Privacy notice for HOSHOW users
HOSHOW is Hoppe Marine's internal application for trade shows: the booth team records the conversations held at the booth, follows them up after the show, and evaluates each show. To do that, the app also records data about the employees who use it.
This notice explains what the app records about you as a user, why, who can see it, how long it is kept, and what rights you have. It applies to every Hoppe Marine employee with a HOSHOW account.
Information under Art. 13 GDPR · Last updated: 15.10.2026
1. Who is responsible
Hoppe Marine GmbH, Kieler Strasse 318, 22525 Hamburg, Germany
Phone +49 (0) 40 56 1949-0 · sales@hoppe-marine.com · www.hoppe-marine.com
Data protection officer: Rene Lengenfeld, Hoppe Marine GmbH, address as above, privacy@hoppe-marine.com. You can contact him directly at any time with any question about data protection.
2. What this app records about you
Your account
- your business e-mail address, your name and your role (booth team, event manager, administrator) - in the sign-in service and in the app's user list
- the trade shows whose team you belong to
- the one-time sign-in codes it sends to your e-mail address
What you record and change in it
- your name as the person who recorded a lead or a feedback answer, and as the person a follow-up was forwarded to or completed by
- a change log on every lead: which fields were changed, when, and by whose e-mail address
- your name in lead reports, Excel exports and statistics - the lead report includes a per-person overview of how many leads each team member recorded
- e-mails it sends you when a lead is forwarded to you or marked as done by you, and - for administrators - when shows are deleted after the retention period
Technical records
- a server log line for every request: time, result, which page or function was called (without the search terms entered), how long it took, your e-mail address and your IP address
- two cookies that are needed to sign in: a session cookie (valid for 12 hours) and, while signing in, a short-lived cookie (15 minutes) that protects the sign-in against forgery. The app sets no tracking or analytics cookies.
- in your browser only: your choice of colour scheme, your filters on the Overview page, and leads captured while the connection was down that have not been sent yet
3. Why this app records it, and on what legal basis
- To give you access to the app for your work - your account, role and show teams. Legal basis: carrying out your employment relationship (Art. 6(1)(b) GDPR).
- To show who is responsible for a lead - "recorded by", "forwarded to", "done by" and the follow-up e-mails, so that contacts are followed up and not lost. Legal basis: as above, and Hoppe Marine's legitimate interest in an orderly follow-up (Art. 6(1)(f) GDPR).
- To make changes traceable - the change log on each lead. Legal basis: Hoppe Marine's legitimate interest in being able to clarify who changed a follow-up and when (Art. 6(1)(f) GDPR).
- To run securely - server logs, to investigate faults and misuse. Legal basis: Hoppe Marine's legitimate interest in IT security (Art. 6(1)(f) GDPR) and its duty to secure processing (Art. 32 GDPR).
- To evaluate a trade show - lead reports, including how many leads each team member recorded. Legal basis: Hoppe Marine's legitimate interest in assessing and planning its trade show presence (Art. 6(1)(f) GDPR).
The app makes no automated decisions about you and does no profiling.
4. Who receives your data
- Other users of the app. Every signed-in colleague can read every lead and feedback answer, including your name on them and the change logs. Administrators and event managers also see the user list with e-mail addresses and roles.
- Amazon Web Services (Amazon Web Services EMEA SARL, Luxembourg) runs the app's servers, storage, sign-in service (Amazon Cognito), e-mail delivery (Amazon SES) and server logs (Amazon CloudWatch) for Hoppe Marine as a processor under a data processing agreement (Art. 28 GDPR).
The data is stored in the EU (AWS region Ireland). It is transmitted encrypted (HTTPS) and stored encrypted (AES-256); the keys are managed by AWS. AWS states that it does not access or use customer content without the customer's agreement and discloses it only where the law or a binding official order requires it (aws.amazon.com/compliance/data-privacy-faq). As AWS belongs to a US group, access from the USA cannot be ruled out; such transfers are covered by the EU-U.S. Data Privacy Framework, under which Amazon Web Services, Inc. is certified, and by the EU standard contractual clauses in the data processing agreement (Art. 45 and 46 GDPR).
5. How long this app keeps it
- Your account and user list entry: as long as you need access to the app; it is deleted when it is no longer needed, for example when you leave the company.
- Your name and e-mail address on leads, feedback answers and change logs: as long as the lead itself - deleted automatically 36 months after the last day of the trade show. They stay on leads after your account is deleted, because they record who did the work.
- Reports: deleted automatically 90 days after they were made.
- Server logs: 90 days.
- Sessions: 12 hours, held only in the server's memory.
- Technical backup copies of deleted data are removed within a further 90 days.
- Copies made outside the app - Excel exports, printed reports - are deleted as soon as they are no longer needed for their purpose.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Hoppe Marine's legitimate interest (Art. 21). Contact the data protection officer named in section 1, or tell any colleague. You also have the right to complain to a data protection supervisory authority - for Hoppe Marine that is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Strasse 22, 20459 Hamburg - or with the authority where you live or work.
7. Is providing the data required?
An account with your business e-mail address is needed to use the app. The other records arise from using it; without them the app cannot show who is responsible for a lead or keep itself secure.