At any time, you have a right of access and a right to rectification, to erasure or to restriction of the processing regarding your saved data, as well as a right to object to the processing, a right to data portability and a right to lodge a complaint, in accordance with the conditions of data protection law.
Right of access (Art. 15 GDPR):
You may demand information from us concerning whether and to what extent we are processing your data.
Right to rectification (Art. 16 GDPR):
If we are processing your data that is incomplete or incorrect, you may demand at any time that we rectify or complete it.
Right to erasure (Art. 17 GDPR):
You may demand that we delete your data if we are processing it unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons opposing an immediate erasure, e.g. in the event of statutory storage obligations.
Independently of you exercising your right to erasure, we will delete your data immediately and in full if there is no contractual or statutory storage obligation that contradicts this.
Right to restriction of processing (Art. 18 GDPR):
You may demand from us a restriction of the processing of your data if
- you are disputing the accuracy of the data, for a period which allows us to verify the accuracy of the data;
- the processing of the data is unlawful and you refuse a deletion, instead demanding a restriction of the use of the data;
- we no longer require the data for the intended purpose, but you still require this data for the assertion or defence of legal claims, or
- you have objected to the processing of the data.
Right to data portability (Art. 20 GDPR):
You may demand that we make your data, which you provided to us, available to you in a structured, commonly used and machine-readable format and that you can transmit this data to another controller without hindrance from us, provided that
- we process this data on the basis of revocable consent granted by you or for the performance of a contract between us, and
- this processing is carried out by automated means.
Where technically feasible, you may demand that your data be transmitted directly from us to another controller.
Right to object (Art. 21 GDPR):
If we are processing your data on the basis of a legitimate interest, you may object to this processing at any time; this would also apply to profiling based on these provisions. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims. You can object to the processing of your data for direct marketing at any time without providing reasons.
Right to lodge a complaint (Art. 77 GDPR):
If you believe that we are infringing German or European data protection law in the processing of your data, please get in touch with us to resolve matters. You also, of course, have the right to contact the competent supervisory authority, the relevant state office for data protection supervision.
If you want to assert one of the aforementioned rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.