Privacy Policy

10. Your Rights under GDPR
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent (Article 7(3) GDPR): You have the right to withdraw your consent at any time. This means we will no longer process your personal data based on that consent in the future.

• Right of access (Article 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. Where that is the case, you can request access to the data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage period, the existence of your rights to rectification, erasure, restriction of processing or objection, the right to lodge a complaint with a supervisory authority, the source of the data (if not collected from you directly), and the existence of automated decision-making, including profiling, as well as meaningful information about the logic involved and the envisaged consequences of such processing.

• Right to rectification (Article 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you and the completion of incomplete data without undue delay.

• Right to erasure (“right to be forgotten”) (Article 17 GDPR): You have the right to request the deletion of your personal data unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.

• Right to restriction of processing (Article 18 GDPR): You have the right to request the restriction of processing if: you contest the accuracy of the data, the processing is unlawful but you oppose the erasure, we no longer need the data but you require it to establish, exercise or defend legal claims, or you have objected to processing pursuant to Article 21 GDPR and verification of our legitimate grounds is pending.

• Right to data portability (Article 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, where technically feasible.

• Right to lodge a complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the location of the alleged infringement.

Authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit NRW
Kavalleriestr. 2–4, 40213 Düsseldorf
https://www.ldi.nrw.de

11. Security Measures
We apply appropriate technical and organizational measures to protect your personal data from loss, misuse, or unauthorized access.

12. Changes to This Privacy Policy
This data protection information is currently applicable. We may update this policy to reflect changes in law or our services. The current version is always available at www.waitro.org/privacy/

13. Contact
WAITRO Operations e.V.
Grachtenhofstraße 63A
50226 Frechen, Germany
Email: info[at]waitro