Article search |
|
|
|
Privacy Policy
Data privacy declaration
I. Controller (responsible party) in accordance with data protection regulations Latex Berlin Handelsgesellschaft mbH Geschäftsführer: Thomas Bischoff Seelower Straße 5 10439 Berlin Telefon: + 49 (0)30 44 68 85 95 E-Mail: support@blackstyle.de Webseite: www.blackstyle.de
II. Data protection officer
The corporate data protection officer is Mr. Peter Guthrie. He can be contacted using the details
above and by e-mail at datenschutz@latex-berlin.de.
III. Scope of the processing of personal data, legal basis for the processing of personal data, duration of storage / erasure
We take the protection and security of your data extremely seriously. We secure our website and other systems using technical and organisational means to prevent the loss, destruction, access, alteration or disclosure of your data by unauthorised persons. To protect the transfer of personal data, this website uses SSL encryption, which you can recognise by means of the character string https.
1. Data collection on visits to our website
In principle you can visit our website without giving your name.
However, when you access our website data regarding this process are automatically stored temporarily in a log file on the server of the provider we commission to process our data for hosting and presentation of the website.
During this process, the following data are retrieved and stored:
• IP address • Date and time of access • Internet service provider of user • Websites from which the user’s system has reached our website • Websites that arte accessed from the user’s system through our website • Information on the user’s browser type and version • Information on the user’s operating system
Personal user profiles are not created.
The purpose of the data processing is to guarantee smooth establishment of connection to the website and make usage of the site easier for visitors. The legal basis for this temporary data processing is article 6 paragraph 1, clause 1, lit. f) GDPR. Our legitimate interest is based on economic considerations so as to be able to place our website at the disposal of users and make it easier to use.
The data are erased as soon as they are no longer necessary for the purpose for which they were collected. Access data are erased at the latest 7 days after the page viewing has ended.
2. Cookies
On the pages of our website we use so-called cookies. Cookies are small text files that are installed on the user’s end device. When cookies are set, user information such as browser and IP addresses is collected and processed.
We use so-called “session cookies” or “transient cookies”, which are erased when you close your browser. These cookies are required for showing the content of the shopping cart in our online shop, enabling the login status and being able to register. These cookies save a so-called session ID, with which different requests from your browser can be assigned to a joint session.
You may at any time set your browser to inform you of the placing of cookies and make individual or general decisions as to which cookies should be allowed or rejected. In your browser menu, you can find information on the possibilities of cookie settings. If cookies are rejected, this may restrict the usability of our website.
The purpose of the placing of cookies is to make our website and offers more attractive for users, to determine the scope of our website and to optimise our positioning within Google. The legal basis for the temporary storage of the data is article 6 paragraph 1 clause 1 lit. f) GDPR. Our legitimate interest is based on economic considerations and the aforementioned purpose forf the use of cookies.
3. E-mail contact / contact form
You can contact us voluntarily using the e-mail addresses given and the contact form. If you contact use using these e-mail addresses or the contact form, we will process the personal data given in the e-mail or through the contact form (e-mail address, name, telephone number if provided and other data transmitted to us). You contact us voluntarily (by e-mail or using the contact form). A conversation with you is not possible without preparation and processing of the personal data.
The data are used exclusively for the processing of your request. The data will only be transferred to third parties after you have given the relevant consent.
The legal basis for the processing of the data provided following transmission of an e-mail or the contact form is article 6 paragraph 1 clause 1 lit f) GDPR. Our legitimate interest lies in being able to reply to your request. If the request is for taking steps prior to entering into a contract, the legal basis for the processing is article 6 paragraph 1 clause 1 lit. b) GDPR. After dealing with the request, processing of the data may be necessary in accordance with article 6 paragraph 1 clause 1 lit. c) in order to comply with our legal fiscal obligations. In the context of the balancing of interests, according to article 6 paragraph 1 clause 1 lit. f) GDPR we potentially process your data other than for fulfilment of the contract and the legal storage duties, in order to protect ourselves from the enforcement of claims. If you have given your consent to the processing, the legal basis for said processing is article 6 paragraph 1 clause 1 lit. a) GDPR.
If an application has been sent in for a job, the application forms will be erased or destroyed as soon as the application process has concluded.
If a contract is concluded as a consequence of a request by e-mail or using the contact form, our customers receive further information on the scope of the processing of personal data.
After processing of the request has concluded, unless we are obliged to store the data for a longer period (generally up to 10 years) for legal taxation and / or commercial storage and documentation reasons (e.g. due to the German commercial code, criminal code or revenue code), they are erased. We may store your data in order to retain evidence for the period in which claims can be brought against us (in individual cases, up to thirty years).
