a) Right to confirmation Each person concerned has the right, granted by the European directive- and regulation giver, to request a confirmation from the party responsible for the processing of whether respective personal data are processed . In case that a person concerned would like to claim this right to confirmation, this person may contact an employee of the party responsible for the processing at any time.
b) Right to information Each person concerned by the processing of personal data has the right, granted by the European directive- and regulation giver, to receive free information at any time from the party responsible for the processing on the personal data stored about this person, and to get a copy of this information. Moreover, the European directive- and regulation giver has granted the following information to the person concerned:
- the purpose of processing
- the category of personal data which are processed
- recipients or categories of recipients to whom the personal data have been disclosed or will be disclosed still, especially with recipients in Third Countries or with international organizations.
- if possible, the scheduled period, for which the personal data are stored, or, if this is not possible, the criteria for determining this period.
- the existence of a right to correction or deletion of the respective personal data, or to restriction of processing by the responsible or a right to objection against this processing
- the existence of a right to appeal to a supervisory authority
- in case that the personal data are not collected from the person concerned: all information available on the origin of the data
- the existing of automated decision-making including profiling acc. to article 22 paragraphs 1 and 4 DS-GVO (GDPR) and — at least in these cases — meaningful Information on the logic involved as well as on the scope, and intended effect of such processing for the person concerned.
Moreover, the person concerned has the right to information about whether personal data have been transmitted to a Third Country or an international organization. If this is the case, the person concerned has, furthermore, the right to information on suitable guarantees in the context of the transmission.
In case that a person concerned would like to claim this right to information, he/she may contact an employee of the party responsible for the processing at any time.
c) Right to correction Each person concerned by the processing of personal data has the right, granted by the European directive- and regulation giver, to require immediate correction of respective incorrect personal data. Moreover, the person concerned has the right, considering the purpose of processing, to request the completion of incomplete personal data - also by means of a supplementary statement.
In case that a person concerned would like to claim this right to correction he/she may contact an employee of the party responsible for the processing at any time
d) Right to deletion (right to be forgotten) Each person concerned by the processing of personal data has the right, granted by the European directive- and regulation giver, to require immediate deletion of the respective personal data from the party responsible, as far as one of the following reasons applies, and a processing is not necessary:
- The personal data have been collected for such purposes or been processed otherwise for which they are no longer necessary.
- The person concerned revokes the consent, on which die processing acc. to article 6, paragraph 1 letter a DS-GVO (GDPR) or article 9, paragraph 2 letter a DS-GVO (GDPR) was based, and there is no other legal basis for the processing.
- The person concerned objects to the processing acc. to article 21, paragraph 1 DS-GVO (GDPR), and there are no priority legitimate reasons for the processing, or the person concerned objects to the processing acc. to article 21, paragraph 2 DS-GVO (GDPR).
- The personal data have been processes unlawfully.
- The deletion of personal data is required to fulfill a legal obligation acc. to European Union law or the law of member states, to which the person responsible is subject.
- The personal data have been collected in relation to the offered services of the information society acc. to article 8. paragraph 1 DS-GVO (GDPR).
As far as one of the above-mentioned reasons applies, and the person concerned would like to arrange deletion of the personal data, stored with Adolf Thies GmbH & Co. KG, he/she may contact an employee of the party responsible for the processing at any time. This employee will make sure that the requested deletion is carried out immediately.
In case that the personal data have been disclosed by Adolf Thies GmbH & Co. KG, and our company is obliged to delete the personal data as party responsible acc. to article 17, paragraph 1 DS-GVO (GDPR), Adolf Thies GmbH & Co. KG will take appropriate measures, also of technical kind, considering available technologies and implementation costs, in order to inform other parties responsible for the data processing, who are processing the disclosed personal data, that the person concerned has requested from these other parties responsible for the data processing the deletion of all links to the personal data or of copies or replications of the personal data, as far as the processing is not necessary. The employee of Adolf Thies GmbH & Co. KG will arrange the necessary in individual cases.
e) Right to Limitation of Processing Each person concerned by the processing of personal data has the right, granted by the European directive- and regulation giver, to request from the party responsible the limitation of processing, provided that one of the following conditions is given:
- The person concerned denies the correctness of the personal data for a period which allows the party responsible to check the correctness of the personal data.
- The processing is unlawful, the person concerned refuses a deletion of the personal data, and, instead, requests the limitation of using the personal data.
- The personal data are no longer necessary for the party responsible for the purpose of processing, the person concerned, however, requires them for assertion, exercise or defense of legal claims.
