Legal
Privacy Policy
This English version is provided for information only. Only the German version is legally binding.
1. Controller
International Society of Dermatology in the Tropics e.V.
c/o Univ.-Prof. Dr. Esther von Stebut
Kerpener Str. 62, 50937 Köln
Email: info@tropendermatologie.de
2. Data collection on this website
This website is essentially a static information site. No cookies are set on the public pages and no tracking or analytics services are integrated. Fonts are loaded locally from the server; no connection to third-party providers such as Google Fonts takes place. We process personal data when the site is accessed (server log files, see below), when you write to us by email (section 3), when you submit the online membership application (section 4) and in the internal area for the board and editorial team (section 5).
When the site is accessed, our hosting provider Vercel Inc. (USA) processes technically necessary data (e.g. IP address, date and time of access, requested page) in so-called server log files. The pages are delivered via Vercel's worldwide server network. This processing is carried out on the basis of Art. 6(1)(f) GDPR for the purpose of the secure and stable operation of the website. Vercel is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR).
3. Contact by email
If you contact us by email, your details will be stored in order to process the enquiry and for possible follow-up questions. We do not pass on these data without your consent. The legal basis is Art. 6(1)(b) or (f) GDPR.
4. Online membership application
Using the form on the “Become a member” page, you can submit a membership application directly online. In doing so, we process the data you provide: first and last name, address, country, email address and the type of membership requested, and, insofar as you provide them voluntarily, salutation, title, date of birth, telephone number, a second email address, details of profession, specialist field, international experience, projects and interests in contributing, and a message to the board. Bank details are not collected via the form; we collect the annual membership fee by SEPA direct debit, and you grant the mandate on the signed paper application. We use the details it contains (account holder, address, IBAN, BIC, bank) solely to collect the fee (Art. 6(1)(b) GDPR) and delete them when the mandate ends, unless statutory retention obligations prevent this.
The purpose of the processing is the review and handling of your application for membership and, if you are admitted, the administration of your membership. The legal basis is Art. 6(1)(b) GDPR (initiation or performance of the membership); voluntary information is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future. The details are transmitted by email to the Society's office and stored there for further processing. If your application is rejected, we will delete the data, unless statutory retention obligations prevent this. If it is accepted, we store the details for the duration of the membership and delete them after the membership ends, unless statutory retention obligations prevent this.
For the operation of the form and the website, we use the hosting service provider Vercel. The form function is executed in a data centre in the European Union (Frankfurt region); the data are encrypted in transit (TLS). The function itself does not create its own database — your details are forwarded exclusively by email to the Society's office. For technical reasons, connection and log data (such as server logs) may arise during the operation of the platform. To limit misuse, the form function holds the IP address of the submitting device in working memory; it is not written to any storage medium. Vercel Inc. is based in the USA, so access from a third country cannot be entirely ruled out. Vercel is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).
5. Internal area for the board and editorial team
Members of the board and the editorial team can log in to the internal area of this website with their email address and an access password to submit meetings, news items and corrections for this website. After logging in, the website sets a technically necessary session cookie (isdt_intern, valid for 12 hours) that contains the logged-in email address and the expiry time and serves solely for the login (Section 25(2) No. 2 TDDDG). To limit misuse, the IP address is held in working memory when logging in and submitting, not on any storage medium.
The details of a submission (name, email address, entered content and uploaded files) are stored in the non-public repository at GitHub Inc. (USA) in which Speakz Media GmbH maintains this website on behalf of the association; the editorial team also receives the submission by email. GitHub is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the maintenance of the website by the board and the editorial team. Submissions are stored for as long as they are needed for maintaining the website and for tracing changes; we delete them on request.
6. Your rights
You have the right at any time to access your stored personal data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) as well as objection to the processing (Art. 21 GDPR). You also have the right to lodge a complaint with the competent data protection supervisory authority.
7. External links
This website contains links to external third-party websites (e.g. conference registration, partner societies). We have no influence on their content and data processing; the privacy policies of the respective providers apply.