Processing of requests regarding data subject rights
Processed data and purpose
To process your data subject request, we use, in particular, the following data:
- Master data (e.g., name and contact information)
- The nature of the request, including the date of the request
- Proof of identity, if applicable
- Any other information you provide
- Response letter, including the personal data concerned, depending on the request
You can find more detailed information about processed personal data in the specific data processing sections that apply to you.
The purpose is to process your requests in connection with data subject rights under the GDPR. We store this data beyond the completion of the request to demonstrate that we have fulfilled our legal obligation to handle your request in a timely and appropriate manner.
Legal basis
The legal basis for processing your requests is a legal obligation (Article 6(1)(c) in conjunction with Article 12 et seq. GDPR). Accordingly, we are required to provide you with all communications related to your data subject rights. Storage beyond the completion of the request is based on our legitimate interest in accordance with Article 6(1)(f) GDPR, whereby this interest arises from the purpose stated above.
Recipients
If necessary for evidentiary purposes, your personal data may be transferred to the competent supervisory authority, a competent court, and legal representatives.
Storage time
Your data is stored for three years after the request has been processed. This is based on the general statute of limitations in accordance with § 195 of the German Civil Code (BGB). Until the time of deletion, access to the data is restricted so that no further processing or access takes place.
Necessity to provide data
The provision of your data is required by law (see legal basis above). Without the provision of your data, we cannot process your requests.
Your rights, contact information, Data Protection Officer
For more information, please see the data protection information on the homepage.