Privacy Policy

Within the scope of our data processing, personal data relating to you will be processed. You are entitled to the rights from the third chapter of the GDPR against our company.

We observe the rights to information, correction, restriction of processing, deletion or transferability of your personal data. You can assert these rights as follows:

Right of access

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have the right to access this personal data and to be informed of the following:

(a) the purposes of processing;

(b) the categories of personal data processed;

(c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;

(d) if possible, the envisaged duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;

(e) the existence of a right to obtain the rectification or erasure of personal data concerning you, or the restriction of processing by the controller, or a right to object to such processing;

(f) the existence of a right of appeal to a supervisory authority;

(g) if the personal data are not collected from the data subject, any available information on the origin of the data;

(h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) and, at least in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data are transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

We will provide you with a copy of the personal data that is the subject of the processing. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request for access electronically, we must provide the information in a commonly used electronic format unless you specify otherwise.

The right to receive a copy must not affect the rights and freedoms of other people.

Right to rectification

You also have the right to request that inaccurate personal data relating to you be rectified without undue delay. Considering the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.

Right to erasure (“right to be forgotten”)

You also have the right to request that we erase personal data relating to you without undue delay and we are obliged to erase personal data without undue delay if one of the following reasons applies:

(a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

b) You withdraw your consent on which the processing was based pursuant to Article 6 I lit. a DS-GVO or Article 9(2)(a) and there is no other legal basis for the processing.

c) You object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2).

(d) The personal data have been processed unlawfully.

(e) erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

(f) the personal data have been collected in relation to information society services offered in accordance with Article 8(1).

(Where we have made the personal data public and we are obliged to erase it pursuant to paragraph 1, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers processing the personal data that you have requested the erasure of all links to, or copies or replications of, those personal data. This does not apply insofar as the processing is necessary a) for the exercise of the right to freedom of expression and information; b) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; (c) for reasons of public interest in the field of public health pursuant to Article 9(2)(h) and (i) and Article 9(3); (d) for archiving, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Article 89(1), where the right referred to in paragraph 1 is likely to make impossible or seriously prejudice the achievement of the purposes of such processing; or (e) for the establishment, exercise or defence of legal claims.

Right to restriction of processing

(1) You have the right to request us to restrict processing if

a) the accuracy of the personal data is contested by you, for a period which allows us to verify the accuracy of the personal data;

b) the processing is unlawful and you object to the erasure of the personal data and request the restriction of the use of the personal data instead;

(c) we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims; or

(d) you have objected to the processing pursuant to Article 21(1) as long as it has not yet been determined whether our legitimate grounds override yours.

(2) Where processing has been restricted in accordance with paragraph 1, those personal data may be processed, apart from being stored, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN

(3) A data subject who has obtained a restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is rescinded.

Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing

We shall notify all recipients to whom personal data has been disclosed of any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. We will inform you of these recipients if you request so.

Right to data portability

(1) You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that

(a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and

(b) the processing is carried out by automated means.

(2) When exercising your right to data portability under paragraph 1, you have the right to obtain that the personal data be transferred directly from us to another controller, where technically feasible.

(3) The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(4) The right referred to in paragraph 2 shall not affect the rights and freedoms of other persons.

You also have the right to consult our Data Protection Officer about the above rights and about any matter relating to the processing of your personal data.

Right to complain

You also have the right to lodge a complaint with the relevant supervisory authorities.

Right to object

Pursuant to Article 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1), first sentence, point (e) GDPR (processing in the public interest) or on Article 6(1), first sentence, point (f) GDPR (processing for the purposes of legitimate interests). 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.