Below, we have summarised your rights regarding your personal data. You can find the full legal texts in the referenced articles. This summary is for your convenience and does not create any additional rights beyond those defined by the GDPR.
You have the following rights in relation to the data controller:
Changes to this privacy policy
We reserve the right to update this privacy policy to ensure it always meets current legal requirements or to reflect changes in our services. Any updated policy will apply on your next visit.

• Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw your consent to data processing at any time, with future effect.

• Right of access (Art. 15 GDPR): You can ask whether we process your personal data. Specifically, you can request details on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or criteria for determining it, and the existence of rights to rectification, erasure, restriction of processing, or objection, as well as the right to lodge a complaint. You can also request information about the source of any data not collected directly from you. Additionally, you have the right to know if automated decision-making is used, if your data is transferred to a third country or international organisation, and the safeguards in place for such transfers. You can request a copy of your personal data, provided this does not affect the rights and freedoms of others.

• Right to rectification (Art. 16 GDPR): You can request the prompt correction of inaccurate personal data or the completion of incomplete data held by us.

• Right to erasure (Art. 17 GDPR): You can request the deletion of your personal data if the processing is no longer necessary, if you withdraw your consent, or if you object to the processing and there are no overriding legitimate grounds to continue. You can also request deletion if the processing lacks a legal basis, unless the processing is required to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims. If we have made your data public, we will take reasonable steps to inform any recipients that you have requested the deletion of all links to, or copies of, that personal data.

• Right to restriction of processing (Art. 18 GDPR): You have the right to restrict the processing of your data if you dispute its accuracy (for a period that allows us to verify it); if the processing is unlawful and you request restriction instead of deletion; if we no longer need the data but you require it to establish, exercise, or defend legal claims; or if you have objected to the processing pursuant to Art. 21 GDPR, pending verification of whether our legitimate grounds override yours.

• Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you provided to us (based on consent or a contract) in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller, where technically feasible and provided it does not affect the rights of others.

• Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, to data processing based on our legitimate interests, unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You can object to direct marketing at any time, and we will stop processing your data for this purpose immediately.

• Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations.