I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other legal data protection provisions is:
Olympiastadion Berlin GmbH
Address:
Olympischer Platz 3
14053 Berlin
Germany
Managing director: Timo Rohwedder (same contact details as the controller)
Telephone: +49 (0)30 306 88 100
Email: info@olympiastadion.berlin
Internet: www.olympiastadion.berlin
II. Contact Details of Our Data Protection Officer
Christian Scholtz of WS Datenschutz GmbH
If you have questions about data protection, you can contact WS Datenschutz GmbH at the following email address: olympiastadium-berlin@ws-datenschutz.de
WS Datenschutz GmbH
Dircksenstraße 51
D-10178 Berlin
Startseite – Webersohn & Scholtz (webersohnundscholtz.de)
III. General Information on Data Processing
1. Scope of Personal Data Processing
The protection of personal data is very important to us. Therefore, we basically collect and use personal data of our users only where this is required to provide a functional website and our contents and services. Personal data of our users is collected and used regularly only after the user has given his or her consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and statutory regulations permit processing of the data.
2. Legal Basis for Personal Data Processing
Art. 6 para. 1 s.1 lit. a) General Data Protection Regulation (GDPR) serves as a legal basis for personal data processing, provided that we obtain a consent of the data subject for personal data processing purposes.
If personal data processing is necessary to perform a contract to which the data subject is party, Art. 6 para. 1 s. 1 lit. b) GDPR serves as a legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
Art. 6 para.1 s. 1 lit. c) GDPR serves as a legal basis where personal data processing is necessary for compliance with a legal obligation to which we are subject.
If processing is necessary to protect the vital interests of the data subject or of another natural person, Art. 6 para.1 s.1 lit. b) GDPR serves as legal basis.
Art. 6 para. 1 s. 1 lit. f) GDPR serves as legal basis for processing where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
3. Erasure of Data and Retention Period
The data subject’s personal data will be erased or blocked once the purpose of storage ceases to apply. In addition, data can be retained if this has been provided for by European or national legislators in Union law regulations, laws or other legislation which is governed by the controller. The data will also be blocked or erased once a retention period specified by the aforementioned standards expires, unless further retention of the data is required for the conclusion or performance of a contract.
IV. Processing as Part of Contractual Services
1. Collection and Retention of Personal Data as Well as Nature and Purpose of Its Use
We process the data of our contracting partners within the framework of rendering contractual services. Contracting partners may include: Interested parties, customers, business partners or just contracting partners. They will hereinafter be uniformly referred to as ‘contracting partners’. The data collected by us in this context includes:
– master data, such as title, first name, surname, address, corporate name;
– contact details, such as valid e-mail address, phone number;
– information necessary to render the contractual services (contract content, customer’s interest);
– payment data (e.g. bank details, payment history).
The purpose for collecting such data results from the respective contract and may include, in particular,
– to identify you as our contract partner;
– to advise you appropriately;
– to meet our contractual obligation;
– to manage our correspondence with you;
– to perform invoicing;
– to settle warranty claims.
2. Legal Basis
Data processing will be based on your request and is necessary, acc. to Art. 6 para. 1 s. 1 lit. b) GDPR, for the purposes stated above to appropriately process the order and to mutually fulfil obligations from the respective contract.
3. Retention Period
The data will be erased once it is no longer required to achieve the purpose of its collection. Due to stipulations under commercial and tax law, we are obliged to retain your address and payment data for ten years. Nevertheless, we restrict processing three years after termination of the order, i.e. your data will be used only for compliance with the legal obligations.
4. Disclosure of Data to Third Parties
Unless this is necessary acc. to Art. 6 para. 1 s. 1 lit. b) GDPR to execute the contract with you, your personal data is not disclosed to third parties.
V. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
– time zone difference to the Greenwich Mean Time (GMT)
– content of the request (specific page)
– access status / HTTP status code
– the respective quantity of data transmitted
– information on the browser type and version used
– the user’s operating system
– the user’s Internet service provider
– the user’s IP address
– access date and time
– websites from which the user’s system accesses our website
– websites accessed by the user’s system through our website
The data is likewise retained in the log files of our system, with the user’s IP address being anonymised by us. This data is not retained together with other personal data of the user.
2. Legal Basis for Data Processing
The legal basis for temporary data retention is Art. 6 para. 1 s. 1 lit. f) GDPR.
3. Purpose of Data Processing
Temporary system storage of the IP address is necessary to allow the website to be sent to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session. Storage in log files is made to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context.