4. Registration
On our website you can voluntarily open a customer account. The details given in doing so (mandatory information: name, address, e-mail address, password created; voluntary information: company, VAT ID, telephone number, fax number) are processed by us. We collect these data for the purpose of maintaining the customer account, in order to facilitate the ordering process in future orders. The data in the customer account are not passed on to third parties. The legal basis for the processing of the data is article 6 paragraph 1 clause 1 lit. b) GDPR. Because we also obtain your consent upon signing up for the account, the legal basis is also article 6 paragraph 1 clause 1 lit. a) GDPR. The customer account will be erased when you withdraw your consent, unless we are obliged to store it for longer (generally speaking up to 10 years) as a result of legal taxation and / or commercial storage and documentation reasons (e.g. due to the German commercial code, criminal code or revenue code).
5. Newsletter
You can subscribe to our newsletter on our website by entering your e-mail address. The newsletter usually informs you once a month about new products and events. After registering on our website, we will send an e-mail to the address provided containing a confirmation link. This link must be clicked on by you to sign up for newsletter shipping. Through this so-called double-opt-in procedure, we ensure that you have actually consented to the receipt of the newsletter and to the data processing.
The e-mail address, date of registration and confirmation will be saved. The data will be stored until your withdrawal of consent. If you do not confirm, your e-mail address will be deleted after one week after we have sent you the confirmation e-mail.
The sole purpose of processing the data is to send you the newsletter. Since you have given us your consent for the use of your personal data for the sending of the newsletter and the processing of data for this purpose when ordering the newsletter, the legal basis for the processing of personal data is Art. 6 (1) sentence 1 lit. a) GDPR.
You may revoke your consent to the use of your e-mail address for sending the newsletter at any time with effect for the future by clicking on the corresponding link in the newsletter or by sending us an e-mail. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation. The data will be deleted after cancellation.
To send our newsletter, we use Cleverreach, a service of CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany ("Cleverreach"). A corresponding order processing contract has been completed with Cleverreach. The e-mail addresses are processed there. To measure the range, neither complete IP addresses nor cookies are used or processed.
6. Ordering goods
If you order goods in our online shop, you must give personal data in the context of the ordering process (name, address, e-mail address, and possible contact number).
The purpose of this data processing is to be able to make contact with you, to fulfil our contractual obligations towards you, to supply you the ordered goods, to invoice you for the delivery of goods, and possibly to defend against or enforce claims and fulfil our legal obligations (e.g. legal fiscal obligations).
The legal basis for the processing of the personal data is article 6 paragraph 1 clause 1 lit. b) GDPR. The consequence of failure to make the data available and process them would be that the contractual relationship could not be entered into. After performance of the contract, processing of the data is necessary in accordance with article 6 paragraph 1 clause 1 lit. c) GDPR in order to fulfil our legal fiscal obligations. In the context of the balancing of interests, according to article 6 paragraph 1 clause 1 lit. f) GDPR we potentially process your data other than for fulfilment of the contract and the legal storage duties, in order to protect ourselves from the enforcement of claims. If you have given your consent to the processing, the legal basis for said processing is article 6 paragraph 1 clause 1 lit. a) GDPR.
After performance of the contract the data are erased, unless we are obliged to store them for a longer period (generally up to 10 years) for legal taxation and / or commercial storage and documentation reasons (e.g. due to the German commercial code, criminal code or revenue code). We may store your data in order to retain evidence for the period in which claims can be brought against us (in individual cases, up to thirty years).
If necessary for fulfilment of the contract, your personal data will be passed on to service providers. The legal basis for all of these cases is article 6 paragraph 1 clause 1 lit. b) GDPR. The purpose of the transfer of the data is to be able to fulfil the mutual contractual obligations (storage of goods, payment).
In order to deliver the goods, the delivery service providers (DHL Paket GmbH, iloxx GmbH, UPS) are made aware of your data. Individual data may also be transferred as a result of legal obligations towards an authority (e.g. tax authority). In addition, an accountancy firm receives invoicing documents containing your data for the preparation of our tax declarations.
The respective credit institution and payment service provider used receive your data for the purpose of making payment.
PayPal
If you decide to pay by PayPal when you place an order for goods, we pass on the data relevant for the purchase (e.g. first name, surname, address, telephone number, IP address, e-mail address, number of articles, article number, invoice amount and taxes in percentage form, invoice information) to PayPal (Europe) S.à.r.l. & Cie., S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
We advise that in some cases PayPal carries out credit checks and passes your personal data on to credit agencies for this purpose. PayPal has a legitimate interest in this transfer, in order to determine the probability of payment default and thus be able to make a decision regarding the provision of the method of payment. The legal basis for this arises from article 6 paragraph 1 clause 1 lit. f) GDPR.
