Controller: ABUS August Bremicker Söhne KG Altenhofer Str. 25 58300 Wetter, Germany Telephone: +49 (0)23 35 634-0 Fax: +49 23 35 634-300 Email: firstname.lastname@example.org Data protection officer: You can reach the data protection officer at Email: email@example.com
If you win, we will process the following data requested from you by us via Facebook Messenger
We process the personal data of the winners for the purpose of delivering the prizes by post/shipping. If this data is not provided, delivery of the prize is not possible. It is possible to participate in the browser game without providing the aforementioned data.
The data is not passed on to third parties, unless this is necessary for awarding or delivering the prizes. In addition, we use other service providers for processing personal data, i. a. for storing data in a secure computer centre and for maintaining databases. All data processors are carefully selected, are strictly bound by instructions and only have access to the data to the extent and for the amount of time required for carrying out the service.
Upon delivery of the prizes, the data will be deleted.
You have the right to obtain from the controller confirmation as to whether or not your personal data are being processed.
Where that is the case, you have the right to obtain access to the following information from the data controller:
You have the right to obtain from the controller the rectification and/or completion of inaccurate or incomplete personal data. The data controller must carry out the rectification without undue delay.
You have the right to obtain the restriction of processing where one of the following applies:
If the processing of your personal data is restricted, this data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the processing of your personal data is limited pursuant to the aforementioned conditions, you will be informed by the data controller before the restriction is lifted.
You have the right to obtain from the controller the erasure of your personal data without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
Where the controller has made the personal data public and is obliged pursuant to Article 17(1) of the GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not apply to the extent that processing is necessary:
If you have exercised your right to obtain rectification, erasure or restricted processing from the data controller, the data controller must inform all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed of these recipients by the data controller.
You have the right to receive personal data you have provided to the data controller in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This may not adversely affect the rights and freedoms of others.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until its withdrawal.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.