13.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:

• Right of access pursuant to Article 15 of the GDPR: In particular, you have the right to obtain information regarding your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the significance for you and the intended consequences of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries;

• Right to rectification pursuant to Article 16 of the GDPR: You have the right to have inaccurate data concerning you rectified without delay and/or to have incomplete data stored by us completed;

• Right to erasure under Article 17 of the GDPR: You have the right to request the erasure of your personal data where the conditions set out in Article 17(1) of the GDPR are met. However, this right does not apply in particular where processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

• Right to restriction of processing under Article 18 of the GDPR: You have the right to request the restriction of the processing of your personal data whilst the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data on the grounds of unlawful processing and instead request the restriction of the processing of your data; if you require your data to assert, exercise or defence of legal claims, after we no longer require this data following the fulfilment of the purpose, or if you have lodged an objection on grounds relating to your particular situation, whilst it remains to be determined whether our legitimate grounds override yours;

• Right to be informed pursuant to Article 19 of the GDPR: If you have exercised your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.

• Right to data portability pursuant to Article 20 of the GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible;

• Right to withdraw consent pursuant to Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of your data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data without delay, unless further processing can be based on a legal ground that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal;

• Right to lodge a complaint pursuant to Article 77 of the GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

13.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. 

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. FURTHER PROCESSING REMAINS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. 

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.