Personal data is any individual pieces of information that relates to a natural person or is about the personal or material circumstances of a specific or specifiable natural person. It includes information such as your name and your postal or e-mail address. Any information that either directly or indirectly, in combination with other information available or likely to be available with us that is capable of identifying such a person shall be considered personal data or information. The only time we save personal data in addition to your access data is if you give us this information voluntarily, e.g. as part of a registration, a survey, a prize competition, a contact inquiry, an application for a newsletter or to process an online order. Moreover, personal data is used only to the extent necessary and only for the legally permissible purpose for which you gave your consent. To ensure the secure transmission of your data, Messe Muenchen India Private Limited employs encryption procedures in secure areas. This means that communication between your browser and our order system, for instance, cannot be read by others on the Internet. Incidentally, using our order system is regarded as consenting to the storage and use of your data by Messe Muenchen India Private Limited and its partners.
Sensitive personal data or information of a person refers to such personal information which consists of information relating to:
(ii) financial information such as Bank account or credit card or debit card or other payment instrument details;
(iv) sexual orientation;
(v) medical records and history;

(vi) Biometric information;

(vii) any detail relating to the above clauses as provided to body corporate for providing service; and 
(viii) any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise.

However, it is clarified that information that is freely available or accessible in the public domain or furnished under the Right to Information Act, 2005 shall not be considered sensitive personal data or information. We shall obtain your consent prior to collection. You have an option not to provide the requested sensitive personal data or information and to withdraw your consent by informing us in writing. We shall only collect sensitive personal data where necessary for a lawful purpose that is connected with our functions or activities or by any person on our behalf. We shall not keep sensitive personal data or information for longer than is required and ensure that the sensitive personal data or information it is kept secure. We shall apply reasonable security practices and standards that contain managerial, technical, operational and physical security control measures to protect sensitive personal data and information. We shall follow the International Standard IS/ISO/IEC 27001 on “Information Technology – Security Techniques – Information Security Management System -Requirements” as one such security standard. Further, our security practices and procedures shall be certified and audited by an independent auditor who is approved by the central government at least once every year or when there is a significant upgrade in our computer resource.
We shall not, and any person acting on our behalf shall not, publish any sensitive personal data or information without your consent. By using this website, you agree and consent to the collection, transfer, use, storage, disclosure and sharing of your information as described and collected by us in accordance with this policy. If you do not agree with the policy, please do not use or access the website. Further, we shall obtain your prior permission before disclosing sensitive personal data or information to any third party for any purpose other than what is mentioned in this policy. However, it is clarified that when it is necessary to disclose the information in compliance with a legal obligation, then such prior permission shall not be obtained. We may also share information with government agencies mandated under the law to obtain information.