Privacy Policy
We are committed to safeguarding personal data in strict compliance with the European General Data Protection Regulation (GDPR) and applicable German statutory data protection legislation (§ 19 DDG).
The use of the Internet pages of the ESSCA-DC is generally possible without any indication of personal data. However, if a data subject wishes to use specialized services via our website, processing of personal data could become necessary. If processing is necessary and no statutory basis exists, we obtain explicit consent from the data subject.
As the controller, the ESSCA-DC has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Internet-based transmissions may theoretically exhibit security gaps, which is why data subjects are free to convey information through alternative channels (e.g. by telephone or postal mail).
This privacy declaration uses standard terminology established by the European legislator:
- Personal data: Any information relating to an identified or identifiable natural person (“data subject”).
- Data subject: Any identified or identifiable natural person whose personal data is processed by the controller.
- Processing: Any operation performed on personal data, whether automated or manual, including collection, recording, structuring, storage, retrieval, disclosure, or erasure.
- Restriction of processing: Marking stored personal data to limit its future processing.
- Controller: The natural or legal person that determines the purposes and means of processing personal data.
- Processor: A natural or legal person processing personal data on behalf of the controller.
- Recipient: A natural or legal person, public authority, or agency to which personal data are disclosed.
The controller for the purposes of the GDPR and other applicable data protection provisions is:
European Surveillance System on Contact Allergies (ESSCA)
A working group of the European Society of Contact Dermatitis (ESCD) e.V.
Voßstraße 2, 69115 Heidelberg, Germany
Phone: +49 9131 85-22750
Email: wolfgang.uter@fau.de
Website: www.essca-dc.org
When calling up the website, server log files automatically record general technical information transmitted by your browser:
- Browser type and version
- Operating system used by the accessing terminal
- Referrer URL (previously visited website)
- Sub-pages accessed on our website
- Date and time of server request
- IP address and accessing Internet Service Provider (ISP)
These logs are processed solely to ensure uninterrupted delivery of website content, optimize IT system administration, and support authorities in the event of cyberattacks (Art. 6(1)(f) GDPR). Server logs are stored separately from any personal data provided by a user.
Under the European General Data Protection Regulation, you are entitled to the following statutory rights:
- Right of Confirmation (Art. 15 GDPR): Confirm whether personal data concerning you is being processed.
- Right of Access (Art. 15 GDPR): Receive free information and copies of stored personal data concerning you.
- Right to Rectification (Art. 16 GDPR): Demand immediate correction of inaccurate or incomplete personal data.
- Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Demand deletion of personal data when processing is no longer required by law.
- Right to Restriction of Processing (Art. 18 GDPR): Restrict data processing under statutory criteria.
- Right to Data Portability (Art. 20 GDPR): Obtain your provided personal data in a structured, machine-readable format.
- Right to Object (Art. 21 GDPR): Object to processing on grounds relating to your particular situation.
- Right to Withdraw Consent (Art. 7(3) GDPR): Revoke given consent at any time with prospective effect.
To assert any of these statutory rights, please contact the controller at any time.
Legal Basis: Data processing is performed under Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) (contract or pre-contractual inquiry), Art. 6(1)(c) (statutory obligation), or Art. 6(1)(f) (legitimate organizational interest in secure IT operation).
Storage Duration: Personal data is stored exclusively for the duration prescribed by statutory retention obligations, after which it is deleted routinely.
Automated Decision-Making & Profiling: As an academic and scientific surveillance organization, ESSCA does not utilize automated decision-making or profiling mechanisms.