Data protection; assertion of data subject rights with a Bavarian authority

The rights of data subjects are based on the EU fundamental right to data protection and are defined in more detail in the General Data Protection Regulation (GDPR). As a data subject, you have the following rights that you can assert against the controller who processes your personal data (e.g. against a public authority):

Right to information

You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to further information such as in particular

• the purposes of processing,
• the categories of personal data that have been processed,
• the recipients or categories of recipients to whom this data has been or will be disclosed,
• the planned duration for which this data will be stored,
• the existence of a right to rectification or erasure or restriction of processing,
• the existence of a right of appeal to a data protection supervisory authority,
• where applicable, information about the origin of the data and
• the existence of automated decision-making.

Right to rectification

You have the right to demand immediate rectification from the controller if you discover that your data is incorrect.

Right to erasure

You have the right to request the deletion of your data from the controller if, for example

• the data are no longer necessary for the purposes for which they were collected, or
• you revoke a given consent and no other legal basis for the processing is apparent.

Right to restriction of processing

You have the right to request the controller to restrict the processing of your data if, for example

• the accuracy of your data still needs to be checked,
• the processing is unlawful, but you do not request the erasure of the data but only the restriction of its use, or
• the controller no longer needs the data for the purposes of the processing, but you still need it for the establishment, exercise or defense of legal claims.

Right of objection

You have the right to object to the processing of your data at any time if your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority. You must explain your particular personal situation in order to justify the request.

Please give priority to using the online services offered via the "Secure contact form for the data protection officer" and the "Request for data subject rights pursuant to Art. 15 et seq. GDPR".

You can only exercise the rights of data subjects in person. This means that you cannot request the correction of your neighbor's data, for example. For this reason, you must also clearly identify yourself to the relevant authority. A simple e-mail without identity documents is not sufficient!

• Art. 10 Bavarian Data Protection Act (BayDSG)
• Art. 12 ff. General Data Protection Regulation (GDPR)

• Bavarian State Commissioner for Data Protection

  Further information is also available from the Bavarian State Commissioner for Data Protection.

Submit the application to the relevant authority.

• Freedom of information; request for information from a Bavarian authority
• Data protection; submission of a complaint to data protection officers at Bavarian authorities