Source: https://events.gfz-potsdam.de/euro-2019/data-protection/
Timestamp: 2019-04-19 07:18:43+00:00

Document:
The GFZ takes the protection of personal data very seriously. The GFZ is bound to protect the privacy of everyone who uses its website and to treat any personal data provided in the strictest confidence. This data is used solely for the purposes indicated in each case and is not forwarded to any third party.
In general, the GFZ only processes personal data collected from users insofar as this is necessary to provide a functional website with the relevant content and services. As a rule, personal data provided by users is only processed with the respective user's consent. Exceptions apply in cases where the user's prior consent cannot be obtained on factual grounds and statutory regulations permit the processing of personal data.
Art. 6 no. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis when the GFZ obtains a data subject's consent to the processing of his/her personal data.
Art. 6 no. 1 lit. b GDPR serves as the legal basis when processing personal data for the performance of a contract to which the data subject is a party. The same applies to any processing measures that are required if steps are to be taken before entering into a contract.
Art. 6 no. 1 lit. c GDPR serves as the legal basis when the processing of personal data is necessary for compliance with a legal obligation to which the GFZ is subject.
Art. 6 no. 1 lit. f GDPR serves as the legal basis when processing is necessary to safeguard the legitimate interests of the GFZ or a third party, and provided these legitimate interests are not outweighed by the data subject's interests and fundamental rights and freedoms.
The data subject's personal data is erased or blocked as soon as the purpose for which it was stored ceases to apply. Personal data may also be stored if so specified by European or national legislators in EU regulations, laws or other provisions to which the data controller is subject. In such instances, personal data is blocked or erased when a retention period specified in any of the above-named legislation expires, unless it has to be retained for longer in order to conclude or execute a contract.
Every time our website is accessed, our system automatically collects data and information from the accessing computer system.
This data is also stored in our system's log files. However, it is not stored together with other personal data collected from the user.
The legal basis for the temporary storage of this data is Art. 6 no. 1 lit. f GDPR.
This data is used to optimise website use, correct errors, and safeguard the security of our information technology systems. Data collected in this context is not evaluated for marketing purposes.
The above-named purposes also constitute the GFZ's legitimate interest in processing the data pursuant to Art. 6 no. 1 lit. f GDPR.
The data is erased as soon as it is no longer required to fulfil the purpose for which it was collected. Log files are deleted within 7 days maximum.
The collection of data for website provision and the storage of data in log files are absolutely essential to the operation of the website. The user is therefore unable to assert any right to object in this context.
When accessing the GFZ website, an info banner informs users that cookies are being used for analytical purposes and refers them to this data protection declaration. In this context, users are also informed how the storage of cookies can be prevented by changing the browser settings.
The legal basis for the processing of personal data using cookies is Art. 6 no. 1 lit. f GDPR.
The use of technically necessary cookies is intended to simplify website use. Some of the functions on our website cannot be provided unless cookies are enabled. In these cases, it is essential that the browser is also recognised after accessing another page.
The user data collected by these technically necessary cookies is not used to generate user profiles.
The GFZ website contains a contact form that can be used to contact the GFZ electronically. If a user makes use of this function, the data entered into the form is sent to the GFZ and stored. If you wish to use this contact form, we need your name and e-mail address. Other information such as telephone numbers can be provided, but this is not essential.
Alternatively, you can contact us using the e-mail address provided. In this case, the personal data transmitted with the user's e-mail is stored.
Data collected in this context is not forwarded to any third parties. It is used solely to process the correspondence.
Art. 6 no. 1 lit. a GDPR serves as the legal basis for processing data when the user's consent has been obtained. The legal basis for processing data transmitted when sending an e-mail is Art. 6 par. 1 lit. f GDPR. If an e-mail is sent with the intention of concluding a contract, Art. 6 no. 1 lit. b GDPR constitutes an additional legal basis for the processing of this data.
Personal data entered into the input mask is processed solely for the purpose of dealing with the correspondence with the user. This also constitutes the necessary legitimate interest in processing the data collected when contact is made by e-mail.
The other personal data processed during the transmission process (see IV. 1. Information in the web server's log files) serves to prevent improper use of the contact form and safeguard the security of the information technology systems.
The data is erased as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of personal data entered into the contact form's input mask and personal data sent by e-mail, this is the case when the correspondence with the user is terminated. The correspondence is deemed to have been terminated when it can be inferred from the circumstances that the facts in question have been clarified once and for all.
The user has the right to withdraw his/her consent to the processing of personal data at any time. If the user contacts us by e-mail, he/she can object to the storage of his/her personal data at any time. It will no longer be possible to continue the correspondence in such a case.
In this instance, all personal data stored during the correspondence will be erased.
Data subjects (users) can request the GFZ's controller to confirm whether or not the GFZ is processing their personal data.
where the personal data is not collected from the data subject, any available information as to its source.
Data subjects have the right to request the GFZ's controller to rectify and/or complete their personal data insofar as that of their personal data being processed is incorrect or incomplete. In such cases, the GFZ's controller must rectify the data immediately.
if the data subject has objected to the processing of his/her data pursuant to Article 21 no. 1 GDPR and it has not yet been established whether the legitimate grounds of the GFZ override those of the data subject.
If the processing of the data subject's personal data has been restricted, this data may - with the exception of storage - only be processed with the data subject's consent, or to establish, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest within the EU or an EU member state.
A data subject who has obtained restriction of processing under the conditions specified above must be informed by the GFZ's data controller before the restriction of processing is lifted.
The data subject withdraws the consent on which the processing is based pursuant to Art. 6 no. 1 lit. a or Art. 9 no. 2 lit. a GDPR, and there are no other legal grounds for the processing.
The data subject objects to the processing of his/her data pursuant to Art. 21 no. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing of his her data pursuant to Art. 21 no. 2 GDPR.
The user's personal data was processed unlawfully.
The personal data has to be erased for compliance with a legal obligation in EU or member state law to which the controller is subject.
for the establishment, exercise, or defence of legal claims.
If the data subject exercises his/her right to rectification or erasure of personal data or restriction of processing, the controller is obliged to communicate this to all recipients to whom the personal data has been disclosed unless this proves impossible or involves disproportionate effort.
The GFZ's controller is obliged to inform the data subject about these recipients if so requested.
The data subject has the right to object at any time, on grounds relating to his/her particular situation, to any processing of his/her personal data effected on the basis of Art. 6 no. 1 lit. e or f GDPR.
If this right is exercised, the GFZ's controller will cease processing this personal data unless he/she can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or if the data has to be processed for the establishment, exercise, or defence of legal claims.
The data subject has the right to withdraw his/her consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing effected on the basis of the data subject's consent before its withdrawal.
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the member state of his/her habitual residence, place of work, or place of the alleged violation, if the data subject considers that the processing of his/her personal data violates the GDPR.

References: Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 6