In order to give you more control over the processing of your personal data, you have various rights These rights are inter alia provided in articles 15-22 GDPR.
You have the following rights:
- The right of access to the processed personal data (art. 15 GDPR):
You have the right to obtain our confirmation as to whether or not your personal data is being processed, and, where that is the case, to obtain access to the personal data and the following information:
a) The purposes of the processing;
b) The categories of personal data concerned;
c) The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making.
If we cannot give you access to your personal data (for example due to legal obligations), we will let you know why this is not possible.
You can also obtain a free copy of the processed personal data in an understandable form. Please note that we may charge a reasonable fee to cover our administrative costs for any additional copies you request.
- The right to be forgotten or to request erasure of personal data (art. 17 GDPR)
In certain cases you can ask us to delete your personal data. Please also note that your right to be forgotten is not absolute. We have the right to continue to store your personal data when this is necessary for, among other things, the execution of the agreement, compliance with a legal obligation or the establishment and exercise or substantiation of a legal claim. We will inform you in more detail about this in our response to your request.
- The right to correction and addition (Art. 16 GDPR):
If your personal data is incorrect, outdated or incomplete, you can ask us to have these inaccuracies or incompleteness corrected.
- The right to data portability (art. 20 GDPR):
You also have the right, under certain conditions, to have us transfer the personal data that you have provided to us for the execution of the agreement or for which you have given permission, to another controller. As far as technically possible, we will provide your personal data directly to the new controller.
- Right to restriction of proccesing (art. 18 GDPR):
If one of the following applies, you can request us to restrict the processing of your personal data:
a) you contest the accuracy of that personal data (in which case its use will be limited for a period that allows us to verify the accuracy of the personal data);
b) the processing of your personal data is unlawful;
c) we no longer need your personal data for the original processing purposes, but you need them for the establishment, exercise or defense of legal claims;
d) As long as no decision has been made regarding the exercise of your right to object to the processing, you may request the restriction of the use of your personal data.
- The right to object (art. 21 GDPR):
You can object to the processing of your personal data on the basis of your special situation, if this processing is part of our legitimate interest or in the performance of a task of general interest. In that case, we will cease processing your personal data unless we can demonstrate compelling and legitimate grounds for the processing that override yours, or where the processing of the personal data is related to the establishment, exercise or defense of legal claims.
- Automate individual decision-making, including profiling (art. 22 GDPR):
You have the right not to be subject to a decision based solely on automated data processing that significantly affects you or has legal effects and is made without substantial human intervention.
You cannot rely on this right in three situations:
a) if a law allows this (for example to prevent tax fraud);
b) if the decision-making is based on the explicit consent of the data subject; or
c) if this is necessary for the conclusion or execution of an agreement (please note that we always assess on a case-by-case basis whether there are less privacy-invasive methods to conclude or execute the agreement).
- The right to withdraw your consent (art. 7 GDPR):
When your personal data is processed on the basis of your consent, you can withdraw this consent at any time upon simple request and free of charge.