Imprint & Data Privacy Statement

Imprint

Beate Richter
Sundgauer Str. 100
14169 Berlin

phone +49-30-44718033
kontakt@WissenschaftlicheSchreibwerkstatt.de

Data Privacy Statement (DSGVO)

This privacy policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as ‘data’) within the online offering of Beate Richter (B.R.) under the name Wissenschaftliche Schreibwerkstatt Berlin (WSB) and the websites, functions and content associated with this service, as well as external online presences, such as my social media profiles (hereinafter collectively referred to as ‘online service’). With regard to the terms used (e.g. ‘processing’ or ‘controller’), I refer to the definitions in Art. 4 of the General Data Protection Regulation). This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognise an encrypted connection by the string ‘https://’ and the lock symbol in your browser line.

1 Data protection at a glance
The following information gives you a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the data privacy statement below.

Who is responsible for data collection on this website?
Data processing on this website is carried out by Beate Richter as the website operator. You can find the relevant contact details in the legal notice on this website.

What is the procedure for collecting your data?
(1) Your data are collected when you provide them to B. R., e.g. via the forms on the website.
(2) Other data are collected automatically or after your consent when you visit the website by the IT system. This is mainly technical data, such as your IP address, the operating system used, or the time of the page view. This data is collected automatically as soon as you enter this website.
(3) Data is also collected if you consent to the use of the BigBlueButton video conferencing system and the WSB cloud service provider.

What do I use your data for?
Some of the data is collected to ensure that the website functions correctly. Other data is used to fulfil my contractual obligations, i.e. to offer you online consulting (coaching) and editing (exchange of documents) services.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. In addition, you have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact me at any time at the address given in the imprint with regard to this and other questions on the subject of data protection.

2 General notes and mandatory information

2.1 Name and address of the data controller
The responsible person within the meaning of the Datenschutz-Grundverordnung and other national data protection laws of the member states as well as other data protection regulations is:
Dr. Beate Richter
Sundgauer Str. 100
14169 Berlin
Deutschland
Tel.: + 49 30 4471 8033
E-Mail: kontakt@wissenschaftlicheschreibwerkstatt.de
https://www.wissenschaftlicheschreibwerkstatt.de

2.2 Scope of the processing of personal data
As a matter of principle, I only process personal data of users to the extent that this is necessary for the provision of a functional website as well as the contents and services. The processing of users' personal data regularly takes place only with the user's consent. An exception applies in those cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

2.3 Data processing agreements (DPA): no data transfer to non-EU countries
As a matter of principle, personal data is only used within WSB or by Beate Richter. If third parties are commissioned to perform contracts, personal data will only be transferred to the extent necessary for the performance of the relevant services. If parts of the data processing are outsourced, the processor is contractually obliged (within the framework of a data processing agreement) to use personal data only in accordance with the requirements of German data protection laws and to ensure the protection of the rights of the data subject. No data is transferred to entities or persons outside the EU.
Exceptions to this are WSB's online presence on social media platforms. See 9.

2.4 Legal basis for the processing of personal data
Insofar as I obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a EU-Datenschutzgrundverordnung (DSGVO) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as processing of personal data is necessary for compliance with a legal obligation to which my company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

2.5 Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

3 Provision of the website and creation of log files

3.1 Description and scope of data processing
This website is hosted by the external service provider hosting.de GmbH (hoster). The personal data collected on this website is stored on the hoster's servers. These server log files contain the following data:
- browser type and browser version
- operating system used
- Referrer URL (the previously visited page)
- host name of the accessing computer (IP address)
- date and time of the server request
The IP address is considered personal, since in combination with the date of access, the identity of the person to whose internet connection this IP address was or is assigned can be determined by information from the respective Internet provider.

