How SUSTAIN-DB handles personal data and the cookies required to operate this service.

Data controller

Leibniz Universität Hannover, Institut für Botanik
Herrenhäuser Straße 2, 30419 Hannover, Germany
Email: admin@example.com

Data we process

When you browse the site, the service records technical information needed for security and reliable operation, such as IP address, request time, requested page, browser information, and error details.

When you create an account, we process the account and profile information you provide, including your email address. If you contribute to SUSTAIN-DB, we also process the project, site, species, publication, and file information you submit, together with review history and service messages.

Approved research records and the contributor information selected for publication may become publicly visible. Passwords are stored only as one-way password hashes.

Why we process it

We process personal data to operate and secure SUSTAIN-DB, manage accounts, verify registrations, review and publish research contributions, respond to requests, prevent abuse, and maintain an audit trail of changes. Processing is based on providing the requested service, compliance with applicable obligations, and the controller's legitimate interests in operating a secure scientific database.

Cookies and abuse prevention

SUSTAIN-DB uses necessary cookies for sessions, sign-in, security protection, language, and user preferences. Blocking these cookies may prevent account and submission features from working. The site does not use advertising or profiling cookies.

Registration uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. Cloudflare receives technical request and browser information for that verification. Cloudflare privacy policy.

You can remove or block cookies in your browser settings. Necessary cookies will be created again when required by a feature you use.

Recipients and retention

Access is limited to authorized SUSTAIN-DB administrators and reviewers, and to service providers used for hosting, email delivery, security, and maintenance where necessary. Information may also be disclosed when required by law. Public research records are available to visitors once approved.

Personal data is retained only for as long as needed for the purposes above, the integrity of the scientific record, security, and applicable legal obligations. You may ask the controller about retention for a specific record.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to certain processing. You may also lodge a complaint with the competent data protection authority.

To exercise a privacy right or ask a question, contact admin@example.com.

Last updated: 23 August 2026