XIV. Your rights
We would like to inform you about your rights regarding the processing of your personal data.
1. Revocation of your consent (Art. 7 para. 3 GDPR)
You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, you will be informed thereof.
2. Right to access (Art. 15 GDPR, Sec. 34 BDSG)
Pursuant to Art. 15 GDPR you have the right to obtain from us confirmation as to whether we process your personal data, and, where that is the case, access to the personal data and the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from you directly, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22 para. (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for your data.
If personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards ensuring compliance with the provisions of GDPR at these recipients.
3. Right to rectification (Art. 16 GDPR, Sec. 35 BDSG))
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
4. Right to erasure or “right to be forgotten” (Art. 17 GDPR, Sec. 35 BDSG)
You have the right to our erasure of your personal data without undue delay insofar as one of the following grounds applies:
the data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw consent on which the processing is based and no other legal ground for the processing applies;
you object to the processing pursuant to Article 21 para. 1 GDPR for reasons based on your particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing;
You object to the processing for direct advertisement pursuant to Article 21 para. 1 GDPR
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law;
the personal data have been collected in relation to the offer of information society services referred to in Article 8 para. 1 GDPR.
Where we have made the personal data public and are obliged to erase the personal data, we, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers which are processing the respective personal data thereof.
5. Right to restriction of processing (Art. 18 GDPR)
According to Art. 18 GDPR, we may only process data to a limited extent where one of the following applies:
You contest the accuracy of your data, until we can verify its accuracy,
The processing is unlawful and instead of requesting the erasure of the data you ask for the restriction of use of the personal data,
We no longer need the data for the purposes of processing, but you do need it to establish, exercise or defend legal claims, or
You objected to the processing pursuant to Art. 21 para. (1) GDPR for reasons arising from your particular situation, provided it is not yet clear whether our legitimate reasons for processing override your interests
If processing is restricted we are allowed to only store this data. Further processing shall only be permitted with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
You are authorized to withdraw your consent granted in this regard at any time.
6. Notification obligation regarding rectification or erasure of personal data or restriction of processing (Art. 19 GDPR)
We are obliged to inform all recipients of your data of any correction or deletion or any restriction on processing thereof, unless this proves impossible or involves disproportionate effort.
We will inform you about those recipients if you request it.
7. Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where the processing is:
based on your consent or contract and
carried out by automated means.
In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to third party, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
8. Automated individual decision-making, including profiling (Art. 22 GDPR)
On our website, your data is not subject to decisions based solely on automated processing (e.g. profiling).
9. Right to object (Art. 21 GDPR)
If we process your data on the basis of a legitimate interest (Art. 6 para. (1) lit. f) GDPR), you have the right to object, on grounds relating to your particular situation. This also applies to profiling based on those provisions. In this case, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or grounds for the establishment, exercise or defense of legal claims.
Where we process personal data for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your data shall no longer be processed for such purposes.
To object, simply address a message without requirements as regards form to the contact information listed on p. 1.
10. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy to which you may be entitled, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the data protection regulations.