As well as address checks, PayPal also collects and uses information on the previous payment behaviour of the purchaser and probability figures regarding this behaviour in the future. PayPal calculates these scores using a scientifically-recognised mathematical statistical procedure. PayPal also uses your address details. If it turns out after the calculation that you are not credit worthy, PaPal will inform you of this immediately.
You can at any time withdraw your consent to the use of the personal data vis-á-vis PayPal. However, PayPal may have the right to process, use and transfer the personal data, if this is necessary for performance of the contractual payment via PayPal and/or legally prescribed.
You can obtain further information on the data privacy statement of PayPal through the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Ipayment
In cases of payment by credit card or direct debit, the payment will be made by ipayment, a service of 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as “1&1”). Your personal data will be passed on to 1&1 for invoicing purposes.
You can find more information and the data privacy statement of 1&1 via the following links: www.1und1.info/ipayment and https://hosting.1und1.de/terms-gtc/terms-privacy/
BS Payone
In cases of payment by credit card or direct debit, the payment may also be made by BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main. Your personal data will be passed on to BS PAYONE GmbH for invoicing purposes
You can find more information and the data privacy statement of 1&1 via the following link: https://www.bspayone.com/de/privacy
7. Google Analytics
We use Google Analytics, a web analytics service of Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Google uses so-called Cookies. These are text files that are stored on the browser of users of our website. The information generated by the cookie about your use of our website is transmitted to a Google server. In using Google Analytics, we have activated the IP anonymization feature. As a result the IP addresses of users of our website will be shortened by Google within the European Union or other party states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened and stored there.
Google is certified under the Privacy Shield Framework and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use the information transmitted as commissioned, to evaluate usage of our website and compile reports for us on website activities and to provide other services associated to website usage and internet usage for us. Pseudonymous user profiles may be created in this way. The IP address transmitted by your browser will not be merged with other data held by Google.
You can always set your browser to inform you of the placing of cookies and decide individually or in general which cookies should be accepted or rejected. In the menu of your browser you can find information on the possibilities of cookie settings. If cookies are rejected, the usability of our website my be limited.
You can also prevent the collection of the data generated by cookies regarding your use of the online offer from being passed on to Google and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can obtain more information at the following links: https://www.google.com/intl/de/policies/privacy/partners http://www.google.com/policies/technologies/ads http://www.google.de/settings/ads https://policies.google.com/privacy?gl=DE&hl=de https://support.google.com/analytics/answer/6004245?hl=de
The purpose for the use of Google Analytics is to make our website and offer more attractive for users, to determine the scope of our website and to optimise our positioning within Google. The legal basis for the temporary storage of the data is article 6 paragraph 1 lit. f) GDPR. Our legitimate interest is based on economic considerations and the aforementioned purpose of the use of the analytics tool. The data are erased when they are no longer needed for the analysis, but at the latest after 14 months.
8. Google +1 Schaltfläche
On our website we use the “+1” button – recognisable from the G + 1 – operated by Google Inc., 16000 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you view a page that contains this button, the presentation and content of the button is sent directly to your browser by Google. The scope and nature of the data Google can or does collect and save is beyond our control. If you are logged in to your Google account at the same time, Google may also be able to analyse your browsing behaviour. To prevent Google from requesting and/or saving data on you through this home page, please log out of your Google profile before viewing our site.
More information, in particular regarding to what extent you can use settings to protect your privacy, can be found under the following link: https://developers.google.com/+/web/buttons-policy
9. Facebook Social Plugins
This website uses so-called social plugins of the social network Facebook.com – recognisable by the “f” or “thumbs-up” sign – operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
As soon as you view a website containing a plugin like this, your browser establishes a direct connection with the Facebook servers. The content of the plugin is sent directly to your browser by Facebook and integrated into the website. We have no control over the scope of the data Facebook collects with the help of this plugin. As far as we know, Facebook obtains the information that you have viewed the relevant page on our internet site by means of this integration. If you are logged in to Facebook, Facebook can assign your visit to a Facebook account. If you click on the plug in or post a comment, the information in question will be sent directly to Facebook by your browser and stored there. Even if you are not a Facebook member, Facebook may still find out and store your IP address.
To prevent Facebook from collecting data on you through our home page and linking them to your member data stored by Facebook, log out of your Facebook account before visiting our home page.
