Information regarding the rights of data subjects

Access control via number plate recognition

The data subject has the right to request confirmation from the controller as to whether personal data concerning them is being processed; if this is the case, they have a right to access this personal data and to the information specified in detail in Article 15 of the GDPR.

The data subject has the right to request from the controller the immediate rectification of inaccurate personal data concerning them and, where applicable, the completion of incomplete personal data (Article 16 of the GDPR).

The data subject has the right to request from the controller the erasure of personal data concerning them without undue delay, provided that one of the grounds listed in detail in Article 17 of the GDPR applies, e.g. if the data is no longer necessary for the purposes for which it was collected (right to erasure).

The data subject has the right to request from the controller the restriction of processing if one of the conditions listed in Article 18 of the GDPR is met, e.g. if the data subject has objected to the processing, for the duration of the controller’s review.

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims (Article 21 of the GDPR).

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right with a supervisory authority in the Member State of their residence, their place of work or the place of the alleged infringement. In North Rhine-Westphalia, the competent supervisory authority is: State Commissioner for Data Protection and Information Security North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf.