With regard to the data processing to be described in more detail below, users and data subjects have the right
● To confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. Also art. 15 gdpr);
● To correct or complete incorrect or incomplete data (cf. Also art. 16 gdpr);
● To the immediate deletion of data concerning them (cf. Also art. 17 dsgvo), or, alternatively, if further processing is necessary as stipulated in art. 17 para. 3 gdpr, to restrict said processing per art. 18 gdpr;
● To receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. Also art. 20 gdpr);
● To file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also art. 77 gdpr).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.