3.2 Purpose and legal basis for data processing
The data stored in the server log files are evaluated by hosting.de GmbH exclusively to ensure trouble-free operation of the site and its servers. The storage in log files is done to ensure the functionality of the website. The IP address is also evaluated in the event of attacks on the internet infrastructure of hosting.de GmbH. In these cases, there is a legitimate interest in the processing of the IP address within the meaning of Art. 6 (1) (f) DSGVO. This legitimate interest results from the need to ward off the attack on the Internet infrastructure, to determine the origin of the attack in order to be able to take criminal and civil action against the person responsible, as well as to effectively prevent further attacks and to be able to operate the website without disruptions. The IP address will be deleted by hosting.de GmbH if it can exclude that an attack on its Internet infrastructure has occurred from this address. According to information provided by hosting.de GmbH, this regularly occurs after eight days.

3.3 Duration of storage
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or modified so that an assignment of the calling client is no longer possible.

3.4 Option of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right of objection.
For further information, please contact:
hosting.de GmbH I Franzstr. 51 I 52064 Aachen
datenschutz@hosting.de I https://www.hosting.de/ueber-uns/datenschutz/

4 Use of cookies
A cookie is a small text file that is stored in the browser history on your PC (via the IP address) when you visit a website. The visit to the website is thus saved on your hard disk. If you call up the website again, the browser sends the cookie to the website server and thus remembers the previous visit to the website. This means that new visits can be adapted to your habits as a user. A cookie is a small text file that is stored in the browser history on your PC (via the IP address) when you visit a website. The visit to the website is thus saved on your hard disk. If you call up the website again, the browser sends the cookie to the website server and thus remembers the previous visit to the website. This means that new visits can be adapted to your habits as a user. A distinction is made between essential and non-essential cookies. Essential cookies (also technically necessary cookies) are required for the operation of the website and its functions. You cannot deactivate essential cookies. Non-essential cookies (also non-essential cookies) include all others that are not necessary for the operation of the website or its functions, are often only set for economic reasons and whose use requires your consent.

My website only uses essential / technically necessary cookies. These include the VG-Wort counting marks (see 4.1) and the banner for information about cookies (see 4.2).

4.1 Session cookies of VG Wort
I use session cookies* of VG Wort, Munich, to measure accesses to texts. These measurements are carried out by Kantar Germany GmbH according to the Scalable Central Measurement Method (SZM). They help to determine the copy probability of individual texts for the remuneration of legal claims of authors and publishers. Anonymous measurement values are collected in the process. The access count measurement alternatively uses a session cookie or a signature created from various automatically transmitted information from your browser to recognise computer systems. IP addresses are only processed in anonymised form. The process was developed with data protection in mind. The sole aim of the procedure is to determine the copy probability of individual texts. I do not collect any personal data via cookies. Your identity always remains protected. You will not receive any advertising via the system.
VG Wort privacy policy at: https://www.vgwort.de/datenschutz.html

* Session cookies are small pieces of information that are stored in the RAM of the user's computer. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and the storage period. Session cookies cannot store any other data. During a single browser session, information about your use is stored, which remains for each page change. These session cookies are deleted when you close the browser. It is also possible to use my website without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent.

4.2 Cookie information banner
This website uses a banner to inform visitors about the use of essential cookies (the non-use of non-essential cookies). For this purpose, a Java script is loaded from an external website. The server of www.wissenschaftlicheschreibwerkstatt.de usually stores the IP address of the access anonymously and for a limited time in a LOG file. This file is regularly and irrevocably deleted. To ensure the correct functioning of the banner, the site stores a so-called session cookie on the visitor's computer. This is usually deleted by the browser as soon as it is closed. No personal information is stored in this cookie. It only contains the information of the called domain and a boolean tag (true/false) to mark the visitor as already counted. No personal or person-related data is collected by the visitor counter beyond this. Tracking or allocation of access is not possible at any time.

5 Newsletter

5.1 Description and scope of data processing
On my website there is the possibility to subscribe to a free newsletter. When subscribing to the newsletter, the data from the input mask (form) is transmitted to me. The data collected are: Name and e-mail address. At the time the message is sent, the following data is also stored: IP address of the user, date and time of registration. For the processing of the data, your consent is obtained during the registration process and a reference is made to this data privacy policy. If you purchase services on my website and enter your e-mail address, this may subsequently be used by us to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter. No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.

5.2 Legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The legal basis for sending the newsletter as a result of the sale of goods or services is Article 7 (3) UWG.

5.3 Purpose of data processing
The purpose of collecting the user's e-mail address is to deliver the newsletter.

5.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active.

