The data subject has the right to obtain confirmation from the data controller as to whether personal data concerning them is being processed. If this is the case, they have a right to access this personal data and to the information detailed in Article 15 GDPR.

The data subject has the right to request from the controller without undue delay the rectification of inaccurate personal data concerning them and, if applicable, the completion of incomplete personal data (Article 16 GDPR).

The data subject has the right to request from the controller the immediate deletion of personal data concerning them where one of the reasons specified in Article 17 GDPR applies—for example, if the data is no longer necessary for the purposes for which it was collected (right to erasure).

The data subject has the right to request the restriction of processing if one of the conditions listed in Article 18 GDPR is met—for example, if the data subject has objected to the processing for the duration of the controller’s assessment.

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The controller will then no longer process the data unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims (Article 21 GDPR).

Each data subject has the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority if they believe that the processing of personal data concerning them infringes the GDPR (Article 77 GDPR). The data subject may lodge the complaint with a supervisory authority in the Member State of their habitual residence, place of work, or the place of the alleged infringement.

In Saxony-Anhalt, the competent supervisory authority is:

Landesbeauftragte für den Datenschutz Sachsen-Anhalt [State Commissioner for Data Protection Saxony-Anhalt] Postfach 1947
39009 Magdeburg
Tel.: 0391 81803-0
Email: poststelle@lfd.sachsen-anhalt.de