Privacy Notice

GESTIS - International Limit Values for Chemical Agents (GESTIS-ILV)

This notice informs you about the protection of your personal data when using the online database GESTIS - International Limit Values for Chemical Agents (GESTIS-ILV).

Personal data (hereinafter referred to as "data") is any information relating to an identified or identifiable natural person, such as name, address, telephone number, email address, or IP address.

We want you to know when we collect which data and for what purpose we use it.

We have implemented technical and organizational measures to ensure the security of your data and to ensure compliance with the requirements of the General Data Protection Regulation (GDPR). These measures serve to protect the confidentiality, integrity, and availability of your data. The server on which this website is operated is located in Germany.

1 Controller

The controller responsible for the processing of your personal data is:

Deutsche Gesetzliche Unfallversicherung e.V. (DGUV)
Glinkastraße 40
10117 Berlin
Tel.: +49 30 13001-6130
E-Mail:

Our full legal notice can be found at the following link: Legal Notice

2 Data Protection Officer

The DGUV has appointed a Data Protection Officer. You can reach our Data Protection Officer at the postal address mentioned above or by email at:

Email:

3 Contact Options

On our website, we provide you with options to contact us. You can use our infoline, send a request via , fill out the contact form, or use the information from our legal notice to get in touch. When using these options, personal data is collected to process and respond to your inquiry.

Data Processed

The following data is processed when you contact us:

Contact form:

  • Email address
  • Inquiry information (e.g., texts, contact times)
  • Name (optional)
  • Telephone number (optional)

Contact via email:

  • Email address
  • Inquiry information (e.g., texts, contact times)

Infoline:

  • Telephone number
  • Inquiry information (e.g., texts, contact times) if applicable, when the response is provided at a later time

Legal Basis

The legal basis for the processing of your personal data in the context of contacting us is Art. 6(1)(f) GDPR, based on our legitimate interest in responding to your inquiry. If your inquiry is related to the performance of a contract or pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR.

Duration of Data Storage

Your personal data will be stored for as long as is necessary to respond to your inquiry. Once the inquiry has been answered and no further legal or contractual obligations exist, we will delete your data unless it must be retained for other legal purposes.

4 Server Log Files

When you visit our website, we automatically collect data that is stored in so-called server log files. Server log files are automatic protocol files of the web server in which accesses to the website are recorded. The storage is carried out to ensure the functionality of the website and to guarantee the security of our information technology systems.

Data Processed

The following personal data is processed as part of the server log files:

  • IP address (last octet removed)
  • Date and time of access
  • Browser used and operating system
  • User ID (pseudonymized)

Legal Basis

The legal basis for this data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the technical functionality, IT security, detection and prevention of misuse of our website, as well as error analysis and troubleshooting of our server infrastructure.

Duration of Data Storage

Personal log data (such as IP addresses) is deleted after no more than 30 days. Storage beyond this period only occurs insofar as this is necessary for the investigation of security incidents or for the defense against or prosecution of misuse.

5 Use of Cookies and Similar Technologies

We use cookies and comparable technologies (e.g., Local Storage, Session Storage, and pixels) on our website, which are stored as small text files or data fragments on your device. They are collectively referred to as "cookies" in the following.

Cookies serve to enable the provision and use of our website, to ensure its security and functionality, and, if you have consented, to provide statistical evaluations or additional optional functions.

Cookies/Technologies Used

Name Provider / Service Category Purpose Storage Duration Legal Basis: Storing and Accessing Information on the Device Legal Basis: Processing of Personal Data
bearer_token (JSON Web Token in Local Storage) Website Operator Technically Necessary Stores the user's login status to enable access to the protected area without having to re-enter the password when navigating between pages. Until logout or manual deletion by the user.
The token automatically expires after 200 minutes and can be deleted at any time via the browser settings.
§ 25(2)(2) TDDDG Art. 6(1)(f) GDPR: Legitimate interest in a secure and functioning website
terms_of_service (Session Cookie) Website Operator Technically Necessary Stores the information whether the user has agreed to the Terms of Service. Automatically deleted when the browser is closed. § 25(2)(2) TDDDG Art. 6(1)(f) GDPR: Legitimate interest in the documentation of legal terms of use and user-friendly design of the website.

6 Login for Contributors and Content Creation

We set up a password-protected user account for our contributors in the system upon request. There is no public registration function on our website.

When you log in with your email and password, the system processes your access credentials. The purpose of this processing is to verify you as an authorized user, to prevent unauthorized access, and to ensure system security. A technically necessary token is stored in your browser's Local Storage (see Section 5).

Only your contributions are published, not your personal data.

Data Processed

  • Login credentials (email address, password)
  • Assignment to country list

Legal Basis

Our legitimate interest pursuant to Art. 6(1)(f) GDPR is based on the secure and efficient management of our website content in combination with the performance of the contract/use of the account pursuant to Art. 6(1)(b) GDPR.

Duration of Data Storage

Your data will be stored for as long as your user profile is active (see Terms of Use). Once you request the deletion of your account in writing (e.g., via email), your data will be immediately removed from our database, unless statutory retention obligations prevent this.

The content you have entered into our website will remain in our system; however, it can no longer be attributed to you as a person.

7 Your Data Subject Rights

As a data subject, you have the following rights in the context of data processing:

  • Right of access (Art. 15 GDPR): You have the right to request information at any time about the data we have stored about you.
  • Right to rectification (Art. 16 GDPR): If we have processed inaccurate or incomplete data about you, you may request the rectification of such data.
  • Right to erasure or restriction of processing (Art. 17 and Art. 18 GDPR): If the conditions are met, you may request the erasure or restriction of processing of your data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You may also have this data transferred to another controller.
  • Right to object (Art. 21 GDPR): If we process your data on the basis of Art. 6(1)(e) or (f) GDPR (e.g., based on a legitimate interest), you may object to the processing of your data at any time pursuant to Art. 21 GDPR.
  • Automated individual decision-making including profiling (Art. 22 GDPR): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We currently do not apply any automated decision-making.
  • Right to withdraw consent (Art. 7(3) GDPR): If the processing of your data is based on consent, you have the right to withdraw this consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal. You may send your objection to the following email address: info@dguv.de

If you believe that we have violated your rights through the processing of your data, you have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR. The contact details of the supervisory authority responsible for us can be found below:

The Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Straße 153
53117 Bonn
Phone: +49 (0)228 997799-0

Email:

8 Further Information

If you have any further questions about data protection at DGUV, you can contact our Data Protection Officer at any time. You can reach her at the address indicated above (see Section 2) or via the following contact details of the Data Protection Law Department:

Email: