If we process your data, you are a "data subject" within the meaning of the GDPR. You have the following rights: right of access, right to rectification, right to restriction of processing, right to erasure, right to information and right to data portability. You also have the right to object, the right to withdraw consent and the right to lodge a complaint with the supervisory authority. You will find details of the individual rights below: 

a. Right to information
You have the right to request confirmation from us as to whether your personal data is being processed.
If we process your personal data, you have the right to receive the following information: 

- the purposes of processing
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration;
- the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data was not collected directly from you, all available information about the origin of the data;
- the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for you. 

If we transfer your data to an international organization or to a third country, you also have the right to request information as to whether suitable guarantees pursuant to Art. 46 GDPR exist in connection with the transfer. b. Right to rectification You have the right to rectification and/or completion of the data that we have stored about you if this data is incorrect or incomplete. We will make the correction or completion without delay. 

c. Right to restriction of processing
Under certain circumstances, you have the right to demand that we restrict the processing of your personal data. At least one of the following conditions must be met for this: 

- You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data,
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or
- You have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override your interests. 

d. Right of deletion
You have the right to demand that we delete your personal data immediately if we are obliged to do so. This is the case if one of the following conditions is met: 

- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing is based according to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR, and where there is no other legal ground for the processing. - You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- Your personal data has been processed unlawfully.
- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
- Your personal data was collected in relation to information society services offered in accordance with Art. 8 (1) GDPR. 

If we have made your personal data public and we are obliged to delete it in accordance with the aforementioned conditions, we will take appropriate measures, including technical measures, taking into account the technologies and implementation costs available to us, to inform other data controllers who process the personal data that you have requested us to delete all links to this personal data or copies or replications of this personal data. 

However, your right to erasure does not apply if the processing is necessary for the following reasons (exceptions): 

- To exercise the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- for reasons of public interest in the area of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the right referred to in (1) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
- for the assertion, exercise or defense of legal claims. 

e. Right to information
If you have exercised your right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of processing of your data, unless this proves impossible or involves a disproportionate effort. 

f. Right to data portability
Under the following conditions, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transmitted to another controller: 

- The processing is based on consent pursuant to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b and
- processing is carried out using automated procedures. 

You have the right to obtain that we transfer your personal data directly to another controller. to the extent that this is technically feasible and the freedoms and rights of other persons are not affected. 

This right to data portability does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. 

g. Right of objection 
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) GDPR. This also applies to profiling based on these provisions.
After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims. 

When we process your personal data in order to Direct advertising you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with direct advertising. 

If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes. 

You have the option of exercising your objection in connection with the use of information society services - notwithstanding Directive 2002/58/EC (ePrivacy Directive) - by means of automated procedures using technical specifications. 

h. Right of withdrawal
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. Withdrawal of consent does not retroactively invalidate the lawfulness of the processing. 

i. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you can assert your right to lodge a complaint in the member state of your place of residence, your place of work or the place of the alleged infringement if you believe that the processing of your personal data violates the GDPR. You can find an overview of the respective state data protection officers and their contact details under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.