a) Right to con­fir­ma­tion
Every indi­vi­dual con­cer­ned has the right, gran­ted by the Euro­pean legis­la­tor, to request con­fir­ma­tion from the data con­trol­ler as to whe­ther per­so­nal data con­cer­ning them is being pro­ces­sed. If an indi­vi­dual wis­hes to exer­cise this right to con­fir­ma­tion, they can cont­act our data pro­tec­tion offi­cer or ano­ther employee of the data con­trol­ler at any time.

b) Right to infor­ma­tion
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to obtain from the data con­trol­ler free infor­ma­tion about the per­so­nal data stored about them and to receive a copy of this infor­ma­tion at any time. Fur­ther­more, the Euro­pean legis­la­tor has gran­ted the indi­vi­dual affec­ted the right to infor­ma­tion about the fol­lo­wing:

the pur­po­ses of pro­ces­sing

• the cate­go­ries of per­so­nal data being pro­ces­sed
• the reci­pi­ents or cate­go­ries of reci­pi­ents to whom the per­so­nal data have been or will be dis­c­lo­sed, in par­ti­cu­lar reci­pi­ents in third count­ries or inter­na­tio­nal orga­niza­ti­ons
• if pos­si­ble, the plan­ned dura­tion for which the per­so­nal data will be stored, or, if this is not pos­si­ble, the cri­te­ria used to deter­mine this dura­tion
• the exis­tence of the right to request rec­ti­fi­ca­tion or era­sure of per­so­nal data con­cer­ning the indi­vi­dual or rest­ric­tion of pro­ces­sing by the data con­trol­ler, as well as the right to object to such pro­ces­sing
• the exis­tence of the right to lodge a com­plaint with a super­vi­sory aut­ho­rity
• if the per­so­nal data were not coll­ec­ted from the indi­vi­dual con­cer­ned: all available infor­ma­tion about the source of the data
• the exis­tence of auto­ma­ted decis­ion-making, inclu­ding pro­fil­ing, accor­ding to Article 22(1) and (4) of the GDPR, and - at least in these cases - meaningful infor­ma­tion about the logic invol­ved, as well as the signi­fi­cance and envi­sa­ged con­se­quen­ces of such pro­ces­sing for the indi­vi­dual con­cer­ned

Fur­ther­more, the indi­vi­dual con­cer­ned has the right to be infor­med whe­ther per­so­nal data has been trans­fer­red to a third coun­try or to an inter­na­tio­nal orga­niza­tion. If this is the case, the indi­vi­dual con­cer­ned also has the right to obtain infor­ma­tion about the appro­priate safe­guards rela­ting to the trans­fer.
If an indi­vi­dual wis­hes to exer­cise this right to infor­ma­tion, they can cont­act our data pro­tec­tion offi­cer or ano­ther employee of the data con­trol­ler at any time.

c) Right to cor­rec­tion
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to request the imme­diate cor­rec­tion of inac­cu­rate per­so­nal data con­cer­ning them. Fur­ther­more, the indi­vi­dual con­cer­ned has the right, taking into account the pur­po­ses of the pro­ces­sing, to request the com­ple­tion of incom­plete per­so­nal data, inclu­ding by means of a sup­ple­men­tary state­ment.
If an indi­vi­dual wis­hes to exer­cise this right to cor­rec­tion, they can cont­act our data pro­tec­tion offi­cer or ano­ther employee of the data con­trol­ler at any time.If an indi­vi­dual wis­hes to exer­cise this right to cor­rec­tion, they can cont­act our data pro­tec­tion offi­cer or ano­ther employee of the data con­trol­ler at any time.

d) Right to era­sure (Right to be for­got­ten)
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to request from the con­trol­ler the imme­diate dele­tion of per­so­nal data con­cer­ning them if one of the fol­lo­wing reasons applies and the pro­ces­sing is not neces­sary:

• The per­so­nal data have been coll­ec­ted or other­wise pro­ces­sed for pur­po­ses for which they are no lon­ger neces­sary.
• The indi­vi­dual con­cer­ned with­draws their con­sent, on which the pro­ces­sing was based accor­ding to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the pro­ces­sing.
• The indi­vi­dual con­cer­ned objects to the pro­ces­sing pur­su­ant to Article 21(1) of the GDPR, and there are no over­ri­ding legi­ti­mate grounds for the pro­ces­sing, or the indi­vi­dual con­cer­ned objects to the pro­ces­sing pur­su­ant to Article 21(2) of the GDPR.
• The per­so­nal data have been unlawfully pro­ces­sed.
• The dele­tion of per­so­nal data is neces­sary to ful­fill a legal obli­ga­tion under Union law or the law of the Mem­ber Sta­tes to which the con­trol­ler is sub­ject.
• The per­so­nal data were coll­ec­ted in rela­tion to ser­vices offe­red by the infor­ma­tion society as refer­red to in Article 8(1) of the GDPR.

