The data subject has the right to obtain confirmation from the controller as to whether personal data concerning the data subject are being processed; if this is the case, the data subject shall have a right of access to such personal data and to the information specified in Article 15 of GDPR.

The data subject has the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning the data subject and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to request that the controller delete the data subject’s personal data without undue delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes pursued ( right to erasure).

The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the controller's review.

The data subject shall have the right to object at any time, on grounds relating to the data subject’s particular situation, to processing of their personal data. The controller shall then no longer process the personal data unless the controller can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or processing is for the establishment, exercise or defense of legal claims (Article 21 GDPR).

Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to  lodge a complaint with a supervisory authority if the data subject believes that processing of their personal data violates GDPR (Article 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of the data subject’s residence, place of work or the place of the alleged infringement.

In North Rhine-Westphalia, the competent supervisory authority is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit,
Kavalleriestraße 2-4,
40213 Düsseldorf, Germany