You have the right at any time to access, rectification, erasure or restriction of processing of your stored data, the right to object to processing, the right to data portability and the right to lodge a complaint, subject to the requirements of data protection law.

Right of access:

You may request information from us as to whether and to what extent we process your data.

Right to rectification:

If we process incomplete or inaccurate data concerning you, you may request its rectification or completion at any time.

Right to erasure:

You may request the erasure of your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests requiring protection. Please note that there may be reasons preventing immediate erasure, such as statutory retention obligations. Irrespective of whether you exercise your right to erasure, we will erase your data promptly and completely unless a contractual or statutory retention obligation prevents us from doing so.

Right to restriction of processing:

You may request restriction of the processing of your data if:

• you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data;

• the processing of the data is unlawful, but you oppose its erasure and request restriction of its use instead;

• we no longer need the data for its intended purpose, but you require it for the establishment or defence of legal claims; or

• you have objected to the processing of the data.

Right to data portability:

You may request that we provide you with the data you have supplied to us in a structured, commonly used and machine-readable format and that you may transmit this data to another controller without hindrance from us, provided that:

• we process this data on the basis of consent given by you and capable of being withdrawn, or for the performance of a contract between us; and

• the processing is carried out by automated means.

Where technically feasible, you may request that we transmit your data directly to another controller.

Right to object:

Where we process your data on the basis of legitimate interests, you may object to such processing at any time; this also applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object to the processing of your data for direct marketing purposes at any time without stating reasons.

Right to lodge a complaint:

If you believe that our processing of your data infringes German or European data protection law, please contact us so that we can clarify any outstanding questions. You also have the right to contact the supervisory authority responsible for you, namely the relevant State Office for Data Protection Supervision.

If you wish to exercise any of the above rights against us, please contact our Data Protection Officer. In case of doubt, we may request additional information to confirm your identity.