If any of the above-men­tio­ned reasons apply and an indi­vi­dual wis­hes to request the dele­tion of per­so­nal data stored by Artur Mül­ler & Sons GmbH, they can cont­act our data pro­tec­tion offi­cer or ano­ther employee of the data con­trol­ler at any time. The data pro­tec­tion offi­cer of Artur Mül­ler & Sons GmbH or ano­ther employee will promptly com­ply with the dele­tion request.
If per­so­nal data have been made public by Artur Mül­ler & Sons GmbH, and our com­pany is obli­ga­ted as the con­trol­ler under Article 17(1) of the GDPR to delete the per­so­nal data, Artur Mül­ler & Sons GmbH will, taking into account available tech­no­logy and imple­men­ta­tion costs, take reasonable mea­su­res, inclu­ding tech­ni­cal mea­su­res, to inform other data con­trol­lers pro­ces­sing the published per­so­nal data that the indi­vi­dual con­cer­ned has reques­ted dele­tion of any links to, or copies or repli­ca­ti­ons of, this per­so­nal data from those other data con­trol­lers, unless pro­ces­sing is neces­sary. In each case, the data pro­tec­tion offi­cer of Artur Mül­ler & Sons GmbH or ano­ther employee will arrange for what is neces­sary.

e) Right to rest­ric­tion of pro­ces­sing
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to request from the con­trol­ler the rest­ric­tion of pro­ces­sing if one of the fol­lo­wing con­di­ti­ons is met:

• The accu­racy of the per­so­nal data is con­tes­ted by the indi­vi­dual con­cer­ned, for a period enab­ling the con­trol­ler to verify the accu­racy of the per­so­nal data.
• The pro­ces­sing is unlawful, and the indi­vi­dual con­cer­ned oppo­ses the era­sure of the per­so­nal data and ins­tead requests the rest­ric­tion of their use.
• The con­trol­ler no lon­ger needs the per­so­nal data for the pur­po­ses of pro­ces­sing, but the indi­vi­dual con­cer­ned requi­res them for the estab­lish­ment, exer­cise, or defense of legal claims.
• The indi­vi­dual con­cer­ned has objec­ted to pro­ces­sing pur­su­ant to Article 21(1) of the GDPR, and it has not yet been deter­mi­ned whe­ther the legi­ti­mate grounds of the con­trol­ler over­ride those of the indi­vi­dual con­cer­ned.

If any of the above con­di­ti­ons apply and an indi­vi­dual wis­hes to request the rest­ric­tion of per­so­nal data stored by Artur Mül­ler & Sons GmbH, they can cont­act our data pro­tec­tion offi­cer or ano­ther employee of the data con­trol­ler at any time. The data pro­tec­tion offi­cer of Artur Mül­ler & Sons GmbH or ano­ther employee will arrange for the rest­ric­tion of pro­ces­sing.

f) Right to data por­ta­bi­lity
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to receive the per­so­nal data con­cer­ning them, which they have pro­vi­ded to a con­trol­ler, in a struc­tu­red, com­monly used, and machine-rea­da­ble for­mat. They also have the right to trans­mit those data to ano­ther con­trol­ler wit­hout hin­drance from the con­trol­ler to whom the per­so­nal data have been pro­vi­ded, where: 1. the pro­ces­sing is based on con­sent pur­su­ant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a con­tract pur­su­ant to Article 6(1)(b) of the GDPR, and 2. the pro­ces­sing is car­ried out by auto­ma­ted means, unless the pro­ces­sing is neces­sary for the per­for­mance of a task car­ried out in the public inte­rest or in the exer­cise of offi­cial aut­ho­rity ves­ted in the con­trol­ler.
Fur­ther­more, in exer­cis­ing their right to data por­ta­bi­lity under Article 20(1) of the GDPR, the indi­vi­dual con­cer­ned has the right to have per­so­nal data trans­mit­ted directly from one con­trol­ler to ano­ther, where tech­ni­cally fea­si­ble and pro­vi­ded that this does not adver­sely affect the rights and free­doms of others.
To assert the right to data por­ta­bi­lity, the indi­vi­dual con­cer­ned can cont­act the data pro­tec­tion offi­cer appoin­ted by Artur Mül­ler & Sons GmbH or ano­ther employee at any time.

g) Right to object
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to object at any time, on grounds rela­ting to their par­ti­cu­lar situa­tion, to the pro­ces­sing of per­so­nal data con­cer­ning them, which is based on Article 6(1)(e) or (f) of the GDPR. This also applies to pro­fil­ing based on these pro­vi­si­ons.