Such purposes also constitute our legitimate interest in data processing pursuant to point (f) of Art. 6 para. 1 s. 1 lit. f) GDPR.
4. Retention Period
The data will be erased once it is no longer required to achieve the purpose of its collection. If data is collected to provide the website, this is the case once the respective session has been terminated. In the case of storage in log files, this is the case after seven days at the latest. Retention beyond this time is possible. In this case, the users’ IP addresses are erased or modified so that they can no longer be assigned to the accessing client.
5. Objection and Elimination Option
Gathering of the data to provide the website and to retain the data in log files is absolutely necessary to ensure operation of the website. Consequently, the user has no option to object.
VI. Use of Cookies
1. Description and Scope of Data Processing
Our website uses cookies. Cookies are text files which are stored in or by the Internet browser on the user’s computer system. If a user accesses a website, for example, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string that allows the unique identification of the browser the next time the website is accessed.
We use cookies exclusively to make our website more user-friendly. Some elements of our website also require the accessing browser to remain identifiable after changing to a different web page.Data on language settings is stored and transmitted in the cookies.
2. Legal Basis for Data Processing
The legal basis for personal data processing using essential cookies is Art. 6 para. 1 s. 1 lit. f) GDPR.
3. Purpose of Data Processing
The purpose for using technically required cookies is to facilitate the use of websites for the users. Some functions of our website cannot be provided without the use of cookies. To offer such functions, it is necessary for the browser to be recognised even after a page change. The function on our website for which we need cookies is the adoption of language settings. The user data collected by technically required cookies is not used to create user profiles.
Such purpose is also the basis for our legitimate interest in personal data processing according to Art. 6 para. 1 s. 1 lit. f) GDPR.
4. Retention Period, Objection and Elimination Option
Since the user’s computer stores cookies and transfers them to our website, you have also full control of the use of cookies as user. You can disable or restrict the transmission of cookies by changing your web browser settings accordingly. Cookies already stored can be deleted at any time. Where cookies are disabled on our website, it might no longer be possible to make full use of all website functions; in particular, the language in which the contents are reproduced on our website can differ from the one selected by you.
VII. Newsletter
1. Description and Scope of Data Processing
Our website offers the possibility to subscribe to a free newsletter. In this case, the data entered in the input screen upon subscription to the newsletter is transferred to us:
– e-mail address;
– first name and surname.
In addition, we log your registration and collect the following data:
– IP address;
– date and time.
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration.
There is no disclosure of personal data to third parties in the context of data processing for sending newsletters. The data will exclusively be used for sending the newsletter.
2. Legal Basis for Data Processing
This processing is legally based on Art. 6 para. 1 s.1 lit. a) GDPR, thus your consent. Existing customers may also receive our newsletter without having given their explicit consent. This is carried out only within the strict boundaries of § 7 para.3 UWG (German Act against unfair Competition) and in accordance to Art. 95 GDPR. This equals the legal basis of Art. 6 para. 1 s.1 lit. f) GDPR. Our legitimate interests are to provide information about our products through promotional e-mails to our existing customers and thereby keep in contact with these customers.
3. Purpose of Data Processing
The user’s e-mail address is collected to send the newsletter. The name is collected in order to address you personally. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
4. Retention Period
The data will be erased once it is no longer required to achieve the purpose of its collection. The user’s e-mail address is therefore retained for as long as the newsletter subscription is active.
5. Objection and Elimination Option
The user concerned can terminate his or her subscription to the newsletter at any time. To that end, each newsletter contains a corresponding link. This also allows to withdraw the consent to retention of the personal data collected during the registration process.
6. Mailchimp
The newsletter is being sent by „Mailchimp“, an online marketing platform. The personal data is being processed by: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE#5000, Atlanta, GA 30308, USA.
The e-mail addresses of our newsletter recipients, as well as any other data described under the section newsletter, is being saved on servers of Mailchimp in the USA. Mailchimp uses this information on our behalf for our newsletter management (e.g. sending, reporting, …). According to Mailchimp they also allowed to use this information in order to provide, support and improve its services as well as their data analytics projects. Mailchimp does not use this information to contact our newsletters may contain a „web-beacon“, which is a pixel-sized file. When opening our newsletter this file is downloaded from Mailchimp’s servers and thus information such as whether the e-mail was delivered and opened and whether links within the e-mail were clicked are collected. Mailchimp can collect information such as IP address, browser, e-mail client type and other similar details. Technically this information can be matched to each newsletter recipient, but it is not in our or Mailchimp’s interest to monitor our users on a personal basis.
