Your rights under the General Data Protection Regulation

We are required by law to inform you about the rights you have under the General Data Protection Regulation ("GDPR"). The relevant rights are explained below. You are entitled to these rights only where the requirements as set forth in the applicable data protection provisions are satisfied. The explanations below will not grant you any additional rights.

1. Right to access

You have the right to obtain confirmation from us as to whether or not we process personal data concerning you, and, where that is the case, access to the personal data and to further information as set forth in detail in Art. 15 GDPR.

2. Right to rectification

You have the right to ask us to correct any inaccurate personal data concerning you without undue delay and to complete incomplete data, Art. 16 GDPR.

3. Right to erasure

You have the right to ask us to erase personal data concerning you without undue delay where one of the grounds set forth in detail in Art. 17 GDPR applies, e.g., where your personal data is no longer necessary in relation to the purpose for which it was collected.

4. Right to restrict processing

You have the right to ask us to restrict processing where one of the requirements set forth in Art. 18 GDPR is satisfied, e.g., you have objected to the processing, whilst we consider your request.

5. Right to data portability

Under certain circumstances, you have the right to receive your personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it, and, where technically feasible, you have the right to ask us to transmit it to another controller, Art. 20 GDPR.

6. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that our processing of the personal data relating to you infringes the GDPR, Art. 77 GDPR. You may lodge such a complaint with a supervisory authority in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. For the contact details of the supervisory authorities in Germany, please click here.

7. Right to withdraw consent

If you have given consent to our processing of your personal data, you may withdraw such consent at any time with effect for any future processing. This applies also to any consent to data processing given by you before the GDPR entered into force.

8. Right to object

In addition, you have the right to object on grounds relating to your particular situation at any time to processing of personal data concerning you where such processing is based on Art. 6 (1) (e) or (f) GDPR. If such objection is made, we will stop processing the personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is necessary to assert, enforce or defend legal claims (Art. 21 GDPR).
Where we process your personal data for direct marketing purposes (e.g., by e-mail), you have the right to object at any time to the use of your personal data for such purposes. This applies also to profiling to the extent that it is related to direct marketing. Profiling means the use of personal data to analyze and predict certain personal aspects (e.g., for interest-based advertising).

Translation by law firm Weil, Gotshal & Manges LLP