§ 2 Your rights
(1) You have the right at any time to demand more specific information about the data stored on you, to inspect this data and to request that incorrect data about you be rectified or that the stored data be erased completely or in part.
(2) If personal data from you is processed, you are the data subject within the meaning of the General Data Protection Regulation (GDPR) and you are entitled to the following rights in relationship to Koenig & Bauer (controller):
1. Right to information
In accordance with Article 15 GDPR, you can request information about your personal data that we process. In particular, you can request information on the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to rectify or erase personal data or to object to such processing to restrict its processing or to object to such processing, the right to lodge a complaint, the source of their data where it has not been collected by us, and on the existence of automated decision-making, including profiling and any meaningful information on their details.
2. Right to rectification
In accordance with Article 16 GDPR, you can request that, where it is incorrect or incomplete, your personal data that we store be rectified or completed without undue delay.
3. Right to erasure
In accordance with Article 17 GDPR, you can demand the erasure of your personal data that we store, unless the processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims.
4. Right to restriction of processing
In accordance with Article 17 GDPR, you can demand that the processing of your personal data be restricted if you contest the accuracy of the personal data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it in order to establish, exercise or defend legal claims or you have objected to the processing pursuant to Article 21(1) GDPR.
5. Right to data portability
In accordance with Article 17 GDPR, you can ask to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to have this data transmitted to another controller if the processing is based on consent or on a contract and the processing is carried out by automated means.
6. Right to object
If we process your personal data based on a balancing of interests (legal basis Article 6(1) f) GDPR), you can object, on grounds relating to your particular situation, at any time to the processing of the personal data concerning you; this also applies for any “profiling” based on those provisions.
Processing of your personal data based on a balancing of interests (legal basis Article 6(1) f) GDPR) takes place in particular when the processing is not necessary in order to fulfil a contract with you. We present this in the description below. When exercising an objection of this kind, please state the reasons why we should not process your personal data in the way in which we perform this. If you submit a reasoned objection, we will examine the situation and either suspend or adjust the data processing or demonstrate to you our compelling legitimate grounds on the basis of which we will continue to process the data.
You also have the right to revoke the declaration of consent you have given under data protection law at any time with future effect. The data in question will then be erased conditionally immediately. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
In this event, please send your revocation, stating your full name and your e-mail address to firstname.lastname@example.org
A restriction on the processing (blocking of the data) can be implemented instead of erasure in the cases stipulated by law.
You can of course object to the processing of your personal data for advertising purposes and data analysis at any time.
You can inform us of your objection to processing for advertising purposes by contacting us using the following contact details:
Koenig & Bauer AG
Marketing / Communication
7. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and the data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the your rights and freedoms and legitimate interests; or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard the your rights and freedoms and legitimate interests are in place.
In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, which includes as a minimum the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.
8. Right to lodge a complaint with a supervisory authority
You furthermore have the right to file a complaint with the competent data protection supervisory authority about our processing of your personal data.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to your the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
9. General questions and contact options
Should you have any questions about the collection, processing or use or your personal data, or if you wish to receive information, correct or erase your data or revoke any consent you have granted, please contact our data protection officer. You can find the contact details under [point 1] of this data privacy statement.