5.5 Option of objection and removal
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding notice is included in each newsletter.

6 Contact forms and e-mail contact

6.1 Description and scope of data processing
On my website, there are several contact forms that can be used to contact me electronically and request services from WSB. If a user takes advantage of this option, the data entered in the input mask is transmitted to me and stored. These data are:
- Contact form: first name, last name, e-mail address, content of the specific enquiry, consent to newsletter dispatch.
- Registration form for a WSB workshop: first name, last name, address (street / postcode & city) e-mail address, content "comments", selected workshops, consent to newsletter dispatch.
The following data are also stored at the time the message is sent from these forms: IP address of the user, date and time of registration.
Your consent is obtained for the processing of the data during the submission process and reference is made to this Data Privacy Statement. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

6.2 Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

6.3 Purpose of the data processing
The processing of the personal data from the input mask is solely for the purpose of processing the contact in the event of a request for a service. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

6.4 Duration of storage
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input masks of the forms (contact, registration) and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

6.5 Option of objection and removal
The user has the option of revoking his or her consent to the processing of personal data at any time. If the user contacts me by e-mail, he can revoke the storage of his personal data at any time. In such a case, the conversation cannot be continued.
Please send your revocation to:
kontakt@wissenschaftlicheschreibwerkstatt.de or
Beate Richter, Sundgauer Str. 100, 14169 Berlin, Germany
All personal data stored in the course of contacting us will be deleted in this case.

7 Video conferences with BigBlueButton (BBB)
These explanations enable you to find out about the processing of your personal data when using the BigBlueButton communication tool of the WSB, offered by the external service provider invokable GmbH. We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the contractor invokable GmbH processes the personal data of WSB customers only in accordance with our instructions and in compliance with the GDPR.

7.1 Description and scope of data processing
The bbbserver system of the bbbserver.de domain of the external service provider invokable GmbH (Kratzberger Straße 9, 42855 Remscheid, https://bbbserver.de/datenschutz, support@bbbserver.de) is used to operate WSB's BigBlueButton video conferences. This requires the processing of personal data. According to Article 4(1) of the EU General Data Protection Regulation (GDPR), personal data is any data relating to an identified or identifiable natural person. When participating in a BBB video conference, the video and audio data recorded via the camera and microphone of the end device, the chat content, notes and presentations are transmitted together with the IP address and device/hardware information to the video conference server of the service provider invokable GmbH. The IP address is considered personal data because, in combination with the access date provided by the respective Internet service provider, it can be used to determine the identity of the person whose Internet connection was assigned to this IP address. Conference participants do not need to register to participate in conferences on the WSB's bbbserver.
Video and audio data, chat content and shared content are forwarded to the recipients' end devices. All data transfers mentioned are encrypted using TLS transport encryption.

The following data is collected and processed on bbbserver.de for the purpose of conducting WSB conferences:
a) for conference participants who are not registered with bbbserver.de:
- self-chosen name,
- audio data (spoken word),
- video data (webcam image and screen share),
- chat messages/shared notes.
The storage is temporary. The data is automatically deleted when you leave the conference or at the latest five minutes after the end of the conference.

b) for conference participants who are not registered with bbbserver.de with active attendance tracking:
Beate Richter uses attendance tracking for all customer interactions to document the scope of the service (duration of the consultation or workshop). All participants must explicitly agree to attendance tracking before joining the conference.
- self-selected name,
- dial-in time, selection time,
- microphone activation (from - to),
- webcam activation (from - to),
- presenter rights (from - to),
The attendance tracking data (name, microphone and webcam activation, and presenter rights from - to) is stored permanently and remains in the conference organiser's (Beate Richter) user account until it is deleted.

c) when recording conference participants, initiated by the moderator (use of the recording function).
This function is only used by Beate Richter if all participants have given their prior written consent to the conference being recorded.
- self-chosen name,
- chat messages,
- webcam image (if activated during recording),
- screen share image (if activated during recording),
- audio data (if activated during recording).
The storage is permanent. The conference recording remains stored in the organiser's (Beate Richter) user account until it is deleted.

