If your personal data is processed, you become the subject of personal data in the meaning provided by the GDPR, and you have the following rights vis-à-vis the Personal Data Controller:
-
Right to information
You can require the Personal Data Controller to confirm whether your personal data are/will be processed by us, and which data are/will be processed.
For this purpose, the user can send a form-free e-mail to dpo@ventilation-system.com.
If such processing has taken place, you can request the following information from the Personal Data Controller:
-
the purposes for which the personal data is processed;
-
the categories of personal data that are processed;
-
the recipients, or categories of recipients, to which the personal data regarding you have been disclosed or will disclosed in future;
-
the planned storage period of the personal data regarding you or, if specific information in this respect cannot be obtained, the criteria for determining the storage period;
-
the existence of the right to have your personal data regarding yourself corrected or deleted, the right to limit processing by the responsible person, or the right to object to such processing;
-
the existence of the right of appeal to a supervisory authority;
-
all types of information available on the origin of the data if the personal data is not being collected from the subject of personal data in question;
-
the existence of an automated decision-making process, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases – convincing information about the logic involved, as well as the significance and the scope and intended consequences of such processing for the subject of personal data.
You have the right to request information as to whether the personal data relating to you is being transmitted to a third country or to an international organization. In such case, you may also request to be informed of the appropriate guarantees pursuant to Art. 46 of the GDPR, in connection with the transmission of data.
-
Right to rectification
You have the right to request from the Personal Data Controller the making of corrections and/or additions if the personal data processed about you is incorrect or incomplete. The Personal Data Controller must make the corrections immediately.
-
Right to limitation of processing
Under the following conditions, you may request that the processing of personal data relating to you be restricted:
-
if you dispute the accuracy of the personal data regarding you for a period that enables the Personal Data Controller to verify the accuracy of the personal data;
-
the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
-
the Personal Data Controller no longer needs the personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims, or
-
if you have filed an objection to the processing pursuant to Art. 21 para. 1 of the GDPR, and it has not yet been established whether the reasonable considerations of the Personal Data Controller have priority over your considerations.
If the processing of personal data regarding you has been restricted, such data may only be processed - apart from its storage - only with your consent, or for the purpose of asserting, exercising or defending rights, or protecting the rights of another individual or legal entity, or on grounds of important public interest of the European Union or any Member State. If the processing has been limited according to the above-mentioned requirements, you will be notified by the Personal Data Controller before the restriction is lifted.
-
Right to deletion
Obligation to delete
You may request the Personal Data Controller to immediately delete the personal data relating to you, and the Personal Data Controller is obliged to immediately delete this data if one of the following reasons applies:
-
The personal data regarding you is no longer necessary for the purposes for which it was collected or otherwise processed.
-
You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. (a) or Art. 9 para. 2 lit. (a) of the GDPR, and there is no other legal basis for the processing.
-
You file an objection against the processing pursuant to Art. 21 para. 1 of the GDPR, and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 (f) of the GDPR.
-
Your personal data has been processed unlawfully.
-
The deletion of your personal data is necessary to fulfill a legal obligation in accordance with EU law, or the law of the Member States to which the Personal Data Controller is subject.
-
Your personal data has been collected in relation to the services offered by the information society pursuant to Art. 8 para. 1 of the GDPR.
Information given to third parties
If the Personal Data Controller has made your personal data public and is obliged to delete it pursuant to Art. 17 para. 1 of the GDPR, it shall take the appropriate measures, including technical measures, taking into account the available technology and the costs of doing so, to inform the data controllers which process personal data that you as the person in question have requested the deletion of all links to this personal data or of copies or replications of this personal data.
Exceptions
The right to deletion does not exist if processing is necessary
-
to exercise the right to freedom of expression and information
-
to fulfill a legal obligation required for processing under the law of the Union or of the Member States to which the Personal Data Controller is subject, or for the performance of a task in the public interest or in the exercise of official authority vested in the Personal Data Controller;
-
for reasons of public interest in the sphere of public health pursuant to Art. 9 para. 2 lit. (h) and (i) and Art. 9 para. 3 of the GDPR;
-
for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 (1) of the GDPR, to the extent that the right referred to under a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
-
for establishing, exercising or defending legal claims.
-
Right to information
If you have exercised your right, vis-à-vis the Personal Data Controller, to have the data corrected, deleted or its processing restricted, the latter is obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of data or restriction on processing, unless this proves impossible or involves a disproportionate sum in costs. You have the right to require the Personal Data Controller to provide you with information about such recipients.
-
Right to data portability
You have the right to receive your personal data that you have provided to the Personal Data Controller, in a structured, commonly used and machine-readable format. In addition, you have the right to pass this data on to another Personal Data Controller without obstruction from the Personal Data Controller to which the personal data was provided, as long as
-
processing is based on the consent pursuant to Art. 6 para. 1 lit. (a) of the GDPR or Art. 9 para. 2 lit. (a) of the GDPR, or on a contract pursuant to Art. 6 para. 1 lit. (b) of the GDPR, and
-
processing is carried out using automated methods.
Within the framework of exercising this right, you also have the right to request that your personal data be transferred directly from one Personal Data Controller to another personal data controller, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest, or in the exercise of official authority vested in the Personal Data Controller.
-
Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data under Article 6(1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions.
The Personal Data Controller halts the processing of your personal data, unless he can prove compelling and legitimate grounds for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is processed for direct marketing purposes, you are entitled to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, if it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
You have the opportunity to exercise your right of objection in the context of the use of information society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
-
Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the time of the revocation.
The legality of data processing prior to your revocation remains unchanged.
-
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that produces legal effect upon you or significantly impairs you in a similar manner. This does not apply if the decision
-
is necessary for the conclusion or performance of a contract between you and the Personal Data Controller,
-
is allowed by the law of the Union or of the Member States to which the Personal Data Controller is subject, and that law contains the appropriate measures to safeguard your rights, freedoms and legitimate interests, or
-
takes place with your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 lit. (a) or (g) of the GDPR applies and the appropriate measures have been taken to protect rights, freedoms and your legitimate interests.
In the cases referred to in (1) and (3), the Personal Data Controller shall take adequate measures to safeguard rights, freedoms and your legitimate interests, including at least the right to obtain the intervention of the Personal Data Controller, to express one’s own point of view and to challenge decisions.
-
Right of appeal to a supervisory body
Without prejudice to any other administrative or judicial remedy, you have the right to file an appeal to a supervisory authority, in particular in the Member State where you reside, work, or in the place of the suspected infringement, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint has been lodged will inform the complainant of the status and results of consideration of the complaint, including the possibility of a judicial remedy under Art. 78 of the GDPR.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information
Address:
Königstrasse 10a 70173 Stuttgart
Postal address:
P.O. Box 10 29 32 70025 Stuttgart, GERMANY
Phone: 0711/615541-0 Fax: 0711/615541-15. E-mail: poststelle@lfdi.bwl.de
Contact Us
English
Deutsch
Русский
Українська
Polski
Latviešu
Español
Svenska
Suomi
Sign in
Registration
