Skip to content

Rights of the data subjects

Notes on rights of data subjects

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information detailed in Art. 15 GDPR.

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where that is the case, to demand the completion of incomplete personal data (Art. 16 GDPR).

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay inasmuch as one of the reasons detailed in Art. 17 GDPR applies, e.g. if the data are no longer necessary for the planned purposes (right to erasure).

The data subject shall have the right to obtain from the controller restriction of processing where one of the requirements listed in Art. 18 GDPR applies, e.g. the data subject has filed an objection to processing, for the period of verification by the controller.

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless he/she demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing serves for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Every data subject shall have the right to lodge a complaint with a supervisory authority, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR).

The data subject may assert this right with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.

Responsible supervisory authority: 

Austrian Data Protection Authority,
Barichgasse 40-42, 1030 Vienna

Data protection policy