If we process any of your personal data, you are the data subject within the meaning of the GDPR. You are therefore entitled to the following rights with respect to us:
1. Right of access (Article 15 of the GDPR)
You have the right, at any time and at no cost to yourself, to request information about your personal data stored by us. To prevent abuse, you will need to provide identification.
2. Right to rectification (Article 16 of the GDPR)
You have the right to obtain from us, at any time, the rectification and/or completion of your personal data processed by us if such personal data concerning you are inaccurate or incomplete.
3. Right to erasure – right to be forgotten (Article 17 of the GDPR)
You have the right to obtain the erasure of your personal data processed by us. This specifically applies if the data are no longer necessary in relation to the purpose of processing, consent which was required has been withdrawn and where there is no other legal ground for the processing, or our data processing is unlawful. In this case we will erase your personal data without undue delay within the framework of the law.
4. Right to restriction of processing (Article 18 of the GDPR)
You have the right to obtain the restriction of processing of your data.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing pursuant to the above, you must be informed by the controller before the restriction of processing is lifted.
5. Right to notification (Article 19 of the GDPR)
If you have exercised the right to obtain from the controller the rectification or erasure of personal data or restriction of processing, the controller is obliged to communicate this rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
The controller shall inform you about those recipients if you request it.
6. Right to data portability (Article 20 of the GDPR)
You have the right to obtain from us in a machine-readable format the personal data concerning you which is stored by us.
7. Right to object (Article 21 of the GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) of the GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the event that we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
8. right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of personal data relating to you infringes the GDPR. You can exercise this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg the competent supervisory authority is:
Baden-Württemberg Commissioner for Data Protection and Freedom of Information
Tel.: 0711/61 55 41 – 0
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.