Rights of the data subject
Rights of the data subject
To ensure fair and transparent processing, we point out that the rights of the data subject include the following:
- Right to withdraw consent (Art. 7(3) GDPR), for this you may contact firstname.lastname@example.org
- Right of access (Art. 15 GDPR): You may request information from us about the data we hold on you at any time in the form of a free copy. Should you request further copies, we reserve the right to charge you for them.
- Right to rectification (Art. 16 GDPR): You may request us to rectify your data if they are not complete, current or correct.
- Right to erasure (Art. 17 GDPR): You may request us to delete your data if the necessary legal requirements are met. This is the case if:
• the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you withdraw your consent on which the data processing is based and there is no other legal ground for the processing;
• you object to the processing of your data and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes;
• the data have been processed unlawfully;
• the processing is not necessary to ensure compliance with a legal obligation which requires us to process your data; in particular with regard to legal retention periods; to establish, exercise or defend legal claims.
- Restriction of processing of data (Art. 18 DSGVO): You may request us to restrict the processing of your data if:
• you contest the accuracy of the data, for the period of time we need to verify the accuracy of the data;
• the processing is unlawful and you oppose the erasure of your data and instead request restriction of their use;
• we no longer need your data, but you require them to establish, exercise or defend legal claims;
• you have objected to the processing pending verification whether our legitimate grounds override yours.
- Right to data portability (Art. 20 GDPR): Where technically feasible, we will transmit your data to another controller upon your request. The prerequisite for this is that the processing of the data is based on your consent or is necessary in order to fulfil a contract.
- Right to object (Art. 21 GDPR): Where the processing of your data takes place on the grounds of our legitimate interests or those of a third party, you have the right to object to the processing at any time on grounds relating to your particular situation. In this case we will no longer process your data. This does not apply if we can demonstrate compelling legitimate grounds for the processing of your data which override your interests or if the processing serves the establishment, exercise or defence of legal claims.
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You can find the e-mail address under General Information in the tab Privacy.
Restriction of information in the fulfilment of data subjects’ rights
Due to legal requirements, we may not be able to provide information about all of your data. Should we need to reject your request in such a case, we shall inform you of the reasons for the rejection.
Periods for fulfilling data subjects’ rights
As a matter of principle, we endeavour to respond to all enquiries within 30 days. If the request is complex, the response may take longer. In this case, however, we will inform you of the delay.