As a data subject within the meaning of the GDPR, you have the following rights:

Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed.

If this is the case, you have the right to obtain access to:

• The personal data being processed
• The purposes of processing
• The categories of personal data concerned
• The recipients or categories of recipients
• The planned storage period or the criteria used to determine it
• The existence of your rights
• The source of the data (if not collected directly from you)
• The existence of automated decision-making, including profiling

Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate personal data concerning you.

You also have the right to request completion of incomplete personal data.

Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR)

You have the right to request the deletion of your personal data without undue delay if:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent and there is no other legal basis
• You object to processing and there are no overriding legitimate grounds
• The data has been processed unlawfully
• Deletion is required to comply with a legal obligation

The right to erasure does not apply where processing is necessary for:

• Compliance with a legal obligation
• Establishment, exercise, or defense of legal claims

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing if:

• You contest the accuracy of the data
• The processing is unlawful and you oppose deletion
• We no longer need the data, but you require it for legal claims
• You have objected to processing pending verification of legitimate grounds

Right to Data Portability (Art. 20 GDPR)

You have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format.

You also have the right to transmit that data to another controller where technically feasible.

This right applies only where processing is based on consent or contract and carried out by automated means.

Right to Object (Art. 21 GDPR)

You have the right to object at any time to processing of personal data based on Art. 6(1)(f) GDPR (legitimate interests).

If you object, we will no longer process your data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Where personal data is processed for direct marketing purposes, you have the right to object at any time without providing reasons.

Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you have the right to withdraw your consent at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right Not to Be Subject to Automated Decision-Making (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

We do not carry out automated decision-making within the meaning of Art. 22 GDPR.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.

The competent supervisory authority for our company is:

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

However, you may also contact the supervisory authority in your place of residence.

In case of any discrepancies, please contact us at

admin[at]sometech[dot]work

We may request additional information to verify your identity before processing your request.

Requests are handled in accordance with Art. 12 GDPR.