Your personal data will be stored for as long as is necessary to provide the requested services. When we no longer use your personal data to fulfill contractual or legal obligations, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified, unless we need to retain your data, including personal data, to comply with legal or regulatory obligations to which we are subject, such as legal retention periods arising from the Commercial Code or tax laws, or if we need data to preserve evidence within a statute of limitations.
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the Data Controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 of the GDPR. In particular, you may obtain information about the purposes of processing; the category of personal data; the categories of recipients to whom your data has been or will be disclosed; the planned retention period; the existence of a right to rectification, erasure, restriction of processing or objection; the existence of a right of appeal; the origin of your data, if not collected by us; the existence of automated decision-making including profiling and, where appropriate, meaningful information about the details of the above;
The right to request the correction of inaccurate or incomplete personal data stored by us without delay in accordance with Art. 16 of the GDPR.
The right to request the deletion of your personal data stored by us in accordance with Art. 17 of the GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
The right to request the restriction of the processing of your personal data in accordance with Art. 18 of the GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, yet you object to the deletion of the data and we no longer need the data, but you still need the said data to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 of the GDPR.
The right, pursuant to Art. 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another data controller.
The right to complain to a supervisory authority in accordance with Art. 77 of the GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace for this purpose.
The right to revoke consent given in accordance with Art. 7 (3) of the GDPR: you have the right to revoke consent to the processing of data once given at any time with future effect. In the event of revocation, we will promptly delete the data concerned, provided that there is no legal basis for further processing without consent. This revocation will not affect the lawfulness of any processing done beforehand.
To exercise your rights, please use the contact details under section II.
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) f of the GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 of the GDPR, insofar as this is done for reasons arising from your specific situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
The revocation/objection can be declared by e-mail to support [at] magnalister.de or by a message to the contact details given under section II.