10. Rights of the data subject
10.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) with respect to the controller with regard to the processing of your personal data, which we will inform you about below:
- Right of access in accordance with Art. 15 GDPR:
In particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if not collected by us from you, the existence of automated decision-making including profiling and, where applicable, substantive information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when forwarding your data to non-member states;
- Right to correction in accordance with Art. 16 GDPR:
You have the right to immediate correction of incorrect data concerning you and/or completion of incomplete data stored by us;
- Right to deletion in accordance with Art. 17 GDPR:
You have the right to request the deletion of your personal data if the prerequisites of Art. 17(1) GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for the establishment, assertion or defence of legal claims;
- Right to restriction of processing in accordance with Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified, if you reject the deletion of your data due to impermissible data processing and instead request the restriction of the processing of your data, if you require your data for the establishment, assertion or defence of legal claims, once we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;
- Right to information in accordance with Art. 19 GDPR:
If you have asserted the right to correction, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate amount of effort. You have the right to be informed of these recipients.
- Right to data portability in accordance with Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller, if technically feasible;