Privacy

1. Person responsible for data processing

Responsible for data processing within the meaning of Article 4 No. 7 GDPR is the Federal Environment Agency, represented by the President,
Wörlitzer Platz 1,
06844 Dessau-Roßlau,
Telefon: +49-340-2103-2416,
Fax: +49-340-2103-2285,
buergerservice@uba.de.

2. Data protection officer

Herr Udo Langhoff
Umweltbundesamt
Wörlitzer Platz 1
06844 Dessau-Roßlau
udo.langhoff[at]uba.de
Tel.: +49 (0)30 - 8903-5141

3. Log files

When you use ChemSelect, information about this activity is automatically logged in text files - also called log files. This data is not stored together with other personal data of the user. The information stored is:

IP address
Name of the retrieved file and amount of data transferred
Date and time of call
Request details and destination address (protocol version, HTTP method, referrer, user agent string)
Message whether the call was successful

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. These data will be kept for 7 days.
The storage in log files is done to ensure the functionality of ChemSelect. An evaluation of the data for marketing purposes does not take place in this context.

3.1 Anonymization of the IP address

Since the storage of the IP address may also allow conclusions to be drawn about a person, the IP address is anonymized.

3.2 Legal basis for processing

The legal basis is Art. 6 para. 1 e) GDPR in conjunction with § 2 para. 1 no. 2 of the Act on the Establishment of a Federal Environment Agency of July 22, 1974, which assigns the UBA the task of informing the public on environmental issues.

3.3 E-mail contact

Contact can be made via the e-mail address chemselect[at]uba.de. The user's personal data transmitted with the e-mail will only be stored as an e-mail to answer the inquiry. The e-mail will be forwarded to third parties if the reason for contacting us makes this necessary. The data will be used by all parties involved exclusively for processing the conversation.

4. ChemSelect - Description and scope and purpose of the use of data

ChemSelect allows you to evaluate and compare substances and mixtures with regard to their sustainability. To do this, you need to enter information on the evaluated substances, mixtures, suppliers and application scenarios. Which data you enter depends on which aspects you want to take into account in the evaluation. The entries are stored in a database and assigned to you as the user, so that processing can be resumed at any time.

The stored data enables a well-founded sustainability assessment of substances and mixtures. Only the data required for this purpose is stored and this data is not used for other purposes.

4.1. Anonymous data collection

You can use ChemSelect without providing any personal information. As long as you do not want to register with an email address, the data collection is linked to a randomly generated identification number (ID), which is stored in your browser under the key "anon.chemselect.uba.de" in its local memory. This number is displayed in the ChemSelect footer. This memory remains even when you close your browser and shut down your computer. This allows you to use ChemSelect completely anonymously and still productively. The memory is only deleted if you explicitly delete the website data in your browser. After that, you will no longer be able to access the data you entered. You will also not have access to your data if you access the ChemSelect server from a different workstation or with a different browser.

Deletion of anonymously collected data

Anonymously entered data will not be deleted for one week. If anonymous data is not processed for more than seven days, both the account and the data will be automatically deleted from ChemSelect.

4.2 Data collection with authentication

If you use ChemSelect with several different computers and browsers, or if you work in a group on a common project, or want to import or export data, you can replace the anonymous identification with a binding to an email address. In addition to the email address, only a password is requested and stored for the purpose of authorization. The legal basis is Art. 6 para. 1 e) GDPR. As soon as you have registered with an email address, this address will be displayed in the ChemSelect footnote instead of the anonymous ID.

Delete your own account

You can delete data and your account at any time. If you do not edit your data for more than two years, ChemSelect will automatically delete it. If you want to keep your account, you only need to log in once shortly."

5. Rights of data subjects

The Federal Environment Agency is responsible for the processing of personal data both in the context of fulfilling public tasks and as a contracting party under civil law. Data subjects therefore have the following rights under the GDPR:"

5.1 Right to information - Art. 15 GDPR

The right of access gives the data subject comprehensive insight into the personal data concerning him and some other important criteria, such as the purposes of processing or the duration of storage. The exceptions to this right set out in Section 34 BDSG apply.

5.2 Right to rectification - Art. 16 GDPR

The right to rectification includes the possibility for the data subject to have incorrect personal data concerning them corrected.

5.3 Right to erasure - Art. 17 GDPR

The right to erasure includes the possibility for the data subject to have data erased by the controller. However, this is only possible if the personal data in question is no longer necessary, is being processed unlawfully or consent has been withdrawn. The exceptions to this right set out in Section 35 BDSG apply.

5.4 Right to restriction of processing - Art. 18 GDPR

The right to restriction of processing includes the possibility for the data subject to prevent further processing of the personal data concerning them for the time being. A restriction occurs primarily in the review phase of other rights exercised by the data subject.

5.5 Right to data portability - Art. 20 GDPR

The right to data portability includes the possibility for the data subject to receive the personal data concerning him in a commonly used, machine-readable format from the controller in order to have it forwarded to another controller if necessary. According to Art. 20 para. 3 sentence 2 GDPR, however, this right is not available if the data processing serves the performance of public tasks. This is only not the case at the Federal Environment Agency if the processing of personal data is for fiscal purposes.

5.6 Right to object - Art. 21 GDPR

The right to object includes the possibility for data subjects to object to the further processing of their personal data in a particular situation, insofar as this is justified by the performance of public tasks or public and private interests. According to Section 36 BDSG, this right does not apply if a public body is obliged to process the data by law.

5.7 Right to withdraw consent - Art. 7 para. 3 GDPR

In addition, you have the right to withdraw your consent within the meaning of Art. 6 (1) a) or Art. 9 (2) a) GDPR at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Right of appeal

In accordance with Art. 77 GDPR, every data subject has the right to lodge a complaint with the competent data protection supervisory authority. The competent data protection supervisory authority for the Federal Environment Agency is the Federal Commissioner for Data Protection and Freedom of Information, Husarenstr. 30, 53117 Bonn, Tel. 0228/997799-0, poststelle@bfdi.bund.de, www.bfdi.de.