Right to information according to article 15 General Data Protection Regulation

Every data subject has a right of access to personal data concerning him/her. The right of information extends to all data processed by us. The right can be exercised easily in regular intervals so that all data subjects are always aware of the processing of their personal data and will be examined to its lawfulness (see recital 63 of the General Data Protection Regulation). The right of access includes, in particular, the following informations:

• The purpose of the processing
• The data categories
• The recipients / categories of recipients, in particular recipients of international organisations or third countries; if a third country is involved, the data subject shall also have the right to obtain information on the appropriate guarantee in connection with the transmission.
• If possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
• All available information on the origin of the data, if the personal data are not collected from the data subject
• All available information on the existence of an automated decision making process including profiling according to article 22 paragraph 1 and 4 General Data Protection Regulation
• The existence of a right to
  • Correction or
  • Erasure of their personal data concerning them; or
  • on restriction of the processing by the persons responsible, or
  • a right of objection to such processing; and
  • the existence of a right to appeal to a supervisory authority

If a data subject wishes to exercise this right of information, they can contact us at any time by using the contact details given at the beginning of this data protection notice.

Right of appeal to an authority according to article. 13 paragraph 2 lit. d General Data Protection Regulation

Irrespective of any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority. In particular in the Member State in which they reside, work or are suspected of having committed an infringement. If they consider that the processing of personal data relating to them is in breach of the General Data Protection Regulation. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy under article 78 GDPR.

Right of rectification according to article 16 General Data Protection Regulation

Every data subject has the right to obtain the correction of any inaccurate personal data concerning them without delay. The data subject also has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If a data subject wishes to exercise this right of access, they may contact us at any time using the contact details given at the beginning of this data protection notice.

Right to data portability according to article 20 GDPR

Every data subject shall have the right to obtain the personal data concerning them which have been made available to a person responsible by the data subject in a structured, common and machine-readable format. They also have the right to have their data transmitted to another person responsible without hindrance from the current person responsible to whom the personal data has been made available. Provided that the processing is based on the consent agreement according to article 6 paragraph 1 lit. a GDPR or article 9 paragraph 2 lit. a GDPR or on a contract according to article 6 paragraph 1 lit. b GDPR and that the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority transferred by the responsible person.

Furthermore, in exercising their right to data portability according to article 20 paragraph. 1 GDPR, the data subject has the right to obtain that personal data be transferred directly from one responsible person to another responsible person, so far as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons. In order to assert the right to data portabilit. At any time the person concerned can contact us using the contact details given at the beginning of this data protection notice.

Right to restriction of processing according to article 18 GDPR

Every data subject shall have the right to obtain the restriction of the processing from the person responsible, if one of the following conditions is met:

• The accuracy of the personal data is contested by the data subject, for a period enabling the person responsible to verify the accuracy of the personal data
• The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests the restriction of the use of the personal data
• The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the purpose of asserting, exercising or defending legal claims.
• The data subject has lodged an objection to the processing according to article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.

If one of the above-mentioned conditions is met and a data subject wishes to request the restriction of personal data stored by the data controller, they may contact us at any time using the contact details given at the beginning of this data protection notice. The person responsible will initiate the restriction of the processing.

Right of deletion (right to be forgotten) according to article 17 GDPR

Every data subject has the right to obtain erasure or blocking and to obtain from us the immediate deletion of personal data concerning them. If one of the following reasons applies and if the processing is not necessary:

• the personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
• the data subject withdraws his or her consent on which the processing was based according to article 6 paragraph 1 lit. a GDPR or article 9 paragraph 2 lit. a GDPR and there is a lack of
• The data subject lodges an objection to the processing according to article 21(1) GDPR and there are no overriding legitimate reasons for processing, or the data subject lodges an objection to the processing according to article 21(2) GDPR.
• The personal data were processed unlawfully.
• The deletion of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
• The personal data was collected in relation to information society services offered according to article 8 paragraph 1 GDPR.

If one of the above reasons applies and a data subject wishes to request the deletion of personal data, they can contact us at any time using the contact details at the beginning of this data protection notice. The person responsible will ensure that the request for deletion is complied with immediately.

Right of objection according to article 21 GDPR

Every data subject has the right to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her that is carried out according to article 6, paragraph 1, lit. e or f of the GDPR. This also applies to profiling based on these provisions.

In the event of an objection, the person responsible no longer processes the personal data, unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. Where the controller processes personal data for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data for the purpose of such marketing. This shall also apply to profiling, insofar as it is related to such direct marketing. If the data subject objects to the person responsible for the purposes of direct marketing, the controller shall no longer process the personal data for those purposes.

In addition, the data subject has the right to object, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her carried out by the person responsible for purposes of scientific or historical research or for statistical purposes according to article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest. In order to exercise the right of objection, the data subject may contact us at any time using the contact details given at the beginning of this data protection notice.

We would like to emphasise that the present text is a translation from German. Translation errors may occur!