Note on data processing in the USA:
By subscribing to the newsletter, you consent to the processing of your data by our shipping service provider in the USA in accordance with Art. 6 para. 1 s. 1 lit. a) GDPR. In the opinion of the ECJ, the data protection standard in the USA is inadequate and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly without the possibility of redress. Consent given can be withdrawn at any time.
We further have signed a data processing agreement with Mailchimp. In this agreement Mailchimp commits to protect the data of our users, to process this data according to its regulations and to not share with unauthorized third parties. You can view the privacy policy of Mailchimp here: https://Mailchimp.com/legal/privacy/
Legal basis for data processing
This data processing is legally based on your consent, Art 6 para. 1 s. 1 lit. a) GDPR.
Purpose of data processing
We use Mailchimp as our subprocessor to ensure an efficient management of our mailing list and to send newsletters to stay in touch with you.
Duration of storage
Mailchimp claims to keep your personal data only as long as we use it for sending newsletters. When we delete you from our mailing list, Mailchimp will delete this data as well.
Right to objection and erasure
You can object to the processing of your data by Mailchimp. We will take your objection into consideration and will notify you if and why we continue the processing. You are also free to use the „opt out“ link in the footer of each e-mail. If you do so, we will delete your e-mail address from our mailing list which in turn will prompt Mailchimp to stop processing your personal data. This will not have any effect on other mailing lists (e.g. by other companies) managed through Mailchimp.
VIII. Newsletter Tracking
1. Description and scope of data processing
Our newsletter contains a so-called “web beacon”. These are one-pixel images that are loaded from the Mailchimp server when the newsletter is opened. When the image is delivered, the Mailchimp server then collects certain data from the recipient, e.g. the time of retrieval, the IP address or information on the e-mail program used (client), information on the recipient’s browser and the system used by the recipient.
2. Legal basis for data processing
The legal basis for newsletter tracking is our legitimate interest in accordance with Article 6 Abs. 1 lit. f DSGVO.
3. Purpose of Data Collection
The information obtained as part of the newsletter tracking is used to technically improve the sending of the newsletter based on technical data or the recipient groups and their reading behavior and access times. Information is also obtained as to whether the newsletter was opened, when this happened and which links in it were clicked. This information can be assigned to the individual newsletter recipients. Under no circumstances do we want to monitor the recipients of our newsletter. The information obtained enables us to tailor our newsletter service even better to the interests of the recipients, e.g. by adapting different content to the interests of the recipients and by getting to know the recipients’ reading habits. Our legitimate interest in the processing of personal data in accordance with Article 6 Abs. 1 lit. f DSGVO also lies in this purpose.
4. Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when we have evaluated the information from the newsletter tracking, but no later than seven days after collecting the data.
5. Possibility of objection and elimination
The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. This also enables you to revoke your consent to the storage of your personal data collected during the registration process and future processing.
IX. Contact Form and E-Mail Contact
1. Description and Scope of Data Processing
We provide a contact form for press contacts on our website which can be used to contact us electronically. If a user uses this option, the data entered in the input screen will be transferred to and retained by us. This data includes:
– first name;
– surname;
– e-mail address;
– phone number;
– the request.
We obtain your consent for the processing of the data within the scope of the sending process and also refer to this privacy policy.
You can also contact us using the e-mail addresses provided. In this case, we will retain the user’s personal data transferred with the e-mail. In this context, data will not be passed to third parties. The data will exclusively be used for processing the conversation.
2. Legal Basis for Data Processing
The legal basis for data processing in the context of contact inquiries is Art. 6 para. 1 s. 1 lit. b) GDPR within the framework of a (pre-) contractual relationship.
3. Purpose of Data Processing
The sole purpose of processing personal data from the input screen is to handle the contact request. If we are contacted by e-mail, this is also the necessary legitimate interest in data processing.
The other personal data processed during the sending process serves to prevent abuse of the contact form and ensure the security of our IT systems.
4. Retention Period
The data will be erased once it is no longer required to achieve the purpose of its collection. For the personal data from the input screen of the contact form and that sent by e-mail, this is the case where the relevant conversation with the user has been terminated. The conversation is deemed terminated once it becomes clear from the circumstances that the relevant issue has been conclusively resolved.
