IX. Data subject rights
Insofar as we process personal data, the data subjects are entitled to the following rights:
Right to object
Insofar as processing is based on Art. 6 (1) sentence 1 lit. f) GDPR (“legitimate purposes”), the data subject may object to the processing of his or her personal data in accordance with Art. 21 GDPR.
We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
The processing of personal data for advertising/marketing purposes can be objected to at any time – without giving reasons. The data concerned will then no longer be processed for advertising/marketing purposes.
Revocation of consent
Insofar as personal data has been provided to us on the basis of consent, data subjects have the right to revoke their consent under data protection law at any time without stating reasons by sending a message to the office named in Section I. This applies in particular to consent for advertising/marketing purposes. This applies in particular to consent to the processing of personal data for e-mail and telephone marketing. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the declared consent until the revocation.
Further data subject rights
In addition, data subjects may – if the respective legal requirements are met – claim the following rights:
- Right of access to personal data concerning them, the purposes of processing, the categories of data and their origin if the data were not collected directly, the categories of recipients of personal data, the planned storage period and the rights of data subjects (cf. Art. 15 GDPR);
- Right to rectification of inaccurate or incomplete personal data, insofar as the data about the data subject is not (or is no longer) accurate or incomplete (cf. Art. 16 GDPR);
- Right to erasure of personal data, in particular if the data is no longer necessary for the purposes for which it was collected and we are not obliged to retain the data due to legal or contractual requirements (cf. Art. 17 GDPR);
- Right to restrict the processing of personal data (cf. Art. 18 GDPR);
- Right to data portability with regard to the personal data provided to us by the data subject in a common, machine-readable format or to the transfer of such data to another controller (cf. Art. 20 GDPR).
In order to exercise the aforementioned rights, certain conditions must be met. For a better understanding and easier readability of the data subject rights, we have summarized them here in parts. If necessary, please refer to the original text or contact our data protection officer directly.
Right to lodge a complaint with the supervisory authority
Data subjects also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state in which the data subject has his or her habitual residence or place of work or in which an alleged violation of applicable data protection laws has occurred (cf. Art. 77 of the GDPR). The supervisory authority responsible for us is the:
State Commissioner for Data Protection and Freedom of Information
Baden-Württemberg
Lautenschlagerstrasse 20
70173 Stuttgart
E-mail: poststelle@lfdi.bwl.de.