The data controller in the sense the European Union General Data Protection Regulation (EU GDPR) and other national data protection acts:
Ruhr University Bochum
Phone: +49 234 32 201
Fax: +49 234 32 14201
Department of Geography
Ruhr University Bochum
Ruhr University Bochum
Dr. Kai-Uwe Loser
Controller for data protection
Phone: +49 234 32 28720
Personal data is only acquired and used when necessary to provide a functioning website and when required by our contents and services. Collecting and use of personal data only occurs with agreement by the user. Exceptions apply in those cases where a previous seeking of the agreement is impossible, or the processing of data is permitted by law.
If we are seeking the agreement to process personal data from the user, the corresponding legal basis is Art. 6 Section 1a EU GDPR.
If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the corresponding legal basis is Art. 6 Section 1e EU GDPR.
Personal data of the user is deleted or blocked when the purpose of storage is no more applicable. Storage can occur beyond that when this is provided for by European or national legislators in orders, laws, or other regulations to which the person responsible is bound to. A blocking or deletion can also occur when a storage period, implemented by the listed legislation, expires. Exception can be when the personal data is necessary to fulfil contract conclusion or performance of a contract.
When using the Local Climate Zone (LCZ) Generator, data and information of the computer system of the computer used is automatically acquired.
The following data is acquired:
The data is saved in logfiles on our system. The data is not saved in combination with other personal data of the user and will be deleted after seven days.
The temporary storage of the IP address is necessary to enable the provision of the website for the user. The IP address is saved for the duration of the website access.
Logfiles are saved to ensure operability of the website. Furthermore, the data serves to optimise the website and to ensure safety of our IT systems. There is no evaluation for marketing.
Legal basis is Art. 6 Section 1e EU GDPR.
Personal data of the user is deleted or blocked when the purpose of storage is no more applicable. In the case of data acquisition for the provision of the website, data is deleted when access ends. In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses are anonymized by deleting the last octet, so that an identification of you is no longer possible.
The acquisition of data for the provision of the website and the storage of data in logfiles is necessary for the operation of the website. Therefore, there is no possibility for the user to object.
The LCZ Generator uses a session cookie. Information of the website are saved on the accessing device. The cookie contains a series of symbols and numbers which allows the identification of the browser when the website is visited again within the same session.
The cookie creates a random ID which is saved on the accessing device and is deleted when the browser is closed.
The purpose of the session cookie is to recognise the user when changing the website. The cookie is only used to remember filled-in fields in the submission mask of the LCZ Generator in case the submission fails.
Legal basis is Art. 6 Section 1e EU GDPR.
Session cookies are saved on the accessing device during the current session. Session cookies are deleted when the browser is closed.
The LCZ Generator Submission Mask is used to upload “Training Areas” to create a LCZ map of the corresponding area. When using the Submission Mask, all data from the Submission Mask is saved and processed:
We seek for your consent for the processing of the data when submitting the Training Areas. This Privacy Note applies.
The data is saved and processed to create and disseminate the created LCZ map. The LCZ map will be send to the given e-mail address and the map can be accessed over the LCZ Generator. Personal data are processed to distinguish between different Training Area versions, geographical extends, and creators, and to give credit to the author of the Training Areas. The name is hidden in the download table and the corresponding factsheet of each dataset if the user does not explicitly consent to show it during the submission of the Training Area data. E-mail addresses will neither be shown in the download table nor in the factsheet.
Legal basis is Art. 6 Section 1a EU GDPR.
Personal data of the user is deleted or blocked when the purpose of storage is no more applicable or if the user revokes the consent to process and store the personal data. Personal data are stored to ensure long-term identification of the author of the Training Areas, which is essential for scientific applications and correct author attribution.
At any time the user has the possibility to revoke the consent to the processing of personal data. In this case the LCZ map and its corresponding “Factsheet” for the submitted city will be anonymised, i.e., name and e-mail address will be removed. Data and Factsheets that have already been downloaded by external users cannot be changed.
When your personal data is processed, you are considered a person affected in the sense of EU GDPR and have the following rights:
You can demand a confirmation of the person responsible whether your personal data is processed.
If your personal data is processed, you can demand information on which personal data is processed and:
You have the right to demand information on whether your personal data is conveyed to a third country or an international organisation. In this case you can demand information on the applicable guarantees in accordance with Art. 46 EU GDPR in context of data transmission.
You have the right to rectification and/or completion towards the person responsible if your processed personal data is wrong or incomplete. The person responsible must carry out the rectification immediately.
You have the right to obtain from the person responsible restriction of processing where one of the following applies:
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
You shall be informed by the person responsible before the restriction of processing is lifted when you have obtained restriction of processing.
You have the right to obtain from the person responsible the erasure of personal data without undue delay and the person responsible shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
Where the person responsible has made the personal data public and is obliged to erase the personal data, the person responsible, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Exceptions apply to the extent that processing is necessary:
The person responsible shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Art. 16, 17(1) and 18 EU GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The person responsible shall inform you about those recipients if the you request it.
You have the right to receive your personal data, which you have provided to a person responsible, in a structured, commonly used and machine-readable format and have the right to transmit those data to another person responsible without hindrance from the person responsible to which the personal data have been provided, where:
In exercising your right to data portability pursuant to Art. 20 Section 1 EU GDPR, you have the right to have the personal data transmitted directly from one person responsible to another, where technically feasible.
The exercise of the right referred to in Art. 20 Section 1 EU GDPR shall be without prejudice to Art. 17 EU GDPR. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible.
The right referred to in Art. 20 Section 1 EU GDPR shall not adversely affect the rights and freedoms of others.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 Section 1e or f EU GDPR, including profiling based on those provisions. The person responsible shall no longer process the personal data unless the person responsible demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 Section 1 EU GDPR, you, on grounds relating to your particular situation, have the right to object to processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the lawfulness of the previous processing of your personal data which you have given consent to.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the EU GDPR.
The supervisory authority of the data controller is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, https://www.ldi.nrw.de).
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 EU GDPR.