a) Right of objection
You may object to the processing of your personal data insofar as it is based on Article 6(1) sentence 1 f) GDPR (“legitimate interests”) (Article 21 GDPR). Your personal data will no longer be processed unless there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal rights/claims. To exercise the right of objection, it is sufficient to send a short message to the above contact details.
b) Rights of data subjects
In addition, you may – if the applicable legal requirements are met and subject to any restrictions pursuant to sections 9, 10 of the Data Protection Act of the State of Baden-Württemberg (LDSG BW) – make use of the following rights, which you can exercise by contacting us at any time using the aforementioned data:
Right of access pursuant to Article 15 GDPR: You have the right to obtain information about your personal data processed by us (the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and the intended effects of such processing concerning you, as well as your right to be informed about the guarantees existing pursuant to Article 46 of the GDPR if your data is transferred to third countries) and to a copy of the data;
Right of rectification pursuant to Article 16 GDPR: You have the right to have any incorrect data relating to you corrected without delay and/or to have any incomplete data stored by us completed;
Right to erasure pursuant to Article 17 GDPR: You have the right to demand the erasure of your personal data if the requirements of Article 17(1) GDPR are met. However, this right shall particularly not exist if processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal rights/claims;
Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data that you dispute is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal rights/claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection on the grounds of your particular situation as long as it has not yet been determined whether our legitimate grounds outweigh your interests;
Right to be informed pursuant to Article 19 GDPR: If you have exercised your right of any rectification or erasure of personal data or restriction of processing vis-à-vis the controller, the controller is required to communicate any rectification, erasure or restriction of processing of personal data to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to obtain information about those recipients.
Right to data transferability pursuant to Article 20 GDPR: You have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to require its transmission to another controller as long as this is technically feasible;
c) Right to lodge a complaint
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to appeal to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, in accordance with Article 77 of the GDPR, without prejudice to any other administrative or judicial remedy. The supervisory authority with jurisdiction over us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Last revised: October 2021