11. Rights as a data subject
If your personal data is processed, you are a data subject as defined in the GDPR and you have the following rights taken from the third chapter of the GDPR:
a. Information, rectification, restriction and deletion
You have the right to access the data stored about you by BASS and information concerning its origin and recipient and the purpose of data processing by BASS’s websites free of charge at any time. In addition, you have the right to rectify, delete or restrict the processing of your personal data, provided the legal requirements to do so are met. Details can be found in the relevant statutory provisions, Art. 15 to 19 GDPR.
b. Right to data portability
You have the right to receive the personal data concerning you that you have provided to BASS, in a structured, commonly used and machine-readable format. Details can be found in Art. 20 GDPR.
c. Right to information
If you have exercised your right of rectification, deletion or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the controller.
d. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is based upon point (e) or (f) of Art. 6 (1) GDPR, including profiling based upon those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. According to Art. 77 GDPR you can contact our corporate office for exercising your rights of objection. You can find contact details below.
e. Revocability of declarations of consent under data protection law
You may also revoke your consent with regard to BASS at any time with effect for the future using the contact details given below.
f. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.