- The person concerned objects against the processing acc. to article 21, paragraph 1 DS-GVO (GDPR), and it is not clear yet whether the legitimate reasons of the party responsible prevail over those of the person concerned
As far as one of the above-mentioned conditions is given, and a person concerned would like to request the limitation of the personal data, stored with Adolf Thies GmbH & Co. KG, this person may contact an employee of the party responsible for the processing at any time. The employee will arrange the limitation of processing.
f) Right to Data Transferability Each person concerned by the processing of personal data has the right, granted by the European directive- and regulation giver, to receive the respective personal data, provided by the person concerned to a party responsible, in structured, common, and machine-readable format. The person, moreover, has the right to transmit the personal data to another party responsible without being hampered by the responsible to whom the personal data were provided, as far as the processing is based on the consent acc. to article 6 paragraph 1 letter a DS-GVO (GDPR) or article 9 paragraph 2 letter a DS-GVO (GDPR) or on a contract acc. to article 6 paragraph 1 letter b DS-GVO (GDPR), and the processing is carried out by means of automated procedures, as far as the processing is not necessary for the performance of a task, is not in the public interest or is carried out in the exercise of public authority, delegated to the party responsible.
With exercising the right to data transferability acc. to article 20, paragraph 1 DS-GVO (GDPR) the person concerned has, furthermore, the right to require, that the personal data are transmitted directly from one party responsible to the other one, provided that this is technically possible and that no rights and liberties of other persons are impaired.
For enforcement of the right to data transferability the person concerned may contact anytime an employee of Adolf Thies GmbH & Co. KG.
g) The right to objection Due to reasons, arising from the special situation, each person concerned by the processing of the personal data has the right, granted by the European directive- and regulation giver, to object anytime against the processing of respective personal data, which is carried out on the basis of article 6 paragraph 1, letter e or f DS-GVO (GDPR). This applies also to a profiling based on these regulations.
Adolf Thies GmbH & Co. KG do no longer process the personal data in case of objection, unless we can prove compelling legitimate reasons for the processing, which prevail over the interests, rights and liberties of the person concerned, or the processing serves for enforcement, exercise or defense of legal claims.
In case that Adolf Thies GmbH & Co. KG process the personal data to operate direct mail, the person concerned has the right, at any time, to object against processing of the personal data for the purpose of such advertising . This applies also to the profiling, as far as it is related to such direct mail. If the person concerned objects towards Adolf Thies GmbH & Co. KG against the processing for the purpose of direct mail, Adolf Thies GmbH & Co. KG will no longer process the personal data for this purpose.
Due to reasons, arising from the special situation, the person concerned has, furthermore, the right to object against the respective processing of personal data that is carried out by Adolf Thies GmbH & Co. KG for the purpose of scientific and historical research, or for statistical purposes acc. to article 89, paragraph 1 DS-GVO (GDPR), unless such processing is necessary for performing a task in the public interest.
For exercising the right to object the person concerned may contact any employee of Adolf Thies GmbH & Co. KG or another employee. In the context of using the services of the information society, the person concerned is free to exercise the right to object by means of an automated procedure, were technical specifications are used, regardless of the directive 2002/58/EG.
h) Automated Decisions in individual case including profiling Each person concerned by the processing of personal data has the right granted by the European directive- and regulation giver, not to be subjected exclusively to a decision, basing on an automated processing – including profiling, a decision that has legal effect on the person or considerable impairment, as far as the decision (1) is not required for the completion or fulfillment of a contract between the person concerned and the party responsible, or (2) allowed on the basis of legislations of the European Union or the member states, to which the party responsible is subject, and these legislations comprise appropriate measures to safeguard the rights and liberties as well as the legitimate interests of the person concerned, or (3) Is made with explicit consent of the person concerned.
If the decision (1) is necessary for the completion or the fulfillment of a contract between the person concerned and the party responsible or (2) is made with explicit consent of the person concerned, Adolf Thies GmbH & Co. KG will take appropriate measures to safeguard the rights and liberties as well as the legitimate interests of the person concerned, that includes at least the right to obtaining the intervention of a person on the part of the party responsible, to presentation of the own point of view, and to contestation of the decision.
In case that the person concerned would like to assert rights relating to automated decisions, he/she may turn, anytime, to an employee of the party responsible for the processing.
i) Right to revocation of a data protection consent Each person concerned by the processing of personal data has the right, granted by the European directive- and regulation giver, to revoke, at any time, a consent for the processing of personal data.
In case that the person concerned would like to assert the right to revocation of a consent, this person may turn, at any time, to an employee of the party responsible for the processing.