You can find further information on data collection, data processing, data usage and the scope of data capture by Facebook, as well as your rights and the possibilities available to you for protecting your privacy and the data protection notice of Facebook under the following links: https://www.facebook.com/about/privacy/ https://www.facebook.com/settings?tab=ads
IV. Rights of data subjects
As a data subject, you have
• the right to be informed of the personal data on you that are being processed by us (article 15 GDPR), • the right to rectification of the processing (article 16 GDPR), • the right to erasure of the processing (article 17 GDPR), • the right to restriction of the processing (article 18 GDPR), • the right to notification (article 19 GDPR), • the right to data portability (article 20 GDPR), • the right to object to the processing (article 21 GDPR; see also highlighted text below), • the right to lodge a complaint with a supervisory authority (article 77 GDPR in conjunction with § 19 German Federal Data Protection Law).
If the processing of the data is based on your consent, in accordance with article 7 paragraph 3 GDPR you have
• the right to withdraw this consent at any time; this shall not affect the lawfulness of the processing based on consent before its withdrawal. If you would like to withdraw your consent, all you have to do is inform us at: datenschutz@latex-berlin.de Right to object in accordance with article 21 GDPR
a) Right to object in individual cases You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on article 6 paragraph 1 lit. e) GDPR (data processing in the public interest) or article 6 paragraph 1 lit. f) GDPR (data processing based on overriding interests); this also includes profiling based on those provisions.
b) Right to object to processing of data for marketing purposes Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also includes profiling, to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
If you would like to object to the processing, all you have to do is inform us at: datenschutz@latex-berlin.de
|
You can see the exact wording of the legal regulations on your rights as a data subject at the end of the data privacy declaration.
V. Alterations in the data privacy declaration
If required as a result of the further development of the services we offer on these pages and / or due to changes in legal regulations, we may alter our data privacy declaration. The currently-valid draft of our data privacy declaration can be seen on our website.
Date of Data Privacy Declaration 01. January 2019
Article 15 GDPR – Data subject’s right to be informed
(1) The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in article 22 paragraphs 1 and 4 and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
(2) Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to article 46 relating to the transfer.
(3) The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
(4) The right to obtain a copy referred to in paragraph 1b shall not adversely affect the rights and freedoms of others.
Article 16 GDPR – Right to rectification
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Article 17 GDPR – Right to erasure ("right to be forgotten")
(1) The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. b) the data subject withdraws consent on which the processing is based according to article 6 paragraph 1 letter a or article 9 paragraph 2 letter a, and where there is no other legal ground for the processing. c) the data subject objects to the processing pursuant to article 21 paragraph 1 and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to article 21 paragraph 2. d) the personal data have been unlawfully processed. e) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. f) the personal data have been collected in relation to the offer of information society services referred to in article 8 paragraph 1.
(2) Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
(3) Paragraphs 1 and 2 shall not apply to the extent that processing is necessary a) for exercising the right of freedom of expression and information; b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; c) for reasons of public interest in the area of public health in accordance with article 9 paragraph 2 letters h and I, and article 9 paragraph 3; d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with article 89 paragraph 1, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or e) for the establishment, exercise or defence of legal claims.
Article 18 GDPR – Right to restriction of processing
(1) The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data, b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, or d) the data subject has objected to processing pursuant to article 21 paragraph 1, pending the verification whether the legitimate grounds of the controller override those of the data subject.
(2) Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
(3) A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.
Article 19 GDPR – Notification obligation regarding rectification or erasure of personal data or restriction of processing
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with article 16, article 17 paragraph 1 and article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
Article 20 GDPR – Right to data portability
(1) The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where a) the processing is based on consent pursuant to article 6 paragraph 1 letter a or article 9 paragraph 2 letter a or on a contract pursuant to article 6 paragraph 1 letter b and b) the processing is carried out by automated means.
(2) In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
(3) The exercise of the right referred to in paragraph 1 of this article shall be without prejudice to article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
(4) The right referred to in paragraph 2 shall not adversely affect the rights and freedoms of others.
Article 21 GDPR – Right to object
(1) The data subject shall have the right to object, on ground relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on article 6 paragraph 1 letters e or f, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
(2) Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
(3) Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
(4) At the latest at the time of the first communication with the data subject, the right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.
(5) In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
(6) Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to article 89 paragraph 1, the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Article 22 GDPR – Automated individual decision-making, including profiling
(1) The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her similarly significantly affects him or her.
(2) Paragraph 1 shall not apply if the decision a) is necessary for entering into, or performance of, a contract between the data subject and a data controller, b) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or c) is based on the data subject’s explicit consent.
(3) In the cases referred to in paragraph 2 letters a and c, the data controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
(4) Decisions referred to in paragraph 2 shall not be based on special categories of personal data referred to in article 9 paragraph 1, unless article 9 paragraph 2 letter a or g applies and suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place.
Article 77 GDPR – Right to lodge a complain with a supervisory authority
(1) Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
(2) The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to article 78.
Article 7 paragraph 3 GDPR – Conditions for consent (right to withdraw consent)
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent.
003
|
|
|
|
|