mail newsletters also include an unsubscribe link. If data subjects are of the opinion that the data processing violates data protection law, they have the right to lodge a complaint with the competent supervisory authority of their choice (Art. 77).