§ 2 Your rights
(1) You have the right, at any time, to demand more specific information on the data saved about your person, to view this data, and to demand either that incorrect data be rectified or that the save data be deleted either in full or in part.
(2) Where personal data obtained from you is processed, you are the data subject within the definition specified in the General Data Protection Regulation (GDPR) and are entitled to assert the following rights vis-à-vis Koenig & Bauer (as controller):
1. Right of access to information
In accordance with Article 15 GDPR, you are entitled to demand information about our processing of your personal data. In particular, you can demand information regarding the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data has been or may be disclosed, the planned duration of retention of the data, your entitlement to demand the rectification or erasure of personal data, or to object to or restrict data processing, your right to lodge a complaint, the source of your data insofar as it was not collected by us, and the existence of any automated decision-making processes, including profiling, and as applicable any significant information on the details of such processes.
2. Right to rectification
In accordance with Article 16 GDPR, you can demand that, where the personal data saved by us is inaccurate or incomplete, it be rectified or completed without undue delay.
3. Right to erasure
In accordance with Article 17 GDPR, you can demand the erasure of personal data saved by us, insofar as the processing is not necessary to enable the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
4. Right to restriction of processing
In accordance with Article 18 GDPR, you can demand that processing of your personal data be restricted insofar as you contest the accuracy of the personal data, the processing is unlawful but you oppose its erasure and we no longer need the data, however you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing in accordance with Article 21 GDPR.
5. Right to data portability
In accordance with Article 20 GDPR, you can demand to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to have this data transmitted to another controller, insofar as the processing is based on consent or on a contract and the processing is carried out by automated means.
6. Right to object
Insofar as we process your personal data on the basis of a balancing of interests (legal basis as per Article 6(1)(f) GDPR), you are entitled to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to any so-called “profiling” on the basis of said provisions.
Processing of your personal data is performed on the basis of a balancing of interests (legal basis as per Article 6(1)(f) GDPR), in particular where the processing is not necessary in order to fulfil a contract with you, as indicated by us in the subsequent description in each case. When raising such an objection, we ask you to state the reasons why we should refrain from processing your personal data in the current manner. If you submit a reasoned objection, we will examine the facts of the situation and either cease or adapt our data processing or else present to you the compelling legitimate grounds that form the basis for which we will continue to process the data.
You are also entitled to revoke your declaration of consent under data protection law at any time with effect for the future. The data concerned will then be erased accordingly without delay. The withdrawal of your consent does not affect the lawfulness of processing based on the consent prior to said withdrawal.
Please send notification of your withdrawal of consent, stating your full name and your e-mail address, to:
Restriction of any further processing (blocking of the data) is permitted in lieu of erasure in the cases specified in the legal provisions.
You are naturally entitled to object to the processing of your personal data for advertising purposes and data analysis at any time.
You can inform us of your objection to the processing of personal data for advertising purposes using the following contact details:
Koenig & Bauer AG
Marketing / Communication
7. Automated individual decision-making, including profiling
You have the right not to be subject to decisions based solely on automated processing – including profiling – where such decisions produce legal effects or affect you otherwise in a similarly significantly manner. This shall not apply if the decision
(1) is necessary to enable the concluding or performance of a contract between you and the data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or
(3) is based on your explicit consent.
Such decisions, however, must not be based on the special categories of personal data referred to in Article 9(1) GDPR, unless either point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and your legitimate interests are in place.
In the cases referred to in (1) and (3) above, the data controller shall implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.
8. Right to lodge a complaint with a supervisory authority
You are furthermore entitled to lodge a complaint with the competent supervisory authority in data protection matters regarding our processing of your personal data.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement if you believe that the processing of your personal data is not compliant with GDPR provisions.
The supervisory authority with which a complaint is lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of judicial remedy in accordance with Article 78 GDPR.
9. General questions and contact options
If you have any questions regarding the collection, processing or use of your personal data, or if you wish to receive information, to demand correction or erasure of your data, or to revoke any consent you have previously granted, please contact our data protection officer. Contact options can be found under [point §1] of this data privacy statement.