This is a translation for your convenience. The legally binding version is the German original.

Privacy policy

For the website boothbahn.com and the BoothBahn Android app · Last updated: 31 October 2026

We take the protection of your personal data seriously. In short: the website sets no cookies, uses no analytics or tracking and loads no third-party content (not even external fonts). Nothing can be bought on the website; BoothBahn packages are only available in the app via Google Play. The app needs no account and does not send any data to us on its own. We only receive data when you write to us, submit the contact or withdrawal form, or order a BoothBahn in the app.

1. Controller

Kingugen Investments B.V., Am Kranzlberg 19, 82335 Berg, Germany
Email: info@boothbahn.com · further details in the imprint.
We have not appointed a data protection officer because there is no legal obligation to do so.

2. Visiting the website (hosting)

The website runs on Google Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and affiliates such as Google LLC, USA; "Google"). When a page is requested, Google processes technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system, and the previous page (referrer). This is needed to deliver the website and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. We do not analyse this data ourselves or combine it with other data. Google processes it as our processor under the Firebase data processing terms (Art. 28 GDPR). A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).

3. Contact form and email

When you write to us via the contact form or by email, we process the information you provide: usually name, email address, company if given, and your message.

Purpose: to answer your message.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in replying) or Art. 6(1)(b) GDPR where your message concerns a contract with us.
Technology: the forms are passed through a function on Google Cloud (data centre in Frankfurt am Main) to our mailbox at Google Workspace (Google Ireland Limited). Google acts as our processor; for transfers to the USA see section 2. The forms do not store data in a database. To prevent abuse (limiting the number of requests), the function processes your IP address briefly in memory and discards it after ten minutes at most. Technical logs of Google Cloud (time, IP address, result of the request, but not the content of your message) are deleted by Google automatically after 30 days (Art. 6(1)(f) GDPR; legitimate interest in secure operation).
Retention: we delete messages no later than two years after the last contact unless statutory retention obligations apply.

4. Ordering in the app and creating your BoothBahn

Order and payment: you buy BoothBahn packages in the app through the Google Play billing system. Payment is handled by Google (Google Ireland Limited or Google Commerce Limited, Ireland); we do not receive your payment details. For each order Google gives us the order number, the package bought, date, price and country. Google's privacy policy applies to its processing.

Briefing: to order, you enter your briefing in the app: usually name, email address, role, company, what you offer or need, the trade show and your days there, your goals, companies you are and are not looking for, and known customers, partners or competitors. The app sends the briefing together with the order number to us in the same way as described in section 3 (Google Cloud, Frankfurt am Main, and our Google Workspace mailbox). Please do not include special categories of data and only name third persons (such as contacts at your customers) where this is needed for your BoothBahn.

Creation: for your BoothBahn we research the exhibitors of the trade show you name in publicly available sources (exhibitor list, floor plan, exhibitors' websites) and match them against your information. We use AI-assisted tools for this, currently Claude by Anthropic (Anthropic Ireland, Limited, Dublin, Ireland, and Anthropic PBC, USA). We use a business offering under which Anthropic acts as our processor and does not use your data to train its models. Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or an adequacy decision where available.

The legal basis for order, briefing and creation is Art. 6(1)(b) GDPR. You receive the finished BoothBahn as a file at the email address given in the briefing. The file contains a digital seal of authenticity with the order number, the delivery date and your name (or your company's name). It is used to check that the file is genuine and to link it to your order (Art. 6(1)(b) and (f) GDPR; our legitimate interest is protection against imitated or altered BoothBahns). If you pass the file on, its recipients can see these details. We keep order and invoice data as long as commercial and tax law requires (usually eight to ten years, Art. 6(1)(c) GDPR); we delete the briefing two years after delivery.

5. Withdrawal function

If you withdraw from a contract using our withdrawal function ("Withdraw from contract"), we process your name, the contract details and your email address to handle the withdrawal and confirm receipt. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB). We keep the declaration for the statutory retention and limitation periods. Transmission works as described in section 3.

6. The BoothBahn Android app

No account, no tracking: the app contains no analytics, advertising or tracking and sends no usage data to us. We only receive data when you order a BoothBahn (section 4) or email us from the app.
Your data stays on your device: BoothBahn files, ticks, notes, added companies and day plans are stored only locally on your device. Uninstalling the app deletes them.
Sharing and export: when you share a BoothBahn or export notes by email, the app opens your email or share app. What you send is your decision; the terms of the app you choose apply.
Authenticity check: when importing, the app checks the seal of authenticity of the BoothBahn file. The check runs entirely on your device; no data is sent to us or anyone else.
No external content: when showing a BoothBahn, the app does not load fonts or other content from the internet. Only if you tap a link in a BoothBahn does your browser open.
Permissions: notifications (running stand timer), vibration (timer alert), keep screen on (while the timer runs) and internet (only for links you open yourself). The app does not access location, contacts, camera or microphone.
Google Play: Google is responsible for downloads, updates and payments and processes data under its own privacy policy, over which we have no influence.

7. Cookies and local storage

The website sets no cookies and stores nothing in your browser, so no consent under Section 25 TDDDG is required. Data stored in the app (section 6) is strictly necessary for the function you requested (Section 25(2) no. 2 TDDDG).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). A message to info@boothbahn.com is enough.

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

You may also lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. No obligation to provide data, no automated decisions

You are not obliged to give us any data. Without it, however, we cannot answer an enquiry or create a BoothBahn. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Changes

We update this privacy policy when our services or the law change. The version published here applies.