We wish to point out that transmitting data on the Internet (e.g. when communicating by e-mail) can be subject to security vulnerabilities. It is not possible to completely protect the data from access by third parties.
The use of the contact details published in the framework of the duty to provide a legal notice for the transmission of unsolicited advertising and information materials is hereby expressly excluded. The operators of the website expressly reserve the right to take legal action in case of unsolicited advertising information being sent, such as spam e-mails.
I. Name and address of the responsible body
The responsible body for data processing within the framework of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other provisions of data protection is the:
University Association for Geography Didactics (HGD)
c/o Universität Duisburg-Essen
Faculty of Humanities
Institute for Geography/ Institute for Sachunterricht
II. General notice about data processing
1. Scope of processing personal data
We process personal data of our users only to the extent that is necessary for the provision of a functioning website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.
2. Legal basis for processing personal data
Insofar as we obtain consent from the persons whose personal data is to be processed, Article 6(1) of the GDPR serves as the legal basis. The processing of these data takes place on the basis of point (b) of Article 6(1) GDPR where your enquiry relates to the performance of a contract or to a pre-contractual measure.
If the processing of personal data is necessary to fulfil a legal obligation to which our association is subject, point (c) of Article 6(1) GDPR serves as the legal basis.
In the event that vital interests of the data subject (the person concerned) or those of another natural person necessitate the processing of personal data, point (d) of Article 6(1) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our association or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, point (f) of Article 6(1) GDPR serves as the legal basis for the processing.
3. Data erasure and duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage has been fulfilled. In addition, the data may be stored if the European or national legislator has provided for this in in accordance with the regulations of the Union, laws or other provisions to which the responsible body is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary to continue to store the data for the closing or performance of a contract.
III. Delivery of the website and creation of log files
1. Data processing on behalf of a controller
2. Description and scope of data processing
Each time you access our website, our system automatically collects data and information from the computer system of the computer from which our website is accessed.
The following data are collected:
- Information about the browser type and the version used
- The user’s operating system
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the user’s system accesses our website
The data are also stored in the log files by the contractual partner as described in IV (1). These data are not stored together with other personal data of the user.
3. Legal basis for data processing
The legal basis for the temporary storage of data and log files is point (f) of Article 6(1) GDPR.
4. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing according to point (f) of Article 6(1) GDPR.
5. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of collection of data necessary for the delivery of the the website, this is the case when the session in question has ended.
If the data is stored in log files, this is the case after seven days at the latest. A storage going beyond this is possible. In this case the IP addresses of the users are deleted or encrypted, so that it is no longer possible to assign the client to our website.
6. Options for objection and removal:
The collection of data for the delivery of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.
- a) Description and scope of data processing
The following data are stored and transmitted in the cookies:
- Language settings
The user data collected in this way is subject to pseudonymisation by technological means. It is therefore no longer possible to assign the data to the accessing user. The data are not stored together with other personal data of the user.
- b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is point (f) of Art. 6(1) GDPR.
- c) Purpose of data processing
We need cookies for the following applications:
- Adoption of language settings
The user data collected by cookies that are technically necessary are not used to create user profiles.
These purposes also include our legitimate interest in the processing of personal data in accordance with point (f) of Article 6(1) GDPR.
- d) Duration of storage, options for objection and removal
1. Description and scope of data processing
You can subscribe to a free newsletter on our website. For this it is necessary that the user sends an e-mail with the request for inclusion in the newsletter to the contact e-mail address of the HGD. When registering for the newsletter, the data provided by the user in the e-mail will be transmitted to us.
In addition to the e-mail address of the sender, the following data are also collected during registration:
- IP address of the accessing computer
- Date and time of transmission
No data will be passed on to third parties in connection with data processed for the sending out of newsletters. The data will be used exclusively for the sending out of the newsletter.
2. Legal basis for data processing
The legal basis for the processing of data after registration for the newsletter is point (a) of Article 6(1) GDPR if the user has given his or her consent.
3. Purpose of data processing
The collection of the user’s e-mail address serves the purpose of delivering the newsletter.
4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user’s e-mail address will therefore be stored as long as the newsletter subscription is active.
