2. Your rights as data subject
If your personal data are processed, you are a data subject as defined in the GDPR and you have the following rights with respect to the Controller:
Right of objection
You have the right to file an objection at any time against processing of your personal data, carried out on the basis of Art. 6 (1) sentence 1 lit. e) or f) GDPR, for reasons resulting from your particular situation. This also applies to any Profiling based on these provisions.
The Controller will then no longer process your personal data, unless he/she can demonstrate compelling reasons for the processing warranting protection, and these prevail over your interests, rights and liberties, or if the processing is for the purpose of asserting, exercising or defence of legal entitlements.
If your personal data are processed in order to carry out direct advertising, you have a right to file an objection at any time against the processing of your personal data for the purpose of such advertising. This also applies to Profiling insofar as it is connected with such direct advertising.
If you object to processing for the purpose of direct advertising, your personal data will no longer be processed for these purposes.
In connection with the use of services of the information society and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right of objection via automated procedures that use technical specifications.
You can demand information on whether we process personal data concerning you. If such processing is carried out, you can demand further information on this processing, in particular the purposes, categories of personal data, recipients or the categories of recipients, planned storage duration etc.
You have a right to correction and/or completion of your data
You can demand the restriction of the processing of your personal data under certain circumstances: If the processing of your personal data has been restricted, these data — with the exception of their storage — can only be processed with your consent, or for the assertion, exercise or defence of legal entitlements, or to protect the rights of another natural or legal person, or for reasons of an important public interest on the part of the EU or a member state.
Under certain circumstances, you can demand the erasure of the personal data concerning you. If the Controller has made your personal data public and is obliged to erase them, he/she shall, with consideration for the available technology and implementation costs, take appropriate measures, including of a technical nature, to inform Controllers, responsible for the data processing and processing the personal data, that you, as data subject, have demanded that they delete all links to these personal data, or have demanded the deletion of copies or replications of these personal data.
If you have asserted the right of rectification, erasure or restriction of processing with respect to the Controller, the latter is obliged to inform all recipients, to whom your personal data have been disclosed, of this rectification or erasure of the data or of the restriction of processing, unless this proves to be impossible or involves disproportionate expense. You have a right with respect to the Controller to be informed of these recipients.
You have a right to receive your personal data, provided by you, in a structured, commonly-used and machine-readable format. You also have a right to insist that these data be transferred directly to another controller, insofar as this is technically possible. Liberties and rights of other persons must not be impaired as a result.
You have the right to revoke your data protection declaration of consemt at any time. Revocation of the consent shall not affect the legality of the processing, carried out on the basis of the consent, up until the revocation.
Within certain limits, you have the right not to be subjected to a decision, based exclusively on automated processing — including Profiling — that is legally effective against you or that significantly impairs you in a similar manner.