Skip to content
Legal · GDPR

Your Rights Under the GDPR

How to exercise your data-subject rights with BeFunded.

Controller

Wheels & Wings Lab GmbH (BeFunded)
Rathausgasse 17, 12529 Schönefeld, Germany
Email: services@be-funded.de

To exercise any of the rights below, contact us at services@be-funded.de. We will respond without undue delay and at the latest within one month of receipt of your request.

1. Right of access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether we process personal data concerning you and, if so, to access that data and the information set out in Art. 15 GDPR (in particular the purposes of processing, the categories of data, the recipients, the planned storage period, and the origin of the data). You may also request a free copy of the personal data being processed.

2. Right to rectification (Art. 16 GDPR)

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete personal data.

3. Right to erasure (Art. 17 GDPR)

You have the right to obtain the erasure of your personal data where one of the grounds in Art. 17 GDPR applies, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis. This does not apply where processing is necessary to comply with a legal retention obligation (e.g. commercial or tax law) or for the establishment, exercise, or defence of legal claims.

4. Right to restriction of processing (Art. 18 GDPR)

You have the right to obtain restriction of processing: while we verify the accuracy of contested data; where processing is unlawful and you request restriction instead of erasure; where we no longer need the data but you need it for legal claims; or while we assess an objection raised under Art. 21 GDPR. Where processing is restricted, the data may, apart from storage, only be processed with your consent or for legal claims, the protection of another person’s rights, or important public interest.

5. Right to data portability (Art. 20 GDPR)

Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive the personal data you provided in a structured, commonly used, machine-readable format, and to transmit it to another controller. Where technically feasible, you may request direct transmission from us to another controller.

6. Right to object (Art. 21 GDPR)

Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation; this also applies to related profiling. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves legal claims.

Where your data is processed for direct marketing, you have the right to object at any time, with no need to state reasons; this also applies to related profiling. After objection, your data will no longer be used for direct marketing.

7. Right to withdraw consent (Art. 7(3) GDPR)

Where processing is based on your consent (Art. 6(1)(a) GDPR), you may withdraw it at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before its withdrawal.

8. Right to lodge a complaint (Art. 77 GDPR)

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. The supervisory authority competent for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (LDA Brandenburg)
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany

9. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.