7. Rights of the data subject
7.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) with respect to the controller with regard to the processing of your personal data, which we will inform you about below:
Right of access in accordance with Art. 15 UK-GDPR:
In particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if not collected by us from you, the existence of automated decision-making including profiling and, where applicable, substantive information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the guarantees in accordance with Art. 46 UK-GDPR when forwarding your data to non-member states;
Right to correction in accordance with Art. 16 UK-GDPR:
You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data stored by us;
Right to deletion in accordance with Art. 17 UK-GDPR:
You have the right to request the deletion of your personal data if the prerequisites of Art. 17(1) UK-GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for the establishment, assertion or defence of legal claims;
Right to restriction of processing in accordance with Art. 18 UK-GDPR:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified, if you reject the deletion of your data due to impermissible data processing and instead request the restriction of the processing of your data, if you require your data for the establishment, assertion or defence of legal claims, once we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;
Right to information in accordance with Art. 19 UK-GDPR:
If you have asserted the right to correction, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate amount of effort. You have the right to be informed of these recipients.
Right to data portability in accordance with Art. 20 UK-GDPR:
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, if technically feasible;
Right to withdraw consent granted in accordance with Art. 7(3) UK-GDPR:
You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data in question immediately if further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to revocation.
Right to lodge a complaint in accordance with Art. 77 UK-GDPR:
If you believe that the processing of personal data concerning you is in violation of the UK-GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged violation, without prejudice to any other administrative or judicial remedy.
7.2 Right to object in accordance with Art. 21 UK-GDPR:
If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation. If you exercise your right to object, we will terminate the processing of the data concerned. However, further processing is reserved if we can prove compelling legitimate grounds for processing that override your interests, fundamental rights and freedoms, or if the processing serves the establishment, assertion or defence of legal claims. If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above. If you exercise your right to object, we will terminate the processing of the data concerned for direct marketing purposes.