Privacy Note

Name and address of the data controller

The data controller in the sense the European Union General Data Protection Regulation (EU GDPR) and other national data protection acts:

Executing authority

Name and address of the data protection officer

General information on data processing

Scope of processing of personal data

Personal data is only acquired and used when necessary to provide a functioning website and when required by our contents and services. Collecting and use of personal data only occurs with agreement by the user. Exceptions apply in those cases where a previous seeking of the agreement is impossible, or the processing of data is permitted by law.

Legal basis for the processing of personal data

If we are seeking the agreement to process personal data from the user, the corresponding legal basis is Art. 6 Section 1a EU GDPR.

If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the corresponding legal basis is Art. 6 Section 1e EU GDPR.

Data deletion and storage duration

Personal data of the user is deleted or blocked when the purpose of storage is no more applicable. Storage can occur beyond that when this is provided for by European or national legislators in orders, laws, or other regulations to which the person responsible is bound to. A blocking or deletion can also occur when a storage period, implemented by the listed legislation, expires. Exception can be when the personal data is necessary to fulfil contract conclusion or performance of a contract.

Provision of the website and logfile creation

Description and scope of personal data processing

When using the Local Climate Zone (LCZ) Generator, data and information of the computer system of the computer used is automatically acquired.

The following data is acquired:

The data is saved in logfiles on our system. The data is not saved in combination with other personal data of the user and will be deleted after seven days.

Purpose of data processing and legal basis

The temporary storage of the IP address is necessary to enable the provision of the website for the user. The IP address is saved for the duration of the website access.

Logfiles are saved to ensure operability of the website. Furthermore, the data serves to optimise the website and to ensure safety of our IT systems. There is no evaluation for marketing.

Legal basis is Art. 6 Section 1e EU GDPR.

Duration of storage

Personal data of the user is deleted or blocked when the purpose of storage is no more applicable. In the case of data acquisition for the provision of the website, data is deleted when access ends. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last octet, so that an identification of you is no longer possible.

Objection and disposal possibilities

The acquisition of data for the provision of the website and the storage of data in logfiles is necessary for the operation of the website. Therefore, there is no possibility for the user to object.

Use of cookies

Description and scope of personal data processing

The LCZ Generator uses a session cookie. Information of the website are saved on the accessing device. The cookie contains a series of symbols and numbers which allows the identification of the browser when the website is visited again within the same session.

The cookie creates a random ID which is saved on the accessing device and is deleted when the browser is closed.

Purpose of data processing and legal basis

The purpose of the session cookie is to recognise the user when changing the website. The cookie is only used to remember filled-in fields in the submission mask of the LCZ Generator in case the submission fails.

Legal basis is Art. 6 Section 1e EU GDPR.

Duration of Storage

Session cookies are saved on the accessing device during the current session. Session cookies are deleted when the browser is closed.

LCZ Submission Mask

Description and scope of personal data processing

The LCZ Generator Submission Mask is used to upload “Training Areas” to create a LCZ map of the corresponding area. When using the Submission Mask, all data from the Submission Mask is saved and processed:

We seek for your consent for the processing of the data when submitting the Training Areas. This Privacy Note applies.

Purpose of data processing and legal basis

The data is saved and processed to create and disseminate the created LCZ map. The LCZ map will be send to the given e-mail address and the map can be accessed over the LCZ Generator. Personal data are processed to distinguish between different Training Area versions, geographical extends, and creators, and to give credit to the author of the Training Areas. The name is hidden in the download table and the corresponding factsheet of each dataset if the user does not explicitly consent to show it during the submission of the Training Area data. E-mail addresses will neither be shown in the download table nor in the factsheet.

Legal basis is Art. 6 Section 1a EU GDPR.

Storage duration

Personal data of the user is deleted or blocked when the purpose of storage is no more applicable or if the user revokes the consent to process and store the personal data. Personal data are stored to ensure long-term identification of the author of the Training Areas, which is essential for scientific applications and correct author attribution.

