Privacy Policy

1. Who is responsible for your data

The data controller for this website and for the services described on it is Mood Messe (hereinafter "Mood Messe", "we", "us"). We operate from two workshops:

• Türkiye: Mimarsinan Merkez Mah. Hakan 2 Sok. Ömer Bayraktar Apt. Dükkan 1-2, Mimarsinan / İstanbul, Türkiye
• Germany: Justus-von-Liebig-Str. 18b, 67105 Schifferstadt, Germany

For any question about this policy or your personal data, write to info@moodmesse.com or call +90 555 296 64 39. Where required, the full legal entity name, commercial register number and the contact details of a data protection officer are available on request.

2. Which data we collect

We only collect the data we need to answer your request, run your project and operate this website.

• Contact and project data you give us: name, company, e-mail address, phone number, the fair and stand details you describe, messages you send through the contact form, by e-mail or by phone.
• Contract data when we work together: quotations, orders, invoices, delivery addresses, correspondence and project documentation.
• Technical data when you visit the website: IP address, date and time of access, pages viewed, referring page, browser type and version, operating system and device type. This data is recorded in server log files.
• Cookie and analytics data, only to the extent described in our Cookie Policy and only with your consent where consent is required.

We do not knowingly collect data from children under 16 and we do not process special categories of personal data (such as health or political opinions) on this website.

3. Why we process your data and on which legal basis

• To answer enquiries and prepare quotations: Art. 6(1)(b) GDPR (steps prior to a contract) and KVKK Art. 5(2)(c).
• To plan, produce, install and support your exhibition stand and related services, and to invoice them: Art. 6(1)(b) GDPR and KVKK Art. 5(2)(c).
• To meet legal obligations such as tax and commercial record-keeping: Art. 6(1)(c) GDPR and KVKK Art. 5(2)(a) and (ç).
• To operate, secure and improve the website, including server logs and fraud prevention: Art. 6(1)(f) GDPR (legitimate interest) and KVKK Art. 5(2)(f).
• To send you information about our services after a project, where permitted: Art. 6(1)(f) GDPR, or your consent under Art. 6(1)(a) GDPR and KVKK Art. 5(1). You can object or withdraw consent at any time.
• To set non-essential cookies or analytics: only with your consent (Art. 6(1)(a) GDPR, Section 25 TDDDG, KVKK Art. 5(1)).

4. Contact form

When you send the project request form, we process the fields you fill in (name, e-mail, phone if given, fair/project and your message) together with the time of sending. The form uses technical protection against automated submissions (a hidden field, a time check and a rate limit per connection). The submission is delivered to our mailbox at info@moodmesse.com and is used only to answer your request. It is not stored in the website database.

5. Who receives your data

We share personal data only when it is necessary for the purposes above:

• Service providers acting on our behalf (processors): web hosting and e-mail providers, IT support, and, for projects, transport companies, fair organisers and venue operators that need contact details for deliveries, accreditation or on-site access.
• Public authorities where the law requires it, for example tax authorities or fair-ground security.
• Professional advisers such as accountants and lawyers, bound by confidentiality.

We do not sell personal data and we do not share it with third parties for their own marketing.

6. International transfers

Mood Messe operates in Türkiye and Germany, so data may be transferred between our two workshops and between the European Economic Area and Türkiye. Transfers from the EEA to Türkiye are based on the EU Standard Contractual Clauses (Art. 46 GDPR). Transfers from Türkiye abroad are made in line with KVKK Art. 9, including your explicit consent where required. If a service provider is located in another third country, we apply the same safeguards.

7. How long we keep your data

• Enquiries that do not lead to a project: up to 12 months after our last contact.
• Project and contract data, invoices and related correspondence: for the statutory retention periods, which are 10 years under German tax and commercial law and 10 years under Turkish commercial and tax law.
• Server log files: 14 days, unless an entry has to be kept longer to investigate a security incident.
• Consent records: for as long as the consent is valid and for 3 years after withdrawal, to prove it was obtained.

When a retention period ends, the data is deleted or anonymised.

8. Cookies and analytics

This website sets only the cookies that are technically necessary to operate it unless you agree to more. Details of every cookie we use, its purpose and its lifetime, and how to change your choice, are given in our Cookie Policy.

9. Security

We protect personal data with technical and organisational measures appropriate to the risk: encrypted connections (HTTPS), access restricted to staff who need it, protected hosting, regular updates and backups. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we review our measures regularly.

10. Your rights

Under the GDPR and KVKK you have the right to:

• Learn whether we process your personal data and request information about it (access).
• Ask us to correct inaccurate or incomplete data (rectification).
• Ask us to delete your data where there is no longer a legal reason to keep it (erasure).
• Ask us to restrict processing in the situations set out in Art. 18 GDPR.
• Receive the data you gave us in a structured, machine-readable format (portability).
• Object to processing based on our legitimate interests, including direct marketing, at any time.
• Withdraw consent at any time with effect for the future.
• Request compensation if you suffer damage because of unlawful processing (KVKK Art. 11).
• Lodge a complaint with a supervisory authority: in Germany the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz; in Türkiye the Personal Data Protection Authority (KVKK Kurumu). You may also contact the authority of your place of residence.

To exercise your rights, write to info@moodmesse.com. We will answer without undue delay and within one month (GDPR) or 30 days (KVKK). We may ask you to verify your identity before we act on a request.

11. Changes to this policy

We update this policy when our services, the law or our processing change. The current version is always published on this page with the date of the last update. Significant changes that affect ongoing projects will also be communicated to our clients directly.