a) Right to confirmation
Every data subject has the right granted by the European legislator of directives and regulations to request confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right of confirmation, they can contact our data protection officer or another employee of the controller at any time.
b) Right to information
Every person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to receive free information from the controller about the personal data stored about him and a copy of this information. In addition, the European legislator has provided the data subject with information on the following information:
the processing purposes, the categories of personal data that are processed, the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular in the case of recipients in third countries or international organizations, if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining this period the existence of a right to correct or delete the personal data concerning them personal data or to restrict processing by the controller or a right to object to this processing, the existence of a right of appeal to a supervisory authority the existence of automated decision-making, including profiling, in accordance with Article 22 paragraphs 1 and 4 of the GDPR and — at least in these cases — meaningful information about the logic involved and the intended consequences of such processing for the data subject
In addition, the data subject has the right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate guarantees in connection with the transfer.
If a data subject wishes to exercise this right of information, they can contact our data protection officer or another employee of the controller at any time.
c) Right to rectification
Every person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to request the immediate correction of incorrect personal data concerning him or her. In addition, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data — including by means of a supplementary statement.
If a data subject wishes to exercise this right of rectification, they can contact our data protection officer or another employee of the controller at any time.
d) Right to delete (right to be forgotten)
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to request that the person responsible delete the personal data concerning him or her immediately, provided that one of the following reasons applies and insofar as processing is not necessary:
The personal data was collected or otherwise processed for purposes for which they are no longer necessary. The data subject withdraws consent on which processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is no other legal basis for processing. The data subject objects to processing in accordance with Article 21 (1) of the GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Article 21 (2) of the GDPR. The personal data was processed unlawfully. The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject. The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the WALZEN IRLE GmbH, he or she may at any time contact our Data Protection Officer or another employee of the controller. The Data Protection Officer of the WALZEN IRLE GmbH or another employee shall promptly ensure that the erasure request is complied with immediately.
If the personal data has been made public by WALZEN IRLE GmbH and our company, as the controller, is obliged to delete the personal data in accordance with Article 17 (1) of the GDPR, WALZEN IRLE GmbH shall take appropriate measures, including technical measures, to inform other data controllers who process the published personal data that the data subject has been informed by these others for the Data controller has requested the deletion of all links to this personal data or of copies or replications of this personal data, unless processing is necessary. The Data Protection Officer of the WALZEN IRLE GmbH or another employee will arrange the necessary measures in individual cases.
e) Right to restrict processing
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to demand that the person responsible restrict processing if one of the following conditions is met:
The accuracy of the personal data is disputed by the data subject, for a period of time which enables the person responsible to verify the accuracy of the personal data. The processing is unlawful, the data subject refuses to delete the personal data and instead demands that the use of the personal data be restricted. The controller no longer needs the personal data for processing purposes, but the data subject needs them to assert, exercise or defend legal claims. The data subject has objected to processing in accordance with Article 21 (1) of the GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the WALZEN IRLE GmbH, he or she may at any time contact our Data Protection Officer or another employee of the controller. The Data Protection Officer of the WALZEN IRLE GmbH or another employee will arrange the restriction of the processing.
f) Right to data portability
Every person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to receive personal data concerning him or her, which has been provided by the data subject to a controller, in a structured, common and machine-readable format. It also has the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data has been provided, provided that the processing is based on consent in accordance with Article 6 (1) letter a GDPR or Article 9 (2) letter a GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or in The exercise of public authority is carried out, which has been delegated to the person responsible.
Furthermore, when exercising their right to data portability in accordance with Article 20 (1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another controller, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
In order to assert the right to data portability, the data subject may at any time contact the Data Protection Officer designated by the WALZEN IRLE GmbH or another employee.
g) Right to object
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them carried out on the basis of Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
The WALZEN IRLE GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the WALZEN IRLE GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling, insofar as it is associated with such direct advertising. If the data subject objects to WALZEN IRLE GmbH to processing for direct marketing purposes, WALZEN IRLE GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the WALZEN IRLE GmbH for scientific or historical research purposes, or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may directly contact the Data Protection Officer of the WALZEN IRLE GmbH or another employee. Notwithstanding Directive 2002/58/EC, the data subject is also free to exercise his right of objection in connection with the use of information society services by means of automated procedures using technical specifications.
h) Automated decisions in individual cases, including profiling
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations not to be subject to a decision based exclusively on automated processing — including profiling — which has legal effect against him or similarly significantly affects him, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) due to Union or Member State legislation to which the controller is subject is permitted and this legislation contains appropriate measures to protect the rights and freedoms and legitimate interests of the data subject or (3) is carried out with the express consent of the data subject.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is made with the express consent of the data subject, WALZEN IRLE GmbH shall take appropriate measures to protect the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain intervention by a person on the part of the person responsible, to state its own position and to challenge the decision.
If the data subject wishes to assert rights with regard to automated decisions, he or she can contact our data protection officer or another employee of the controller at any time.
i) Right to withdraw consent under data protection law
Every person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they can contact our data protection officer or another employee of the controller at any time.
