A central aspect of data protection regulations is the implementation of adequate options allowing you to dispose of your own personal data, even after processing of said personal data has already taken place. For this purpose, a series of rights of the data subject are set in place. We shall comply with your corresponding requests to exercise your rights without undue delay and in any event within one (1) month of receipt of the request. Please direct your request to the following address: firstname.lastname@example.org. Specifically, the following rights are stipulated:
(a) Should you exercise your right to information, we shall provide you with all relevant information regarding the processing of your personal data by us, permitted to the extent of the law. For this purpose, we will send you (i) copies of the data (e-mails, database excerpts, etc.), as well as information on (ii) concretely processed data, (iii) processing purposes, (iv) categories of processed data, (v) recipients, (vi) the storage period or the criteria for determining it, (vii) the origin of the data and (viii) any further information depending on the individual case. Please note, however, that we cannot hand over any documents that could impair the rights of other persons.
(b) With the right to rectification you may request that we rectify wrongly recorded data, data that have become inaccurate or incomplete personal data (for the purpose of the respective processing). Your request will then be examined and the data processing operations affected may be restricted for the duration of the examination upon request.
(c) The right to (data) erasure may be exercised (i) where the storage of the data is not necessary for the purpose of the processing operation, (ii) where your consent has been revoked, (iii) where there is a particular objection to the processing in question being based on Silhouette's legitimate interests, (iv) where the processing is unlawful, (v) where there is a legal obligation to delete the data, and (vi) where the processing is carried out by minors under the age of 16.
(d) A right to restriction of processing, after the exercise of which affected data may only be stored, exists (only) in special cases. In addition to the possibility of restriction during the evaluation period of data correction requests, (i) unlawful data processing (unless erasure is required) and (ii) the duration of the review of an objection request pursuant to Art 21 (1) GDPR are also covered.
(e) You also have the right to object to data processing at any time. But this only applies if the processing is based on the legitimate interests of Silhouette. Note, however, that legitimate interests are only used as a legal basis for processing operations in individual cases.
(f) You have the right to lodge a complaint with a relevant national supervisory authority (see point 10).
(g) You also have a right to data transfer, after the exercise of which you have the right to obtain the concerned data in a structured, common and machine-readable format and to transfer these data to another responsible person as well as to request a direct transfer to another responsible person.
Please also note that we may be unable to comply with your request due to compelling reasons worthy of protection in regards to the processing operation (weighing of interests) or if processing is necessary due to the assertion, exercise or defense of legal claims (on our part). The same applies in the case of excessive requests, whereby a fee may be charged as well as for the fulfilment of manifestly unfounded requests.