Rights of data subjects

As the data subject, you have the following rights vis-à-vis the controller with regard to the personal data concerning you in accordance with the statutory provisions:

Right of withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to withdraw your consent to the processing of data in accordance with Art. 7 (3) GDPR at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The storage of data for billing and accounting purposes remains unaffected by a revocation.

Right to information

In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data concerning you. If such processing is taking place, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR if your data is transferred to third countries.

Right to rectification

In accordance with Art. 16 GDPR, you have the right to request the immediate correction of incorrect personal data concerning you and/or the completion of your incomplete data at any time.

Right to erasure

You have the right to request the deletion of your personal data in accordance with Art. 17 GDPR if one of the following reasons applies:

a) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b) You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
c) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
d) The personal data was processed unlawfully.
e) The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
f) The personal data have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

However, this right does not exist insofar as the processing is necessary

a) For exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
c) for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right of the data subject is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
e) for the establishment, exercise or defense of legal claims.

If we have made your personal data public and we are obliged to delete it in accordance with the above, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as the data subject, have requested them to delete all links to your personal data or copies or replications of this personal data.

Right to restriction of processing

You have the right to request the restriction of processing (blocking) of your personal data in accordance with Art. 18 GDPR. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases
a) If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
b) If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
c) If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
d) If you have lodged an objection in accordance with Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or of a Member State.