The data subject’s personal data will be erased or blocked once the purpose of storage ceases to apply. In addition, the data can be stored if this has been provided for by European or national legislators in union law regulations, laws or other legislation which is governed by the controller. The data will also be blocked or erased once a retention period specified by the aforementioned standards expires, unless further retention of the data is required for the conclusion or performance of a contract.
RIGHT TO ERASURE
a) Erasure obligation
You may demand the controller to erase your personal data without undue delay and the controller is obliged to erase such data without undue delay where one of the following grounds applies:
- (1) the personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- (2) you withdraw your consent on which the processing is based according to Article 6(1), point (a) or of Article 9(2), point (a) of the GDPR, and where there is no other legal ground for the processing
- (3) you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;
- (4) the personal data concerning you has been unlawfully processed;
- (5) Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- (6) the personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
b) Information to third parties
c) Where the Controller has made your personal data public and is obliged pursuant to Article 17(1) of the GDPR to erase them, the Controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copies or replications of those personal data.
The right to erasure does not apply to the extent that processing is necessary
- (1) for exercising the right of freedom of expression and information;
- (2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- (3) for reasons of public interest in the area of public health in accordance with Article 9(2), points (h) and (i) as well as Article 9(3) of the GDPR;
- (4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR insofar as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
- (5) for the establishment, exercise or defence of legal claims.
RIGHT TO BE INFORMED
If you have exercised the right to rectification, erasure or restriction of processing vis-à-vis the controller, the latter is obliged to notify all recipients, to whom your personal data have been disclosed, of such rectification or erasure of the data or restriction of processing, unless this proves to be impossible or produces disproportionate burdens.
You have the right vis-à-vis the controller to be informed of such recipients.
RIGHT TO DATAPORTABILITY
You have the right to receive any personal data related to you that has been provided by you to the controller in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where
(1) the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and
(2) the processing is carried out by automated means.
In exercising such right, you further have the right to have the personal data concerning you transmitted directly from one controller to another controller, where technically feasible. This must not adversely affect the rights and freedoms of other persons.
The right to data portability does not apply to any personal data processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
RIGHT TO OBJECT
You have the right to object, on grounds relating to your particular situation, at any time, to any processing of your personal data which is based on Article 6(1), point (e) or (f) of the GDPR, including profiling based on those provisions.
The controller no longer processes your personal data, unless the controller demonstrates compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to any processing of your personal data for such marketing, which includes profiling to the extent that it
is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services—and notwithstanding Directive 2002/58/EC— you may exercise your right to object by automated means using technical specifications.
RIGHT TO WITHDRAW THE CONSENT
You have the right to withdraw your declaration of consent under data protection laws at any time. The withdrawal of consent will not affect the Lawfulness of processing based on consent before its withdrawal.
RIGHT TO LODGE A COMPLAINT
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
The supervisory authority with which the complaint has been lodged informs the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy according to Article 78 GDPR.
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other legal data protection provisions is:
DT Swiss Group AG
Tel.: +41 32 344 79 37
The Group Chief Financial Officer was appointed as the data protection officer. Please send any queries or comments by email to firstname.lastname@example.org.
DATA PROTECTION OFFICER
DT Swiss AG
Michael Schütz, Chief Financial Officer
DT Swiss Polska Sp. z o. o.
ul. Towarowa 36
Tomasz Gil, General Manager
DT Swiss Deutschland GmbH
Marcel Ratering, Deputy General Manager
DT Swiss (France) S.A.S
Parc d'activités de la Sarrée
06620 Le Bar sur Loup
Philippe Esquirol, General Manager