DATA PROTECTION

8. Rights of the data subject

a. Right to information

Any person affected by the processing of personal data has the right to obtain information about the personal data we have stored about him or her at any time and free of charge.

​

• the processing purposes

• the categories of personal data that are processed

• the recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations

• the envisaged period for which the personal data will be stored, if possible, or, if not possible, the criteria used to determine that period

• the existence of a right of complaint to a supervisory authority

• all available information about the origin of the data if these are not collected from the data subject

• the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

​

Furthermore, the data subject has the right to obtain information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

b. Right to rectification

Any data subject has the right to request the immediate rectification of inaccurate or incomplete personal data concerning him or her.

c. Right to restriction of processing

Any data subject has the right to request restriction of processing if one of the following conditions applies:

​

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

• The processing is unlawful, the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead.

• The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them to assert, exercise or defend legal claims.

• The data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.

d. Right to data portability

Each data subject has the right to receive the personal data concerning him or her from us in a structured, common and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out using automated procedures. This does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

​

In exercising his or her right to data portability pursuant to Art. 20 (1) GDPR, the data subject may request that the personal data be transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

e. Right to object

Any data subject has the right to object at any time, for reasons related to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Art. 6 (1) e or f GDPR. This also applies to profiling based on these provisions.

​

In the event of an objection, Datalog Spedition GmbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

​

If Datalog Spedition GmbH processes personal data in order to conduct direct advertising, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to processing for direct marketing purposes, we will no longer process the personal data for these purposes.

​

Furthermore, in the context of the use of information society services, the data subject is free to exercise his or her right of objection by automated means using technical specifications, notwithstanding Directive 2802/58/EC.

f. Right to withdraw consent

Every data subject has the right to withdraw consent to the processing of personal data at any time.

g. Right to erasure (right to be forgotten)

Every data subject has the right to have personal data concerning him or her erased immediately if no further processing is required, in particular if one of the following reasons applies:

​

• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.

• The data subject withdraws his or her consent and there is no other legal basis for the processing.

• The data subject objects to the processing and there are no overriding legitimate grounds for the processing.

• The personal data were processed unlawfully.

• The erasure of personal data is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject.

​

If personal data has been made public by Datalog Spedition GmbH and we are obliged to delete the personal data, we will take appropriate and reasonable measures in each individual case, taking into account the available technology and the implementation costs, to inform third parties who have processed the published personal data that the deletion of this personal data has been requested.