If any of your personal data are processed, you are considered a data subject within the meaning of the GDPR and have the following rights:
You have the right to obtain confirmation from the data controller as to whether or
not we are processing personal data that concern you.
If your data are being processed, you have the right to request the following from the
data controller:
the logic involved as well as the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you are transmitted to a third country or to an international organisation. In this context, you can request that you are informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transmission of such data.
This right to information can be restricted if granting a right to information is likely to render impossible or seriously impair the research or statistical purposes for which the data is required and restricting the right to information is necessary to achieve the required research or statistical purposes.
You have the right to obtain from the data controller the rectification and/or completion of personal data concerning you if the data processed are inaccurate or incomplete. The data controller must rectify such data without delay.
Your right to rectification can be restricted insofar as it is likely to render impossible or seriously impair the research or statistical purposes for which the data is required and restricting the right to rectification is necessary for achieving the required research or statistical purposes.
You may request that the processing of personal data concerning you is restricted in the event that one of the following applies:
If the processing of personal data concerning you has been restricted, whilst such data may be stored, they may only
be processed with your consent or for the purpose of asserting, exercising or defending legal claims or for
protecting the rights of another natural or legal person or for reasons of important public interest of the Union or
a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, the data controller
will inform you before the restriction is lifted.
Your right to restriction of processing can be restricted insofar as it is likely to render impossible or seriously impair the research or statistical purposes for which the data is required and this restriction is necessary for achieving the required research or statistical purposes.
You may request that the data controller erase without delay personal data concerning you and the data controller is obliged to erase these data without delay in the event that one of the following applies:
If the data controller has made the personal data concerning you public and is obliged to erase them in accordance with Art. 17 (1) GDPR, he or she will take reasonable steps, including technical measures and taking into account the available technology and the cost of implementation, to inform data controllers responsible for processing such personal data that you as data subject have requested the erasure by such controllers of any links to, or copy or replication of, these personal data.
The right to erasure does not apply insofar as the processing is necessary:
If you have exercised your right to have the data controller rectify, erase or restrict the processing of personal
data concerning you, he or she is obliged to inform all recipients to whom such data have been disclosed of their
rectification or erasure or of the restriction of processing, unless this proves impossible or involves
disproportionate effort.
You have the right to be informed of these recipients.
You have the right to receive the personal data concerning you that you have made available to the data controller in a structured, common and machine-readable format. You also have the right to pass these data to another data controller without hindrance from the data controller to whom they were made available provided that:
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from
one data controller to another insofar as this is technically feasible. This must not compromise the freedoms and
rights of other persons.
The right to data portability does not apply for the processing of personal data necessary for the performance of a
task in the public interest or in the exercise of official authority vested in the data controller.
You have the right, on grounds arising out of your particular situation, to object at any time to the processing of
personal data concerning you that occurs on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies for profiling
activities undertaken on the basis of these provisions.
The data controller shall no longer process the personal data concerning you, unless he or she produces compelling
and legitimate reasons for such processing which outweigh your interests, rights and freedoms or such processing is
necessary for asserting, exercising or defending legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any
time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as
it is undertaken in connection with such direct marketing activities.
If you object to data processing for direct marketing purposes, the personal data concerning you are no longer
processed for such purposes.
In connection with the use of information society services and notwithstanding Directive 2002/58/EG, you may
exercise your right to object by automated means using technical specifications.
You also have the right, on grounds arising out of your particular situation, to object to the processing of personal
data concerning you that occurs for scientific or historical research purposes or for statistical purposes in
accordance with Art. 89 (1) GDPR.
Your right to object can be restricted insofar as it is likely to render the achievement of research and statistical
purposes impossible or seriously impair such purposes and this restriction is necessary for achieving such research
or statistical purposes.
You have the right to withdraw your declaration of consent concerning data protection at any time. Withdrawing your consent does not affect the lawfulness of data processing based on your consent before its withdrawal.
You have the right not to be made subject to a decision based exclusively on automated data processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way. This does not apply if the decision is:
However, such decisions may not be based on special categories of personal data in accordance with Art. 9 (1) GDPR
unless Art. 9 (2) (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms as well as
your legitimate interests have been taken.
With regard to the circumstances referred to in (1) and (3), the data controller shall take suitable measures to
safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to obtain
human intervention on the part of the data controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a
supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place
of the alleged infringement if you consider that the processing of personal data concerning you infringes the
GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and
the outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.