Your Data Protection Rights

You have the right to request information from us as to whether we are processing your data, and if so, which data. The information provided includes the following details:

• the purpose of processing;
• the categories of personal data that are processed;
• the persons or the categories of the persons to whom your personal data was or will be disclosed;
• for how long your personal data will be stored;
• the existence of further rights such as your right of appeal with data protection authorities;
• all available information about the origin of the data, if they were not collected from you;
• the existence of automated decision-making.

If you feel as though your personal data are incorrect or incomplete, you have the right to ask us to correct them at any time using the online form. This applies in particular to any processing of personal details that you cannot manage yourself.

You can assert your right of erasure (“Right to be forgotten”) if there is no longer a legal basis for the processing of your personal details. In concrete terms, this means that you can request that we delete your personal data immediately, if one of the following reasons applies:

• the reasons for which your personal data were collected or otherwise processed no longer apply;
  
• if you have withdrawn your consent, and there is no other legal basis for your personal data to be processed;
• you have appealed against the processing of your personal data, and there is no overriding legal basis for the processing;
• your personal data were unlawfully processed;
• the deletion of the personal data is required in order to fulfil a legal obligation in accordance with EU law or the law of the member states;
• your personal data was collected in relation to services offered by the information society. (The consent of a child or their representative is withdrawn.)

Data hygiene is of the utmost importance to us. That’s why, on principle, we delete or anonymise personal data as soon as the purpose for the data processing ceases. Our data processing systems have an integrated deletion concept so that your personal data are automatically deleted or anonymised after the expiry of the respective retention period.

If the deletion of your data is delayed, you have the right to request restricted processing of your data, provided that one of the following reasons applies:

• you dispute the accuracy of your personal data;
• the processing is illegal and you have refused to have your personal details deleted and instead have requested the restriction of processing;
• we no longer need your personal data for processing purposes, but you need the data yourself for the establishment, exercise or defence of legal claims;
• you have appealed against the processing of your personal data, and it is not yet clear whether we have legitimate grounds for further use of your data.

If the processing was restricted, then, apart from being stored, these personal data can only be processed with your consent; or for the establishment, exercise or defence of legal claims; or for the protection of the rights of another natural or legal person; or for reasons pertaining to an important public interest of the Union or a Member State.

In the event that the restriction of processing you requested is overruled, you will be notified in advance.

Data transferability means that upon your request, we transfer your personal data to you in a structured, common and machine-readable format, so that you can send them to another responsible party without restriction (for example, of a copyright or patent law nature).

You can assert your right of data portability under the following conditions:

• you have informed us of the assertion of your right and
  
• you have actively provided us with the data and
• the data are handled via an automated process and
• the processing of the data is carried out on the legal basis of your consent or out of the necessity to fulfil a contract between you and the company.

You can exercise your right to appeal against the processing of your personal data for one of the following reasons:

• your personal data were processed on the legal basis of a legitimate, overriding interest or
  
• on the legal basis of a task carried out in the public interest or in the exercise of official authority or
• for the purposes of direct marketing or
• for business or historical research or statistical purposes.

You will receive information about your rights as an affected person immediately, or no later than one month after we have received the ​online form on data subject rights wherein you can exercise your data subject rights. Please note: this time period may be extended by up to two months if it is deemed necessary based on the complexity and number of requests. In any case, you will receive a response from us within one month, which, if applicable, may also be a notification of the extension of the response period indicating the corresponding reasons.