a) Right to confirmation
Every data subject has the right, granted by the European Directives and Regulations, to obtain confirmation from the controller as to whether personal data relating to him are being processed. If a data subject wishes to exercise this right of confirmation, he or she may at any time contact any employee of the data controller.
b) Right of access
Every person affected by the processing of personal data has the right, granted by the European Directive and Regulation Giver, to obtain at any time and free of charge information from the data controller about the personal data stored about him and a copy of this information. Furthermore, the European Directive and Regulation Giver has granted the data subject access to the following information:
o the processing purposes
o if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
o the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organizations
o if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
o the existence of a right of rectification or erasure of personal data relating to him or her or of a right of opposition to or limitation of the processing by the controller
o the existence of a right of appeal to a supervisory authority
o if the personal data are not collected from the data subject: All available information about the origin of the data
o the existence of automated decision-making, including profiling, by Article 22(1) and (4) of the DPA and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject
Furthermore, the data subject has the right of information as to whether personal data has been transferred to a third country or an international organization. If this is the case, the data subject shall also have the right to obtain information on the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right of access, he or she may at any time contact any employee of the controller.
c) Right of rectification
Every person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to request the immediate rectification of incorrect personal data concerning him. Furthermore, the data subject has the right to request the completion of incomplete personal data, also using a supplementary declaration, taking into account the purposes of the processing.
If a data subject wishes to exercise this right of rectification, he or she may at any time contact any employee of the controller.
d) Right of cancellation (right to be forgotten)
Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to obtain from the controller the immediate deletion of personal data concerning him/her if one of the following reasons applies and if the processing is not necessary:
o The personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
o the data subject withdraws the consent on which the processing was based under Article 6(1)(a) of the DPA or Article 9(2)(a) of the DPA, and there is no other legal basis for the processing (a) of the DPA or Article 9(2)(a) of the DPA, and there is no other legal basis for the processing.
o The data subject objects to the processing under Art. 21(1) DPA and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing under Art. 21(2) DPA.
o The personal data were processed unlawfully.
o The deletion of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
o The personal data was collected about information society services offered by Art. 8 Paragraph 1 DS-GVO. Paragraph 1 DS-GVO.
If one of the above reasons applies and a data subject wishes to have personal data stored by TR Germany GmbH deleted, he or she may contact an employee of the data controller at any time. The employee of TR Germany GmbH will ensure that the deletion request is complied with immediately.
If the personal data has been made public by TR Germany GmbH and our company as the responsible party is obliged to delete the personal data by Art. 17 Paragraph 1 DS-GVO, TR Germany GmbH will take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested that all links to this personal data or copies or replications of this personal data be deleted by these other data controllers unless the processing is necessary. The employee of TR Germany GmbH will make the necessary arrangements in individual cases.
e) Right to limitation of processing
Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to request the controller to limit the processing if one of the following conditions is met:
o The accuracy of the personal data is contested by the data subject, for a period of time that allows the controller to verify the accuracy of the personal data.
o The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests the restriction of the use of the personal data.
o The controller no longer needs the personal data for the processing, but the data subject needs them to assert, exercise or defend legal claims.
o The data subject has objected to the processing by Art. 21 (1) and it is not yet clear whether the justified reasons of the controller outweigh those of the data subject.
If one of the above-mentioned conditions is met and a data subject wishes to request the restriction of personal data stored at TR Deutschland GmbH, he or she may contact an employee of the data controller at any time. The employee of TR Germany GmbH will arrange for the restriction of the processing.
f) Right to data transferability
Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to receive the personal data concerning him/her, which have been provided by the data subject to a data controller, in a structured, common and machine-readable format. He/she also has the right to have this data communicated to another controller without hindrance by the controller to whom the personal data has been made available, provided that the processing is based on the consent under Art. 6 paragraph 1 letter a DPA or Art. 9 paragraph 2 letter a DPA or on a contract under Art. 6 paragraph 1 letter b DPA and that the processing is carried out with the aid of automated procedures unless the processing is necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller. (a) of the DPA or Article or Art. 9 paragraph 2 letter a DPA or on a contract under Art. 6 paragraph 1 letter b DPA and that the processing is carried out with the aid of automated procedures unless the processing is necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
Also, when exercising their right to data transfer under Art. 20 Paragraph 1 DS-GVO, the data subject has the right to obtain that personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
To assert the right to data transferability, the person concerned can contact an employee of TR Germany GmbH at any time.
g) Right of objection
Every person affected by the processing of personal data has the right, granted by the European Directive and Regulation Giver, to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her that is carried out based on Art. 6 (1)(e) or (f) of the DPA. This also applies to profiling based on these provisions.
In the event of an objection, TR Germany GmbH will no longer process the personal data unless we can prove compelling reasons for processing worthy of protection that outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
If TR Germany GmbH processes personal data to carry out direct advertising, the person concerned has the right to object at any time to the processing of personal data for such advertising. This also applies to profiling, insofar as it is connected with such direct advertising. If the data subject objects to TR Germany GmbH processing for direct advertising, TR Germany GmbH will no longer process the personal data for these purposes.
Also, the data subject has the right to object, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her that is carried out at TR Germany GmbH for scientific or historical research purposes or statistical purposes by Art. 89 (1) DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may directly contact any employee of TR Germany GmbH or any other employee. The data subject is also free to exercise his/her right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, using automated procedures involving technical specifications.
h) Automated case-by-case decisions including profiling
Every person concerned by the processing of personal data has the right, granted by the European Directives and Regulations, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly similarly affects him or her, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorised by Union or national legislators to which the controller is subject and such legislation provides for adequate safeguards of the rights and freedoms and legitimate interests of the data subject, or (3) is taken with the explicit consent of the data subject.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller or (2) is taken with the express consent of the data subject, TR Germany GmbH shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, which shall include at least the right to obtain the intervention of a person from the controller, to put forward his point of view and to challenge the decision.
If the data subject wishes to exercise rights relating to automated decisions, he or she may at any time contact any employee of the controller.
i) Right to revoke a data protection consent
Every person affected by the processing of personal data has the right granted by the European Directive and Regulation Giver to revoke his or her consent to the processing of personal data at any time.
If the data subject wishes to exercise his or her right to withdraw consent, he or she may contact an employee of the data controller at any time.
