If your personal data is processed, you are a data subject in the sense of the General Data Protection Regulation and are entitled to the following rights against the controller:
a) Right to Information
You may demand confirmation from the controller about whether your personal data is processed by us. If we process your personal data, you have the right to demand the following information from the controller:
- The purposes for which the personal data is processed;
- The categories of personal data being processed;
- The recipients or the categories of recipients to whom the personal data was or will be disclosed;
- The planned duration of the storage of your personal data or, if this cannot be stated exactly, the criteria for determining the storage duration;
- Your entitlement to a right to correction or deletion of your personal data, the right to limit processing by the controller and the right to object to this processing;
- Your entitlement to a right to submit complaints to supervisory authorities;
- All available information about the origin of the data if the personal data is not collected from the data subject;
- The presence of automated decision-making, including profiling, under Art. 22(1 & 4) of the General Data Protection Regulation and—at least in these cases—meaningful information about the logic involved and the extent and desired implications of such processing for the data subject.
You have the right to demand information about whether your personal data is transferred to a third country or to an international organization. You may also demand to be informed about appropriate safeguards for such transmissions under Art. 46 of the General Data Protection Regulation.
b) Right to Correction
You are entitled to the right to correction and/or completion by the controller if your personal data is incorrect or incomplete. The controller must provide rectification without delay.
c) Right to Limit Processing
You may demand the limitation of the processing of your personal data under the following conditions:
- If you contest the accuracy of the personal data saved on you for a period that allows the controller to review its accuracy;
- Processing is unlawful and you refuse to have your personal data deleted and demand that its use be limited instead;
- The controller no longer requires your personal data for the processing purposes, but you need your personal data to assert, exercise or defend legal claims or
- If you submitted an object to the processing in accordance with Art. 21(1) of the General Data Protection Regulation and whether the legitimate reasons of the controller outweigh your reasons has not yet been determined.
If the processing of your data is limited, your data may only be processed with your consent for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons in the public interest of the European Union or of one of its member states.
If processing was limited in accordance with the above-stated requirements, you will be notified by the controller before the limitation is lifted.
d) Right to Deletion
a) Deletion Obligation
You may demand that the controller delete your personal data without delay and the controller is required to delete your personal data without delay if:
- Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
- You revoke your consent to the processing in accordance with. Art. 6(1) letter a or Art. 9(2) letter a of the General Data Protection Regulation and there is no other legal basis for the processing.
- You submit an objection to the processing in accordance with Art. 21(1) of the General Data Protection Regulation and there are no other legitimate reasons for processing, or you submit an objection for the processing in accordance with Art. 21(2) of the General Data Protection Regulation.
- Your personal data is processed unlawfully.
- Your personal data must be deleted to fulfill legal requirements under EU law or under the law of the member state of the controller.
- Your personal data was collected for information society services under Art. 8(1) of the General Data Protection Regulation.
b) Notifying Third Parties
If the controller made your personal data publicly available and is required to delete them under Art. 17(1) of the General Data Protection Regulation, the controller must take appropriate, including technical, measures in consideration of the available technology and implementation costs to notify the controllers who process the personal data that you as the data subject has requested the deletion and the deletion of any links to your personal data or to copies or replicas thereof.
c) Exceptions
The right to deletion shall not apply if processing is required for
- Exercising the right to free speech and information;
- Fulfilling legal requirements under EU law or of the law of the controller's member state or to perform a task that is in the public interest or to exert public authority granted to the controller;
- Reasons of public interest that fall under public health under Art. 9(2) letters h & i and Art. 9(3) of the General Data Protection Regulation;
- Archiving, scientific or historical research purposes in the public interest or for statistical purposes under Art. 89(1) of the General Data Protection Regulation if the right under letter a) is likely to prevent or significantly impair the achievement of the aims of the processing or
- The assertion, exercise or defense of legal claims.
e) Right to Notification
If you exercised your right to correction, deletion or limitation of processing against the controller, the controller must notify all recipients to whom your personal data was disclosed about the correction or deletion of your data or limitation of its processing, unless doing so is not possible or requires disproportionate expenditure.
