Rights of the data subject

Pursuant to Art. 15 of the GDPR, you can obtain from us information and a copy of the personal data about you stored and processed by us at any time, free of charge.

This right of access includes information about the purposes of processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data has been or will be disclosed, where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period, the existence of the right to request the rectification or erasure of personal data concerning you or restriction of processing by us or to object to such processing, the existence of the right to lodge a complaint with a supervisory authority and, where personal data is not collected from you, any available information as to its source and the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) of the GDPR and - at least in those cases - meaningful information about the logic involved, as well as the significant and the envisaged consequences of such processing.

You also have the right to obtain information as to whether your personal data is transferred to a third country or to an international organisation and which appropriate safeguards are in place relating to the transfer.

Right to rectification

In addition, pursuant to Art. 16 of the GDPR, you have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.

Right to erasure

Pursuant to Art. 17 of the GDPR, you also have the right to obtain the erasure of data stored by us concerning you without undue delay where one of the following grounds applies: The personal data is no longer necessary for the purposes for which it was collected or otherwise processed; you withdraw your consent on which processing is based according to Art. 6 (1) a or Art. 9 (2) a of the GDPR and where there is no other legal ground for processing; you object to the processing pursuant to Art. 21 (1) of the GDPR and there are no overriding legitimate grounds for processing, or you object to processing pursuant to Art. 21 (2); the personal data has been unlawfully processed; the personal data must be erased for compliance with a legal obligation in Union or Member State law to which we are subject; the personal data was collected in relation to the offer of information society services referred to in Art. 8 (1).

Where we have made the personal data public and are obliged pursuant to Art. 17 (1) of the GDPR to erase it, we shall take reasonable measures to inform other controllers who are processing the personal data that you have requested the erasure of any links to, or copies or replication of, this personal data.

Right to restriction of processing

Pursuant to Art. 18 of the GDPR, you have the right to obtain restriction of processing of your personal data where one of the following applies: You contest the accuracy of the personal data, and for a period enabling us to verify the accuracy of the personal data;

Processing is unlawful and you oppose erasure of the personal data and request the restriction of its use instead; we no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or you have objected to processing pursuant to Art. 21 (1) pending the verification of whether the legitimate grounds of our company override yours.

Right to data portability

Pursuant to Art. 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us at any time, in a commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from us, where processing is based on consent pursuant to Art. 6 (1) a or Art. 9 (2) a of the GDPR or on a contract pursuant to Art. 6 (1) b of the GDPR and the processing is carried out by automated means, insofar as processing is not necessary for performing a task carried out in the public interest or in the exercise of official authority vested in us.
In addition, you may the personal data stored by you transmitted directly from us to another controller, where technical feasible and where this does not affect the rights and freedoms of others.

Right to object

Pursuant to Art. 20 of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) e or f. This also applies to profiling based on these provisions.

If you object, we shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights or freedoms or serves the establishment, exercise or defence of legal claims.

Where we process your personal data for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, we shall no longer process the personal data for such purposes.

You have the right to object, on grounds related to your particular situation, to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) of the GDPR, unless such processing is required to perform a task carried out for reasons of public interest.

It is within your discretion to exercise your right to object to automated procedures in which technical specifications are used that relate to the use of services of the information society and irrespective of Directive 2002/58/EC.

Right to revocation

You may revoke consent to processing of your personal data at any time with effect for the future, pursuant to Art. 7 (3) of the GDPR.

Right to confirmation

You have to right to obtain confirmation as to whether or not personal data concerning you is being processed.

Right to lodge a complaint

In addition, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR. You can generally contact the supervisory authority in your regular place of residence or workplace or our headquarters.