THE EUROPEAN-MEDITERRANEAN EARTHQUAKE CATALOGUE

 

Data Protection Declaration

The GFZ Helmholtz Centre for Geosciences takes the protection of personal data very seriously. The GFZ Helmholtz Centre for Geosciences is bound to protect the privacy of everyone who uses its website and to treat any personal data provided in the strictest confidence. This data is used solely for the purposes indicated in each case and is not forwarded to any third party.

I. Name and address of controller

The data controller as defined in the General Data Protection Regulation, the national data protection laws of other EU member states, and other data protection regulations is:
GFZ Helmholtz Centre for Geosciences
Telegrafenberg
14473 Potsdam
Tel.: +49 331 6264 0
Website: www.gfz.de

II. Name and address of data protection officer

The controllers data protection officer is:
Eva Grübel-Hoffmann GFZ Helmholtz Centre for Geosciences
Telegrafenberg
14473 Potsdam
Tel.: +49 351 30 711 875
E-Mail: datenschutz@gfz.de

III. General information on data processing


1. Scope of personal data processing
In general, the GFZ Helmholtz Centre for Geosciences only processes personal data collected from users insofar as this is necessary to provide a functional website with the relevant content and services. As a rule, personal data provided by users is only processed with the respective user's consent. Exceptions apply in cases where the user’s prior consent cannot be obtained on factual grounds and statutory regulations permit the processing of personal data.

IV. Web analysis by goaccess


1. Scope of personal data processing
This page uses the open-source software tool goaccess to analyse the browsing behaviour of its website users. The following data is stored whenever individual pages on the website are accessed:

  1. the date and time of the request
  2. the country of the request

The software runs solely on the website servers. This is the only place where the user's personal data is stored.

2. Legal basis for the processing of personal data
The legal basis for the processing of the users personal data is Art. 6 no. 1 lit. f GDPR.

3. Purpose of data processing
Processing personal data enables us to analyse the browsing behaviour of our users. Evaluations of the data collected allow to compile information about the use of individual components on the website. This helps us to continue improving our website and make it more user-friendly. These purposes also constitute our legitimate interest in processing the data pursuant to Art. 6 no. 1 lit. f GDPR.

4. Storage period
The data is erased as soon as we no longer need it for recording purposes.

5. Right to object and right to erasure
Detailed information about goaccess privacy settings is available at the following link: https://goaccess.io




VI. Rights of the data subject

Whenever personal data is processed, the data subject defined in GDPR has the following rights vis-à-vis the data controller:

1. Right to information
Data subjects (users) can request the GFZ Helmholtz Centre for Geosciences controller to confirm whether or not the GFZ Helmholtz Centre for Geosciences is processing their personal data.
If this is the case, data subjects are entitled to request the following information from the GFZ Helmholtz Centre for Geosciences controller:

  1. the purposes for which the personal data is being processed;
  2. the recipient or category of recipient to whom your personal data has been or is to be disclosed;
  3. the period for which your personal data will be stored, or, if no specific information can be provided, the criteria used to determine that period;
  4. the existence of a right to request the controller to rectify or erase your personal data, to restrict the controller’s processing of your personal data, or to object to such processing
  5. the existence of a right to complain to a supervisory authority;;
  6. where the personal data is not collected from the data subject, any available information as to its source.

2. Right to rectification
Data subjects have the right to request the GFZ Helmholtz Centre for Geosciences controller to rectify and/or complete their personal data insofar as that of their personal data being processed is incorrect or incomplete. In such cases, the GFZ Helmholtz Centre for Geosciences controller must rectify the data immediately.

3. Right to restriction of processing
Data subjects are entitled to request restrictions on the processing of their personal data in the following circumstances:

  1. if the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data;
  2. if the controller no longer needs the personal data for the purposes for which it was processed but it is still required by the data subject for the establishment, exercise, or defence of legal claims;
  3. if the data subject has objected to the processing of his/her data pursuant to Article 21 no. 1 GDPR and it has not yet been established whether the legitimate grounds of the GFZ override those of the data subject.

If the processing of the data subject’s personal data has been restricted, this data may – with the exception of storage – only be processed with the data subject’s consent, or to establish, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest within the EU or an EU member state.
A data subject who has obtained restriction of processing under the conditions specified above must be informed by the GFZ’s data controller before the restriction of processing is lifted.



4. Right to erasure
a) Erasure obligation
The data subject may request the controller to erase his/her personal data without delay, in which case the controller is obliged to erase the data without delay where one of the following grounds applies:

  1. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. The data subject withdraws the consent on which the processing is based pursuant to Art. 6 no. 1 lit. a or Art. 9 no. 2 lit. a GDPR, and there are no other legal grounds for the processing.
  3. The data subject objects to the processing of his/her data pursuant to Art. 21 no. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing of his/her data pursuant to Art. 21 no. 2 GDPR.
  4. The user's personal data was processed unlawfully.
  5. The personal data has to be erased for compliance with a legal obligation in EU or member state law to which the controller is subject.

b) Information to third parties
If the GFZ’s controller has made the data subject’s personal data public and is obliged pursuant to Art. 17 no. 1 GDPR to erase it, the controller, taking account of the technology available and the cost of implementation, must take reasonable steps, including technical measures, to inform controllers who are processing the personal data that the data subject has requested the erasure of any links to, or copy or replication of, his/her personal data

c) Exceptions
No right of erasure exists if the data has to be processed

  1. to exercise a right to freedom of speech and information;.
  2. for compliance with a legal obligation according to which processing is required by EU or member state law to which the controller is subject, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health pursuant to Art. 9 no. 2 lit. h, i and Art. 9 no. 3 GDPR;
  4. for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 no. 1 GDPR, insofar as the right referred to in point a is likely to render impossible or seriously impair the achievement of the objectives of the processing; or
  5. for the establishment, exercise, or defence of legal claims.


5. Right to notification
If the data subject exercises his/her right to rectification or erasure of personal data or restriction of processing, the controller is obliged to communicate this to all recipients to whom the personal data has been disclosed unless this proves impossible or involves disproportionate effort.
The GFZ Helmholtz Centre for Geosciences controller is obliged to inform the data subject about these recipients if so requested.

6. Right to object
The data subject has the right to object at any time, on grounds relating to his/her particular situation, to any processing of his/her personal data effected on the basis of Art. 6 no. 1 lit. e or f GDPR.
If this right is exercised, the GFZ Helmholtz Centre for Geosciences controller will cease processing this personal data unless he/she can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or if the data has to be processed for the establishment, exercise, or defence of legal claims.

7. Right to revoke the declaration of consent provided in compliance with data protection legislation
The data subject has the right to withdraw his/her consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing effected on the basis of the data subject’s consent before its withdrawal.

8. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the member state of his/her habitual residence, place of work, or place of the alleged violation, if the data subject considers that the processing of his/her personal data violates the GDPR.