Artur Mül­ler & Sons GmbH will cease pro­ces­sing the per­so­nal data in the event of objec­tion, unless we can demons­trate com­pel­ling legi­ti­mate grounds for the pro­ces­sing which over­ride the inte­rests, rights, and free­doms of the indi­vi­dual con­cer­ned, or if the pro­ces­sing is neces­sary for the estab­lish­ment, exer­cise, or defense of legal claims.

If Artur Mül­ler & Sons GmbH pro­ces­ses per­so­nal data for the pur­pose of direct mar­ke­ting, the indi­vi­dual con­cer­ned has the right to object at any time to the pro­ces­sing of per­so­nal data for such mar­ke­ting pur­po­ses. This also applies to pro­fil­ing to the ext­ent that it is rela­ted to such direct mar­ke­ting. If the indi­vi­dual con­cer­ned objects to the pro­ces­sing for direct mar­ke­ting pur­po­ses, Artur Mül­ler & Sons GmbH will no lon­ger pro­cess per­so­nal data for these pur­po­ses.

Fur­ther­more, the indi­vi­dual con­cer­ned has the right, for reasons ari­sing from their par­ti­cu­lar situa­tion, to object to the pro­ces­sing of per­so­nal data con­cer­ning them by Artur Mül­ler & Sons GmbH for sci­en­ti­fic or his­to­ri­cal rese­arch pur­po­ses or sta­tis­ti­cal pur­po­ses pur­su­ant to Article 89(1) of the GDPR, unless such pro­ces­sing is neces­sary for the per­for­mance of a task car­ried out in the public inte­rest.

To exer­cise the right to object, the indi­vi­dual con­cer­ned can directly cont­act the data pro­tec­tion offi­cer of Artur Mül­ler & Sons GmbH or ano­ther employee. The indi­vi­dual con­cer­ned is also free to exer­cise their right to object in rela­tion to the use of infor­ma­tion society ser­vices, regard­less of Direc­tive 2002/58/EC, by auto­ma­ted means using tech­ni­cal spe­ci­fi­ca­ti­ons.

h) Auto­ma­ted indi­vi­dual decis­ion-making, inclu­ding pro­fil­ing
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, not to be sub­ject to a decis­ion based solely on auto­ma­ted pro­ces­sing, inclu­ding pro­fil­ing, which pro­du­ces legal effects con­cer­ning them or simi­larly signi­fi­cantly affects them, unless the decis­ion: 1. is neces­sary for ente­ring into or per­forming a con­tract bet­ween the indi­vi­dual and the con­trol­ler, 2. is aut­ho­ri­zed by Union or Mem­ber State law to which the con­trol­ler is sub­ject and which also lays down sui­ta­ble mea­su­res to safe­guard the individual's rights and free­doms and legi­ti­mate inte­rests, or 3. is based on the individual's expli­cit con­sent.
If the decis­ion is neces­sary for ente­ring into or per­forming a con­tract bet­ween the indi­vi­dual and the con­trol­ler, or if it is based on the individual's expli­cit con­sent, Artur Mül­ler & Sons GmbH takes appro­priate mea­su­res to safe­guard the rights and free­doms as well as the legi­ti­mate inte­rests of the indi­vi­dual, inclu­ding at least the right to obtain human inter­ven­tion on the part of the con­trol­ler, to express their point of view, and to con­test the decis­ion.
If the indi­vi­dual con­cer­ned wis­hes to exer­cise rights rela­ted to auto­ma­ted decis­i­ons, they can do so at any time by cont­ac­ting our data pro­tec­tion offi­cer or ano­ther employee respon­si­ble for pro­ces­sing.

i) Right to with­draw con­sent for data pro­ces­sing
Every indi­vi­dual affec­ted by the pro­ces­sing of per­so­nal data has the right, gran­ted by the Euro­pean legis­la­tor, to with­draw con­sent for the pro­ces­sing of per­so­nal data at any time.
If the indi­vi­dual con­cer­ned wis­hes to exer­cise their right to with­draw con­sent, they can do so at any time by cont­ac­ting our data pro­tec­tion offi­cer or ano­ther employee respon­si­ble for pro­ces­sing.