7.2 Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR if the user has given their consent. Data processing serves to initiate or fulfil a contract in accordance with Art. 6 (1) (b) GDPR. Art. 6 (1) (f) serves as the legal basis, as data processing is necessary for WSB to perform its tasks.

7.3 Purpose of data processing
The processing of your personal data in the BBB video conferencing system serves the technical implementation of real-time communication (video, audio, chat) in the context of organising workshops and individual consultations and logging the services provided by WSB. In order to enable seamless interaction across geographical distances, the necessary data is processed, limited to the respective purpose and with the consent of the participants.
Attendance tracking is used to document the scope of the service (duration of the consultation or workshop). The ‘shared notes’ in the context of consultation settings are stored locally by Beate Richter as a download for the purpose of documenting the content of the conversation.

7.4 Duration of storage
The storage of personal data of conference participants without registration at bbbserver.de (7.1a) is temporary. Deletion occurs automatically upon leaving the conference or at the latest five minutes after the end of the conference.
The storage of personal data of conference participants without registration at bbbserver.de with active attendance tracking (7.1b) is permanent and the data remains stored in their user account until it is deleted by the conference organiser (Beate Richter). This data is deleted three months after the end of the service provision.
The storage of personal data of conference participants in BBB video conferences with the recording function activated (7.1c) is permanent and the data remains stored in their user account until it is deleted by the conference organiser (Beate Richter). Three months after the end of the service provision, this data is deleted.

7.5 Right to object and right to erasure
The user has the right to withdraw their consent to the processing of their personal data at any time. Users of the BBB video conferencing system may object to the storage of their personal data at any time.
Please send your revocation to: kontakt@wissenschaftlicheschreibwerkstatt.de or
Beate Richter, Sundgauer Str. 100, 14169 Berlin
In this case, all personal data stored in the course of using the BBB video conferencing system will be deleted.

8 Cloud services
A cloud service provides users with software services on its servers for storing and processing data via the Internet. WSB uses the external provider hosting.de GmbH (Franzstraße 51, 52064 Aachen, telephone: 0241 46314 480, email: info@hosting.de, website: www.hosting.de) to store documents, presentations and spreadsheets, exchange them with our customers and edit them. In doing so, personal data may be processed and stored on the provider's servers. This data may include user contact details, data on transactions, contracts and their contents. The cloud service also processes usage data and metadata for security purposes and to optimise the service. We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the contractor hosting.de GmbH processes the personal data of WSB customers only in accordance with our instructions and in compliance with the GDPR. This is a contract required by data protection law, which ensures that the contractor hosting.de GmbH processes the personal data of WSB customers only in accordance with our instructions and in compliance with the GDPR.

8.1 Description and scope of data processing
With the customer's consent, documents submitted by the customer to B. R. (WSB) for processing (proofreading services) may be stored and processed in the cloud (on the server) of hosting.de GmbH. In this context, usage data (access times) and meta/communication data (e.g. IP addresses) are stored.

8.2 Legal basis for data processing
The legal basis for the processing of data is Art. 6 (1) lit. a GDPR if the user has given their consent. Data processing serves to initiate or fulfil a contract in accordance with Art. 6 (1) lit. b GDPR. Art. 6 (1) sentence 1 lit. f serves as the legal basis, as data processing is necessary for WSB to perform its tasks.

8.3 Purpose of data processing
The processing of personal data in the cloud serves the technical purpose of exchanging documents and storing text documents, presentations or spreadsheets in the context of organising proofreading services and logging these services provided by WSB. In order to enable seamless interaction across geographical distances, the necessary data is processed, limited to the respective purpose and with the consent of the customers.

8.4 Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data (usage data and meta/communication data), this is the case when the service (proofreading) has been provided and the collaboration has ended. The additional personal data collected during processing will be deleted after a period of seven days at the latest.

8.5 Right to object and right to erasure
The user may revoke their consent to the processing of their personal data at any time. Cloud users may object to the storage of their personal data at any time. Please send your revocation to:
kontakt@wissenschaftlicheschreibwerkstatt.de or
Beate Richter, Sundgauer Str. 100, 14169 Berlin
In this case, all personal data stored in the course of using the cloud will be deleted.

