a) Right to confirmation
Every data subject has the right granted by European legislation to request confirmation from the controller as to whether or not personal data concerning them are being processed. If a data subject wishes to exercise this right to confirmation, they may contact an employee of the controller at any time.

b) Right of access
Every data subject has the right, granted by European legislation, to obtain from the controller, at any time and free of charge, information about the data stored about them and a copy of this information. In addition, European directives and regulations grant the data subject access to the following information:
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of processing of personal data concerning the data subject or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their origin;

Origin;
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Furthermore, the data subject has the right to obtain information on whether personal data are transferred to a third country or to an international organization. If this is the case, the data subject has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, they may contact an employee of the data controller at any time.

c) Right to rectification
Every data subject has the right granted by European legislation to obtain from the data controller, without undue delay, the rectification of inaccurate personal data concerning them. The data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement.
If a data subject wishes to exercise this right of rectification, they may contact an employee of the controller at any time.

d) Right to erasure (right to be forgotten)
Every data subject has the right granted by European legislation to request that the controller erase personal data concerning them without delay, and the controller is obliged to erase the personal data without delay if one of the following reasons applies and the processing is not necessary:
The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
The data subject withdraws consent on which the processing is based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
The personal data has been processed unlawfully.
The personal data must be erased to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject.
The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

d) Right to erasure (right to be forgotten)
Every data subject has the right granted by European legislation to request that the controller erase personal data concerning them without delay, and the controller is obliged to erase the personal data without delay if one of the following reasons applies and the processing is not necessary:
The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
The data subject withdraws consent on which the processing is based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
The personal data has been processed unlawfully.
The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data was collected in connection with the provision of information society services pursuant to Article 8(1) of the GDPR.

e) Right to restriction of processing
Every data subject has the right granted by European legislation to request the controller to restrict processing if one of the following applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
The data controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims.
The data subject has objected to the processing pursuant to Article 21(1) GDPR, pending verification of whether the legitimate grounds of the data controller override those of the data subject.
If one of the aforementioned conditions applies and a data subject wishes to restrict the processing of their personal data stored by GlobeGuard GmbH, they may contact an employee of the data controller at any time. The employee of GlobeGuard GmbH will then arrange for the restriction of processing.

f) Right to data portability
Each data subject shall have the right granted by the European legislator, to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may at any time contact any employee of the GlobeGuard GmbH.

g) Right to object
Every data subject has the right granted by European legislation to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
GlobeGuard GmbH will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If GlobeGuard GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for the purpose of such marketing. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to GlobeGuard GmbH processing their data for direct marketing purposes, GlobeGuard GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them carried out by GlobeGuard GmbH for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact any employee of GlobeGuard GmbH directly. The data subject is also free to exercise their right to object by means of automated procedures using technical specifications when using information society services, notwithstanding Directive 2002/58/EC.

h) Automated individual decision-making, including profiling
Every data subject has the right granted by European legislation not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.
If the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is made with the explicit consent of the data subject, GlobeGuard GmbH shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.
If the data subject wishes to exercise their rights with regard to automated individual decision-making, they may contact a GlobeGuard GmbH employee at any time.

i) Right to withdraw consent under data protection law
Every data subject has the right granted by European legislators to withdraw their consent to the processing of their personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they can contact a GlobeGuard GmbH employee at any time.