This data protection notice informs you about the processing of your personal data ("data") by LEGO GmbH when you, as our employee, use our platform www.ntf-hub.com made available via the Internet ("platform"). Please refer to our general employee data protection information, which applies in addition - the data protection information here is limited to describing the specifics of platform use:

1. Controller / contact data protection officer

The data protection officer is LEGO GmbH, Technopark II, Werner-von-Siemens-Ring 14, 85630 Grasbrunn. You can reach our data protection officer at the above postal address with the addition "To the data protection officer".

2. Informational use of the platform

When you visit the platform, we always collect the data that your browser transmits to us ("browser data"):

• - Your IP address
• - the browser you use
• - the operating system of the terminal device you are using
• - the network
• - the date and time of the request for our web pages
• - the website from which your request came
• - the amount of data transferred.

We process the browser data in order to technically enable the retrieval of the web pages you have called up and in order to be able to check whether our web pages are optimally displayed to you. We only use your IP address for the duration of your visit and store the browser data in anonymised form for logging purposes by shortening the IP address so that it can no longer be assigned.

We store your browser data for the purpose of bookings and post-event reviews up to a maximum of 6 months post-event and then delete it.

3. Use of certain functions of the platform

When you use certain functions of the platform, we also process the following personal data from you:

a. Registration on the Platform

To register, you must provide your professional personal and contact details; we use these to create an account for you and to be able to authenticate you correctly when you log in in the future ("Account Data").

This data also includes your last user name, the language you use, your full name and your professional email address and company address and position. We use this data for the purpose of identification and confirming your bookings.

We store your account data for the purpose of identification and bookings until a maximum of 6 months post-event and then delete it.

b. Bookings via the platform

You have the possibility to make various bookings on the platform, such as meeting rooms or time slots to visit various areas on the exhibition grounds, but also hotel accommodation or a journey to and from the fair.

In order to use this function, you must enter the relevant data required for the desired booking, such as the meeting period and location or the period for an overnight stay in a hotel, if applicable also the name of persons with whom you are to meet and who are to be guests at a meeting, etc.. We process this data, together with other data relating to a booking (such as whether a booking was successful or not), for the purpose of checking and, if necessary, making the desired booking (so-called "booking data").

We store your booking data for the purpose of confirming your booking and post-event reviews up to a maximum of 6 months post-event and then delete it.

4. Recipients

Your personal data described above will only be processed within LEGO GmbH by only the LEGO employees responsible for the execution of Nuremberg Toy Fair.

A transfer of your data to recipients outside the EU/EEA does not take place and is not planned.

5. Legal basis

We make the platform and its functions available to you so that you can use it to perform your official duties within the scope of your employment relationship with us. The legal basis for the processing of your personal data described above is therefore Art. 6 para. 1 sentence 1 lit. b) DSGVO (contract performance), Art. 88 para. 1, 2 DSGVO in conjunction with Section 26 para. 1 sentence 1 BDSG, i.e. the performance of the employment relationship with you.

6. Provision of data

As part of your employment contract obligations, you are obliged to provide the data required to visit and use the platform and described above. In the event that you do not provide this data, you will not be able to use the platform at all or in full.

7. Your Data subject rights

If the legal requirements are met, you have the right to information regarding your personal data, as well as the right to rectification, deletion, restriction of processing and data portability, and the right to lodge a complaint with a supervisory authority for data protection. For details, please refer to the general employee data protection information.