6. Your rights as a data subject
Insofar as your personal data is processed when you visit our website, you as the “data subject” have the following rights within the meaning of the GDPR:
You can request information from us whether we process your personal data. There is no right to information if the provision of the requested information violates the duty of confidentiality § 83 StBerG would be violated or the information would have to be kept secret for other reasons, in particular because of an overriding legitimate interest of a third party. Deviating from this, there may be an obligation to provide the information if your interests outweigh the interests of confidentiality, especially taking into account the threat of damage. The right to information is also excluded if the data is only stored because it may not be deleted due to statutory or statutory retention periods or is used exclusively for data backup or data protection purposes, provided that the provision of information would require a disproportionate amount of effort and processing for other purposes is excluded by suitable technical and organizational measures. If the right to information is not excluded in your case and your personal data is processed by us, you can make inquiry from us about the following information:
- Purposes of processing,
- Categories of the personal data processed by you,
- Recipients or categories of recipients to whom your personal data will be disclosed, in particular to recipients from third countries,
- if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage duration,
- the existence of a right to correction or deletion or restriction of the processing of personal data concerning you or a right to object to this processing,
- the right to lodge a complaint with a data protection supervisory authority,
- if the personal data has not been collected from you as the data subject, the available information about the origin of the data,
- the existence of an automated decision-making, including profiling and meaningful information about the logic involved and the scope and the expected impact of automated decision making,
- in the case of transmission to recipients in third countries, unless the EU Commission has decided on the adequacy of the level of protection according to Art. 45 Abs. 3 GDPR is available, information about suitable guarantees Art. 46 Abs. 2 GDPR are intended to protect personal data.
6.2 Correction and completion
If you discover that we have incorrect personal data about you, you can request us to correct this incorrect data immediately. In the case of incomplete personal data concerning you, you can request completion.
You have a right tfor deletion (“right to be forgotten”), provided that the processing is not necessary to exercise the right for freedom of expression, the right for information or to fulfill a legal obligation or to perform a task that is in the public interest and one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were processed.
- The justification for the processing was solely your consent, which you revoked.
- You have applied an objection to the processing of your personal data that we have made public.
- You have objected to the processing of personal data not made public by us and there are no overriding legitimate reasons for the processing.
- Your personal data has been processed illegally.
- The deletion of personal data is necessary to fulfill for a legal obligation to which we are required to do.
There is no entitlement to deletion if, in the case of lawful non-automated data processing, deletion is not possible or only possible with disproportionately high effort due to the special type of storage and your interest in deletion is low. In this case, instead of deletion, processing is restricted.
6.4 Restriction of processing
You can request that we restrict processing if one of the following reasons is applied:
- You dispute the accuracy of the personal data. In this case, the restriction can be requested for the duration that enables us to check the accuracy of the data.
- The processing is illegal and instead of deletion you make request for restiction of using your personal data.
- Your personal data no longer needed for the purposes of processing, but you need them to assert, exercise or defend legal claims.
- You have objection in accordance with Art. 21 Abs. 1 GDPR inserted. The restriction of processing may be required as long as is unknown whether our legitimate reasons outweigh your reasons.
Restriction of processing means that personal data will only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we have an obligation to notify you about it.
6.5 Data portability
You have a right to data portability, processing (1 Art. 6 para. Sentence 1 Letter. a) provided on your consent or Art. 9 Abs. 2 letter a) GDPR) or is based on a contract to which you are a party and the processing is carried out using automated procedures. In this case, the right to data portability includes the following rights, provided that this does not affect the rights and freedoms of other people: You can request us to receive the personal data that you have provided to us in a structured, common and machine-readable format . You have the right to transfer this data to another person responsible without hindrance on our part. To the extent technically feasible, you can demand from us that we transfer your personal data directly to another manager.
If the processing is based on Art. 6 Abs. 1 Sentence 1 Letter. e) GDPR (performance of a task in the public interest or in the exercise of public authority) or on Art. 6 Abs. 1 Sentence 1 Letter. f) GDPR (legitimate interest of the person responsible or a third party), you have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation. This also applies to Art. 6 Abs. 1 Sentence 1 Letter. e) or literally. f) GDPR-based profiling. After exercising the right to object, we will no longer process your personal data unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You can object to the processing of your personal data for direct marketing purposes at any time. This also applies to profiling that is associated with such direct mail. Following the exercise of this right to object, we will not use the personal data for direct marketing purposes.
You have the option of informing us of your objection by telephone, email, fax +49 221 292 417 88 or to the postal address of our company listed at the beginning of this data protection declaration.
6.7 Withdrawal of consent
You have the right to revoke your consent at any time with effect for the future. The revocation of the consent can be made informally by telephone, e-mail, fax +49 221 292 417 88 or to our postal address. The revocation does not affect the legality of the data processing, which took place on the basis of the consent until receipt of the revocation. After receipt of the revocation, the data processing, which was based solely on your consent, will be stopped.
If you are of the opinion that the processing of your personal data is illegal, you can lodge a complaint with a data protection supervisory authority that is responsible for the place of your residence or place of work or for the place of the alleged violation.
7. Status and update of the data protection declaration