Personal Data Requests — Access, Correction, Export and Deletion
Visual Memory Works GmbH (“VMW”), Elbestraße 10, 45768 Marl, Germany, is the controller within the meaning of Art. 4(7) GDPR for the account, subscription, billing and security data of the CXR App services offered by VMW. You can send your requests in writing to the address stated in the Company and Registration Details or by e-mail to erguen.kalayci@visualmemoryworks.de. For requests by e-mail, please use the address stored in your account.
Contact person for data protection requests: Prof. Ergün Kalaycı, e-mail: erguen.kalayci@visualmemoryworks.de. He receives data protection requests for Visual Memory Works GmbH. This role does not involve a formal appointment as a data protection officer within the meaning of Art. 37 GDPR.
YOUR RIGHTS
Under the GDPR, you have the following rights, provided the respective requirements are met:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)
These rights apply subject to the statutory requirements and restrictions. The right to data portability exists only for data that you have provided, that is based on consent or contract, and that is processed by automated means; it does not mean that there is an unconditional right to export every data item.
CONTENT OF YOUR REQUEST
In your request, please state your first and last name, the subject of the request, and sufficient information to identify the data records concerned. Please do not send unnecessary identity documents or any third-party data. If there are reasonable doubts about your identity, we may request additional information to confirm it (Art. 12(6) GDPR); identity and authority to represent are verified only to the extent necessary.
DEADLINES AND COSTS
We respond to your request without undue delay and in any event within one month of receipt (Art. 12(3) GDPR). This period may be extended by a further two months where necessary, taking into account the complexity and number of requests. In that case, we will inform you of the extension and the reasons for it within one month of receipt. Information and measures are in principle provided free of charge (Art. 12(5) GDPR).
DATA THAT BUSINESSES PUBLISH IN THEIR APPS
Send requests concerning customer data that a business publishes through CXR App to the business concerned, where it is the controller. VMW processes this data as a technical service provider and processor on behalf of the business (Art. 28 GDPR). If VMW receives such a request, VMW can help you forward it to the right channel; this does not affect the statutory ways of exercising your rights.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for VMW is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, telephone +49 211 38424-0, e-mail poststelle@ldi.nrw.de, www.ldi.nrw.de.