Rights of data subjects and right to lodge a complaint
In the following, we would like to draw your attention to the rights to which you are entitled as a data subject whose personal data are (or are to be) processed:
Withdrawal of consent (Art. 7 (3) GDPR)
If the processing of personal data is based on your consent, you can revoke your consent at any time without giving reasons, with effect for the future. 'The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.'
Right to object (Art. 21 GDPR)
The right to object includes the possibility for data subjects to object to the further processing of their personal data in a particular situation, to the extent that this is justified by the performance of public tasks or public and private interests.
In addition, in the case of direct advertising, an objection to data processing for advertising purposes is also permissible without stating a reason and without weighing interests.
Other rights of data subjects
Right to information about processed data (Art. 15 GDPR)
With the right to information, the data subject receives comprehensive access to the data concerning him or her and some other important criteria such as the processing purposes or the storage period.
Right to rectification of inaccurate data (Art. 16 GDPR)
The right to rectification includes the possibility for the data subject to have incorrect personal data concerning him or her corrected.
Right to erasure (Art. 17 GDPR)
The right to erasure includes the possibility for the data subject to have data deleted by the controller. However, this is only possible if the personal data concerned are no longer necessary, are processed unlawfully or if consent to this has been revoked.
Right to restriction of processing (Art. 18 GDPR)
The right to restriction of processing includes the possibility for the data subject to prevent further processing of the personal data concerning him or her for the time being. A restriction occurs especially in the examination phase of other rights management by the data subject.
Right to data portability (Art. 20 GDPR)
The right to data portability includes the possibility for the data subject to receive the personal data concerning him or her from the controller in a common, machine-readable format in order to have it forwarded to another controller, if necessary.
Notes:
- To the extent that the data concerned are social data, further – in particular restrictive – provisions on the rights of data subjects result from Sections 83 and 84 of the Tenth German Social Code (SGB X).
- The exercise of your rights as a data subject has no effect on the processing of social data for the fulfilment of your membership or insurance relationship with DAK-Gesundheit and for the performance of the legally prescribed tasks as a health and care insurance company.
Right to lodge a complaint with a supervisory authority
German Federal Commissioner for Data Protection
and Freedom of Information
Graurheindorfer Straße 153
53117 Bonn, Germany
poststelle@bfdi.bund.deor
poststelle@bfdi.de-mail.de
German Federal Office for Social Security (BAS)
Friedrich-Ebert-Allee 38
53113 Bonn, Germany
poststelle@bas.bund.deor
poststelle@bas.de-mail.de
