Users have the following rights as data subjects under the provisions of the GDPR, under the conditions specified therein:
• Right to information and disclosure of stored data (Art 15 GDPR)
• Right to correction of incorrect or completion of incomplete personal data (Art 16 GDPR)
• Right to deletion of data in the presence of a reason for deletion, especially unlawful data processing (Art 17 GDPR)
• Right to restrict data processing (Art 18 GDPR)
• Right to data portability (Art 20 GDPR)
• Right to object to the processing of personal data (Art 21 GDPR)
• Users also have the right to revoke their consent to data processing, with the legality remaining intact until the time of revocation of the consent.
Processing of data based on other legal bases is not affected by the revocation of consent. The exercise of these rights is only available for personal data within the meaning of Art 4 No. 1 GDPR. For anonymised data, where assignment to individual persons is not possible, these rights do not apply.
To exercise these rights, an official photo ID must be presented. In principle, such information is free of charge. refinq may, if necessary, require further identification evidence. However, refinq reserves the right to charge a reasonable fee for administrative expenses for information that goes beyond the scope of the GDPR's duty to provide information.
Complaints about refinq’s processing of personal data can be made to the data protection authority, Barichgasse 40–42, A-1030 Vienna.