9 Online presence on social media
WSB maintains an online presence on social media platforms in order to communicate with interested parties and users active there and to inform them about services. Data from users of these social media platforms may be processed outside the European Union, which may pose risks for users, as it could make it more difficult to enforce user rights. US providers certified under the Privacy Shield have committed to complying with EU data protection standards. Data from users of social media platforms is generally processed for market research and advertising purposes, e.g. usage behaviour, presumed user interests. Usage profiles developed from this data can in turn be used for advertising within and outside the platforms. Cookies are usually stored on users' computers to record usage behaviour and presumed user interests. Data can also be stored in the usage profiles independently of the devices used by users (if users are logged in as members of the respective platform).

9.1 Description and scope of data processing
When accessing the respective social media platform, its terms and conditions and the data processing guidelines of the respective operator apply. User data is processed if users communicate with B. R. within the social media platform, e.g. by posting on WSB's online presence or sending messages.

9.2 Legal basis for data processing
The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with them in accordance with Art. 6(1)(f) GDPR. If users are asked by the respective platform providers for consent to the data processing described above, the legal basis for the processing is Art. 6 para. 1 lit. a, Art. 7 GDPR.

9.3 Purpose of data processing
The data you provide on the social media channels listed below and which may be accessible to us will be used to communicate with you. We use this platform to provide you with insights into our services and to get in touch with you quickly.

9.4 Duration of storage
Your data will be deleted as far as possible when the operation of the relevant social media platform is discontinued. If this data is stored further by the social media platforms listed below, this is governed exclusively by the provisions of the data protection guidelines and terms of use of these platforms.

9.5 Right to object and right to erasure
You can find a detailed description of the respective processing and options for objecting (opt-out) in the information provided by the providers linked below. We would like to point out that requests for information and the assertion of user rights can be most effectively asserted with the providers. Only the providers have access to the user data, can take measures and provide information.

Facebook (Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Irland)
Privacy Center: https://www.facebook.com/privacy/resources
Privacy policy: https://www.facebook.com/privacy/policy/
Information on data protection and privacy: https://www.facebook.com/privacy/policy/

Instagram (Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Irland)
Datenschutzcenter: https://privacycenter.instagram.com/
Privacy policy: https://privacycenter.instagram.com/policy
Information on data protection and privacy: https://privacycenter.instagram.com/guide/

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

10 Rights of the affected person
If your personal data is processed, you are a affected person within the meaning of the DSGVOand you have the following rights against the controller:

10.1 Right to information
You may request confirmation from the controller as to whether personal data concerning you is being processed by me. If there is such processing, you may request information from the controller about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectify or erase personal data concerning you, a right to have processing restricted by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data are not collected from the data subject.
You have the right to request information on whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

10.2 Right to rectification
You have a right to rectification and/or completion towards the data controller if the personal data processed concerning you is inaccurate or incomplete. The controller must make the rectification without undue delay.

10.3 Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
(1) you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and request the restriction of the use of the personal data instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims; or
(4) if you have objected to the processing pursuant to Article 21(1) DSGVO and it is not yet clear whether the controller's legitimate grounds override your grounds.
Where the processing of personal data relating to you has been restricted, those data may be processed, apart from being stored, under the following conditions: only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

10.4 Right to deletion
10.4.1 Obligation to delete
You may request the controller to delete the personal data concerning you without undue delay and the controller is obliged to delete such data without undue delay if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Article 21(1) of the DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the DSGVO.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(6) The personal data concerning you has been collected in relation to information society services offered pursuant to Art. 8(1) DSGVO.

10.4.2 Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the DSGVO, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers who process the personal data that you, as the data subject, have requested them to erase all links to, or copies or replications of, that personal data.

10.4.3 Exceptions
The right to deletion does not exist insofar as the processing is necessary for
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the DSGVO;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the DSGVO, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
(5) for the assertion, exercise or defence of legal claims.

10.5 Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients of your personal data of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the controller.

10.6 Right to data transferability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, insofar as:
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
(2) the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

10.7 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. The controller shall no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

10.8 Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

10.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the DSGVO. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

Updated status 19/01/2026