Info

Data subject rights
As a data subject, you have the following rights vis-à-vis the controller with regard to the personal data concerning you, in accordance with the legal provisions:

Right of Withdrawal
Many data processing operations are only possible with your express consent. Insofar as the processing of your data is based on your consent, you have the right to revoke your consent to the processing of your data pursuant to Art. Art. 7 para. 3 GDPR at any time with effect for the future. The revocation of the consent does not affect the legality of the data processing based on the consent until the revocation. The storage of data for billing and accounting purposes remains unaffected by a revocation.

Right to information
In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data concerning you. If such processing is taking place, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR if your data is transferred to third countries.

Right to rectification
In accordance with Art. 16 GDPR, you have the right to request the immediate correction of incorrect personal data concerning you and/or the completion of your incomplete data at any time.

Right to restriction of processing
You have the right to request the restriction of processing (blocking) of your personal data in accordance with Art. 18 GDPR. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
• If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
• If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data—apart from its storage—may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or of a Member State.

Right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. In accordance with Art. 19 GDPR, you have the right to be informed about these recipients upon request.

Right not to be subject to a decision based solely on automated processing, including profiling
In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision

• (a) is necessary for the conclusion or performance of a contract between you and us
• (b) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
• (c) with your express consent.

However, the decisions in the cases referred to in (a) to (c) may not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (a) and (c), we will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.