Under applicable data protection law, you as the data subject have the following rights:
Right to confidentiality (§1 Abs. 1 DSG)
Every person has the right to confidentiality of the personal data concerned, insofar as there is an interest worthy of protection. Accordingly, your data must always be treated confidentially and must not be made accessible beyond the necessity for the specific purpose of processing.
Right to information (Art. 13 and 14 GDPR)
You have the right to be informed clearly and transparently at any time about processing operations taking place. This obligation is fulfilled with these data protection information pages.
Right to disclosure (Art. 15 GDPR)
Sie haben das Recht, bei der jeweilig verantwortlichen Institution zu erfragen, ob und zu welchen Zwecken Daten zur eigenen Person verarbeitet werden.
You have the right to ask the respective responsible institution whether and for what purposes data relating to your own person are processed.
Right to rectification (Art. 16 GDPR)
As a data subject, you have the right to request the controller to correct any inaccurate personal data. Accordingly, it is also possible to request completion of an incomplete data set by means of a supplementary declaration.
As a data subject, a restriction of processing may be requested until the accuracy of the data can be established (see right to restriction of processing).
In order to exercise this right, the data subject must submit a request to the controller.
Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your data. This must be complied with unless the data records concerned are still being processed on the basis of a legal basis that precludes erasure. If the legal requirements for deletion are met, deletion will be carried out immediately.
Right to restriction of processing (Art. 18 GDPR)
As with a deletion claim, you have the right to request the restriction of processing. In this case, the data must remain stored (e.g. to preserve evidence), but may no longer be actively processed and thus used.
Right to data portability (Art. 20 GDPR)
You have the right to receive the data that you have provided to us in a common machine-readable format if the processing is based on your consent or the performance of a contract. There is no free choice of format.
Right to object (Art. 21 GDPR)
You have the right to object to data processing based on legitimate interest. In this case, there is a legal obligation to weigh your interests against our own. Depending on the outcome, the consequence may be a justified rejection of the objection or the immediate cessation of data processing.
Right not to be subject to an exclusively automated decision (Art. 22 GDPR)
Data subjects have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning them or similarly significantly affects them. Except in certain cases (before a contract is concluded, on a legal basis as well as with consent).
Right to lodge a complaint in the event of a breach
If you believe that data relating to you is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. The competent supervisory authority for Austria is:
Austrian Data Protection Authority
Telephone: +43 1 52 152-0