Content

Rights of data subjects

Due to the processing of your personal data you are a data subject, so that you have the following rights under the General Data Protection Regulation:

a) Right of access pursuant to Article 15 of the General Data Protection Regulation

You have the right to obtain from the DPMA information about the personal data concerning you, including for example about the purposes of their processing and the period of their storage. The exceptions provided by section 34 of the Federal Data Protection Act (Bundesdatenschutzgesetz) apply.

b) Right to rectification pursuant to Article 16 of the General Data Protection Regulation

You have the right to obtain the rectification of inaccurate personal data concerning you.

c) Right to erasure pursuant to Article 17 of the General Data Protection Regulation

You have the right to obtain from the DPMA the erasure of personal data concerning you. Pursuant to Article 17(1) of the General Data Protection Regulation, the erasure of personal data is subject to, in particular, one of the following grounds: (i) the data are no longer necessary in relation to the purposes for which they were processed, (ii) the data are unlawfully processed or (iii) you have withdrawn your consent. The exceptions provided by Article 17(3) of the General Data Protection Regulation and section 35 of the Federal Data Protection Act apply.

You have the right to prevent, for the time being, the further processing of the personal data concerning you where one of the grounds set out in Article 18(1) of the General Data Protection Regulation applies.

e) Right to data portability pursuant to Article 20 of the General Data Protection Regulation

You have the right to receive from the DPMA the personal data concerning you in a commonly used and machine-readable format in order to have them transmitted to another controller subject to the requirements of Article 20(1) of the General Data Protection Regulation. However, pursuant to Article 20(3), second sentence, of the General Data Protection Regulation, that right does not apply to processing that serves to perform public tasks.

f) Right to object pursuant to Article 21 of the General Data Protection Regulation

You have the right to object, in a particular situation, to further processing of your personal data to the extent processing is based on the performance of public tasks or the protection of public and private interests. Pursuant to section 36 of the Federal Data Protection Act, that right does not apply if a public body is required to carry out processing in accordance with a legal provision.

g) Right to withdrawal of consent under data protection law

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

h) Automated individual decision-making, including profiling pursuant to Article 22 of the General Data Protection Regulation

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

i) Right to lodge a complaint with a supervisory authority pursuant to Article 77 of the General Data Protection Regulation

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation.

Last updated: 13 March 2025