Your rights under the General Data Protection Regulation (GDPR)

The General Data Protection Regulation grants you a range of specific rights with regard to your personal data that a controller processes about you. These rights will be explained below. You are entitled to these rights under the conditions of the respective data protection regulations. Please note that the following explanation does not grant you any other rights.

  1. Right of access
    You have the right to request a confirmation from us as to whether or not personal data concerning you is being processed. If this is the case, you have a right to access to this personal data and the information referred to in Art. 15 GDPR.
  2. Right to rectification
    You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, if necessary, to request the completion of incomplete personal data (Art. 16 GDPR).
  3. Right to erasure
    You have the right to obtain from us the erasure of personal data concerning you without undue delay if one of the grounds referred to in Art. 17 GDPR applies, e.g. if personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  4. Right to restriction of processing
    You have the right to obtain from us the restriction of processing if one of the conditions referred to in Art. 18 GDPR is met, e.g. if you have objected to processing, for the time of the examination by us.
  5. Right to data portability
    You have the right, under certain conditions, to receive your personal data, which you have provided to a us, in a structured, commonly used, and machine-readable format, to transmit this data, and have this data transmitted directly from one controller to another, where technically feasible.
  6. Right to lodge a complaint
    Without prejudice to any other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of your personal data infringes the General Data Protection Regulation (Art. 77 GDPR). You can exercise this right by contacting a supervisory authority in a Member State of your habitual residence, place of work, or place of the alleged infringement. The contact details of the supervisory authorities in Germany can be found at (in German only) https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
  7. Right to withdraw consent
    If you have given us your consent to process your personal data, you have the right to withdraw your consent at any time with effect for the future. This also applies to consents that you have given us prior to the General Data Protection Regulation taking effect.
  8. Right to object

    You also have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data, provided that processing is based on Art. 6(1) lit. e or f GDPR. We then no longer process this data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or processing of this data is necessary for the establishment, exercise, or defense of legal claims (Art. 21 GDPR).

    If your personal data is processed for direct marketing purposes (e.g. via e-mail) you have the right to object at any time to processing of your personal data for these purposes. This also includes profiling to the extent that it is related to such direct marketing. Profiling means the use of personal data to analyze or predict certain personal aspects (e.g. interests).