Objection and disposal possibilities

At any time the user has the possibility to revoke the consent to the processing of personal data. In this case the LCZ map and its corresponding “Factsheet” for the submitted city will be anonymised, i.e., name and e-mail address will be removed. Data and Factsheets that have already been downloaded by external users cannot be changed.

Rights of the person affected

When your personal data is processed, you are considered a person affected in the sense of EU GDPR and have the following rights:

Right to information

You can demand a confirmation of the person responsible whether your personal data is processed.

If your personal data is processed, you can demand information on which personal data is processed and:

You have the right to demand information on whether your personal data is conveyed to a third country or an international organisation. In this case you can demand information on the applicable guarantees in accordance with Art. 46 EU GDPR in context of data transmission.

Right to rectification

You have the right to rectification and/or completion towards the person responsible if your processed personal data is wrong or incomplete. The person responsible must carry out the rectification immediately.

Right to restriction of processing

You have the right to obtain from the person responsible restriction of processing where one of the following applies:

  1. the accuracy of the personal data is contested by you, for a period enabling the person responsible to verify the accuracy of the personal data
  2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
  3. the person responsible no longer needs the personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of legal claims
  4. you have objected to processing pursuant to Art. 21 Section 1 EU GDPR pending the verification whether the legitimate grounds of the person responsible override those of the you.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

You shall be informed by the person responsible before the restriction of processing is lifted when you have obtained restriction of processing.

Right of erasure

You have the right to obtain from the person responsible the erasure of personal data without undue delay and the person responsible shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

  1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  2. you withdraw consent on which the processing is based according to Art. 6 Section 1a EU GDPR, or Art. 9 Section 2a EU GDPR, and where there is no other legal ground for the processing
  3. you object to the processing pursuant to Art. 21 Section 1 EU GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Section 2 EU GDPR
  4. the personal data have been unlawfully processed
  5. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the person responsible is subject
  6. the personal data have been collected in relation to the offer of information society services referred to in Art. 8 Section 1 EU GDPR.

Where the person responsible has made the personal data public and is obliged to erase the personal data, the person responsible, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Exceptions apply to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which the person responsible is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible
  3. for reasons of public interest in the area of public health in accordance with Art. 9 Section 2h and 2i EU GDPR as well as Art. 9 Section 3 EU GDPR
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 Section 1 EU GDPR in so far as the right of erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise or defence of legal claims.

Notification obligation regarding rectification or erasure of personal data or restriction of processing

The person responsible shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Art. 16, 17(1) and 18 EU GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The person responsible shall inform you about those recipients if the you request it.

Right to data portability

You have the right to receive your personal data, which you have provided to a person responsible, in a structured, commonly used and machine-readable format and have the right to transmit those data to another person responsible without hindrance from the person responsible to which the personal data have been provided, where:

  1. the processing is based on consent pursuant to Art. 6 Section 1a or Art. 9 Section 2a EU GDPR or on a contract pursuant to Art. 6 Section 1b EU GDPR and
  2. the processing is carried out by automated means.

In exercising your right to data portability pursuant to Art. 20 Section 1 EU GDPR, you have the right to have the personal data transmitted directly from one person responsible to another, where technically feasible.

The exercise of the right referred to in Art. 20 Section 1 EU GDPR shall be without prejudice to Art. 17 EU GDPR. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible.

The right referred to in Art. 20 Section 1 EU GDPR shall not adversely affect the rights and freedoms of others.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 Section 1e or f EU GDPR, including profiling based on those provisions. The person responsible shall no longer process the personal data unless the person responsible demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 Section 1 EU GDPR, you, on grounds relating to your particular situation, have the right to object to processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Right to revocation of data protection consent

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the lawfulness of the previous processing of your personal data which you have given consent to.

Automated individual decision-making, including profiling

Not applicable

Right to complaint at a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the EU GDPR.

The supervisory authority of the data controller is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, https://www.ldi.nrw.de).

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 EU GDPR.

Privacy Note
Terms of Service
RUB Climatology
WUDAPT
Twitter
Create issue on Github