The GDPR grants you various rights with regard to your personal data, which are described in brief below.
a) Right of access
You can request information about whether your personal data is being processed. If this is the case, you can request further information, in particular on the purposes of the processing, the categories of personal data processed, the recipients, the storage period or, if this is not possible, the criteria for determining the period, as well as further information.
You can request a copy of your personal data, which will be provided to you following receipt of a request to this effect by email in a common electronic format, provided that this does not affect the rights or freedoms of other persons. For this purpose, please specify precisely which data you require.
b) Rectification
You can immediately request the correction of incorrect personal data pertaining to your person as well as the completion of incomplete personal data.
c) Erasure
You have the right to request the erasure of your personal data, in particular if the data is no longer necessary for the purposes for which it was processed. Your data will be deleted immediately unless an exception applies, in which case your data may continue to be stored. This is the case, for example, if there is an obligation to store pertinent data for tax or commercial law reasons. In this case, processing will be restricted and will then only take place for that purpose.
d) Restriction of processing
You may request the restriction of processing of your personal data, in particular if:
- you contest the accuracy of the data, and the data is being verified.
- the processing is unlawful and you object to the erasure.
- the data is no longer required, but you need it for the assertion, exercise or defense of legal claims, or
- you have objected to processing.In the event that processing is restricted, your personal data may in principle only be stored; specifically, it may only be processed with your consent or for the assertion or exercise of as well as for the defense against legal claims.
e) Data portability
You have the right to obtain the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format in order to transmit this data to another controller. You also have the right to have this data transmitted directly to another data controller. A prerequisite for this right, however, is that the processing of your data is based on consent, the implementation of pre-contractual measures or the performance of a contract.
f) Objection
You may object to the processing of personal data pertaining to you if the processing is based on a legitimate interest (Art. 6 (1) sentence 1 (f) GDPR). Your right to object also applies in the case of any direct marketing (e.g. newsletter mailings), including any profiling that may be associated with this. The data will then no longer be processed unless compelling reasons are provided for such processing.
g) Withdrawal of consent to data processing
If you have consented to processing of your personal data, you can withdraw this consent at any time. Any processing that has taken place up to the time of revocation remains unaffected.
h) Exercising your rights
If you wish to exercise the rights described above, please contact our data protection officer (Section 3).
Right to lodge a complaint with a data protection authority
You have a right of appeal to a supervisory authority.
If you have any questions or complaints, please first contact us directly (see Section 3) – your concern is certain to be resolved to your satisfaction.