5. Options for objection and removal
The subscription to the newsletter can be terminated by the user concerned at any time by sending us a written declaration of intent to the e-mail address provided on the website.
VI. Contact forms und E-mail
1. Description and scope of data processing
A contact form is available on our website, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:
- Name of the user
- E-mail address of the user
- Message from the user
- Date the e-mail was sent
At the time the message is sent, the following data will also be stored:
- The IP address of the user
- Date and time of registration
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data of the user that is transmitted with the e-mail will be stored.
The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.
2. Legal basis for data processing
The legal basis for the processing of the data is point (a) of Article 6(1) GDPR if the user has given his or her consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is point (f) of Article 6(1) GDPR if. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is point (b) of Article 6(1) GDPR.
3. Purpose of data processing
The processing of the personal data from the input mask serves exclusively the purpose of establishing contact. If you contact us by e-mail, this is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is considered to have ended when it can be inferred from the circumstances that the relevant facts have been clarified conclusively.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Options for objection and removal
At any given time the user has the option to withdraw his or her consent to the processing of personal data. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data that was stored in the process of having contacted us will be deleted.
VII. Rights of the data subject
The following list includes all rights of the the data subject under the GDPR. Rights which are not relevant for this website do not have to be mentioned. In this respect, the list can be shortened.
If your personal data is processed by us, you are the person concerned (data subject) in terms of the meaning described in the GDPR and you are entitled to the following rights vis-à-vis the person or body responsible:
1. Right of access
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:
(1) the purposes of the processing;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisation;
(4) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data are not collected from the data subject, any available information as to their source;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organisation, the data subject has the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
2. Right to rectification
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed.
3. Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or
(4) you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override yours.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing according to the above stated conditions, you will be informed by the controller before the restriction of processing is lifted.
4. Right to erasure
a) Obligation to erase
You may request the data controller to delete your personal data and the data controller is obliged to delete this data immediately on one of the following grounds:
(1) Your personal data is no longer necessary for the purpose for which they were originally collected or processed.
(2) You withdraw your consent on which the processing pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR was based and there is no other legal ground for the processing.
(3) You object to the processing pursuant to Article 21(1) DGPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
(4) Your personal data have been unlawfully processed.
(5) The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;.
(6) Your personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
b) Information to third parties
Where the controller has made the personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure shall not apply to the extent that processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, insofar as the law referred to under section a) is likely to render impossible or seriously impair the achievement of that processing; or
(5) for the establishment, exercise or defence of legal claims.
5. Right to be informed
If you have exercised your right to rectify, erase or restrict the processing of your personal data, the controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform you about those recipients if you request it.
6. Right to data portability
You have the right to receive your personal data, which you have provided to a controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
(1) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) GDPR and
(2) the processing is carried out by automated means.
In exercising this right you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible.This right shall not adversely affect the rights and freedoms of others.
The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
You have the the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions shall not be based on special categories of personal data referred to in Article 9(1), unless point (a) or (g) of Article 9(2) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
Liability for content
As a service provider, we are responsible according to § 7 para.1 of the German Telemedia Act (TMG) for our own content on these pages according to the general laws. According to §§ 8 to 10 of the TMG, however, we as a service provider are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general law remain unaffected. A liability in this regard, however, is only possible from the date of knowledge of a specific infringement. Upon notification of appropriate violations, we will remove this content immediately.
Liability for links
Our internet offer contains links to external websites of third parties over whose contents we have no influence. We cannot, therefore, assume any liability for these external contents. The provider or operator of the respective pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognisable at the time of linking. However, permanently checking the contents of the linked pages is not reasonable without concrete evidence of an infringement. Upon notification of violations, we will remove such links immediately.
The created content and work on these pages are subject to German copyright law. The reproduction, processing, distribution and any form of exploitation outside the limits of copyright require the written consent of the respective author or creator. Downloads and copies of this site are permitted for private, non-commercial use only. Wherever the contents of this site were not created by the operator, the copyrights of third parties are observed. In particular, content provided by third parties is marked as such. If you nevertheless become aware of a copyright infringement, we ask you to advise us accordingly. Upon notification of violations, we will remove such content immediately.