You are entitled to the right to be informed about who the recipients are by the controller.
f) Right to Data Portability
You have the right to receive the personal data you provided to the controller in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without being hindered by the controller to whom you provided your personal data if
- The processing is based on consent under Art. 6(1) letter a of the General Data Protection Regulation or Art. 9(2) letter a of the General Data Protection Regulation or on an agreement under Art. 6(1) letter b of the General Data Protection Regulation and if
- The processing is performed using automated procedures.
When exercising this right, you also have the right to demand that your personal data be transferred directly from one controller to another controller if technically possible. Freedoms and rights of other persons may not be impaired thereby.
The right to data portability does not apply to the processing of personal data required for the fulfillment of tasks that are in the public interest or to exert public authority granted to the controller.
g) Right to Object
You have the right to object to the processing of your personal data under Art. 6(1) letter e or f of the General Data Protection Regulation at any time; this also applies to the profiling based on these regulations.
The controller will then stop processing your personal data, unless he can demonstrate legitimate reasons for the processing that outweigh your rights and freedoms or if the processing is performed to assert, exercise or defend legal claims.
If your personal data is processed for direct advertising purposes, you may object to the processing of your personal data for such advertising purposes at any time; this also applies to profiling if performed in relation to direct advertising.
If you object to the processing for direct advertising purposes, your personal data will no longer be processed for such purposes.
You may—irrespective of Directive 2002/58/EC—submit your objections to use of information society services through automated procedures that use technical specifications.
Right to Object in the Sense of Section 15(3) of the German Telemedia Act:
You can prevent user behavior analyses by setting your browser to block cookies from our domain "FALKE.com" by, e.g., setting up an exception on your browser. Please see your browser's help function for instructions.
To delete tracking information, you may also delete the above-stated cookies from your browser individually or periodically.
If you activated your browser's so-called Do Not Track ("DNT") function, your visits to our Internet pages will not be recorded by the web analysis tool. Please see your browser's help function for how to activate DNT on your browser. Note: If you are using Internet Explorer 10 or 11, your visit will be tracked even if you activate the "Do Not Track" function. In this case, please disable tracking manually.
You may also prevent any form of user analysis on this website through so-called block cookies or opt-out cookies which may be activated through a checkbox. If these cookies are not deleted from your browser, no analysis of your user behavior will be performed. You may re-activate web analyses for this website at any time.
Please see the respective usage type descriptions for more information about how to object to specific types of use of your personal data.
h) Right to Revocation of Declarations of Consent for Privacy Law Matters
You have the right to revoke any declarations of consent you issued for privacy law matters. However, revoking your consent will not affect the legitimacy of any processing performed with your consent prior to its revocation.
i) Automated Decision-Making in Individual Cases, Including Profiling
You have the right to not be subjected to decisions based exclusively on automated processing—including profiling—that are legally binding for you or that significantly impair you otherwise. However, this does not apply to decisions that are
- Required for the conclusion or fulfillment of a contract between you and the controller,
- Permissible under the legal regulations of the European Union or of the member state of the controller and if these legal regulations include appropriate measures for the protection of your rights, freedoms and legitimate interests or are
- Made with your express consent.
However, these decisions may not be based on special categories of personal data under Art. 9(1) of the General Data Protection Regulation, unless Art. 9(2) letter a or g of the General Data Protection Regulation applies and appropriate measures are taken to protect your rights, freedoms and legitimate interests.
For the cases in (1) and (3), the controller must implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, express your point of view and contest the decision.
j) Right to Submit Complaints to Supervisory Authorities
Irrespective of any other administrative or judicial remedy, you have the right to submit a complaint to the supervisory authorities, particularly in the member state of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data violates the General Data Protection Regulation.
The supervisory authorities to whom the complaint has been submitted to will inform the complainant on the progress and the outcome of the complaint, including the possibility of judicial remedies under Art. 78 of the General Data Protection Regulation.