5. Objection and Elimination Option
You can withdraw your consent to personal data processing at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. If you want to withdraw your consent and/or object to data retention, please send an e-mail to datenschutz@olympiastadion.berlin. All personal data retained in the course of the contact request will be erased in this case.
X. Visitor program Olympiastadion Berlin
The websites https://staging.olympiastadion.berlin/de/besichtigung/ and https://staging.olympiastadion.berlin/de/fuehrungen/ offer you the possibility to acquire tickets to visit the Olympiastadion Berlin. This is an external offer of Unikat PR GmbH. We do not process any personal data in this context. During the booking process, the operator of the offer will separately provide you with information about data protection.
1. Booking of group tours (Unikat PR GmbH)
On our website you have the option of using a contact form to request different types of group tours from the organizer. The group tours are handled exclusively by Unikat PR GmbH. We do not process any personal data in this context. During the booking process you will be informed separately by the organizer about data protection.
2. Online ticket sales for guided tours in the Olympiastadion Berlin
On the website https://staging.olympiastadion.berlin/de/besichtigung/ and https://staging.olympiastadion.berlin/de/fuehrungen/ you have the option of purchasing tickets for public tours of the Olympiastadion Berlin. For the booking you will be forwarded to an external online shop of the operator “Unikat PR GmbH”, which operates the above-mentioned ticket shop. We do not process any personal data in this context. During the booking process you will be informed separately by the operator about data protection.
XI. Virtual 360-degree tour
This site contains a virtual 360-degree tour. It is operated by Durch die Stadt GmbH, Weißenseer Weg 37, D-13055 Berlin.
If you visit one of our pages featuring the virtual 360-degree tour, a connection with the servers of Durch die Stadt GmbH is established.
The virtual 360-degree tour is used in the interests of ensuring an appealing representation of our online offers and to facilitate the search for the places specified by us on the website. This is a legitimate interest in terms of Art. 6 para. 1 s. 1 lit. f) GDPR. The virtual 360-degree-tour uses the open-source web analysis service Matomo. Matomo is used in a way that no cookies are set. The IP address is anonymized before it is saved.
You can find more information on the handling of user data in the data protection declaration from Durch die Stadt GmbH at “https://www.durchdiestadt-agentur.de/datenschutzbestimmungen”.
XII. Social media
We have integrated the social media platforms Facebook, Instagram, Twitter and TripAdvisor into our website via links, which mean that the social media providers may receive data from you. If you click on the social media link, the website of the respective social media provider will be called up. By calling up the websites of the respective social media provider via our website, we transmit the respective reference data to the respective social media provider. The social media provider receives the information that you have visited us.
Note on data processing in the USA:
If you click on a social media link, your data may be processed by the respective provider in the USA. In the opinion of the ECJ, the data protection standard in the USA is inadequate and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly without the possibility of redress. If you do not click on the links of the social media providers, no data will be transmitted.
Further information on data processing by the social media providers can be found here:
Facebook:
https://de-de.facebook.com/help/pages/insights
https://de-de.facebook.com/about/privacy
https://de-de.facebook.com/full_data_use_policy
Instagram:
https://help.instagram.com/155833707900388
https://www.instagram.com/about/legal/privacy/
Twitter:
https://twitter.com/privacy?lang=de
TripAdvisor:
MediaRoom – DATENSCHUTZERKLÄRUNG UND COOKIE-RICHTLINIE
XII. Rights of the Data Subject
Where personal data concerning you is processed, you are the data subject in the sense of the GDPR and have the following rights vis-à-vis the controller:
1. Right of Access
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed by us.
Where that is the case, you have the right to obtain access to the following information:
1. the purposes of personal data processing;
2. the categories of personal data concerned;
3. the recipients or categories of recipient to whom the personal data concerning you has been or will be disclosed;
4. the envisaged period for which the personal data concerning you will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. where the personal data is not collected from the data subject, any available information as to its source;
8. the existence of automated decision-making, including profiling, referred to in Art. 22 para. 1 and para. 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to obtain access to information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
2. Right to Rectification
You have the right to obtain from the controller the rectification of inaccurate personal data concerning you and/or to have processed incomplete personal data concerning you completed. The controller has the obligation to rectify such data without undue delay.
3. Right to Restriction of Processing
You have the right to obtain restriction of processing of the personal data concerning you where one of the following applies:
1. the accuracy of the personal data concerning you is contested by you, for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
3. the controller no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims; or
4. you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of you.
Where processing of the personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Where processing has been restricted pursuant to the aforementioned conditions, you will be informed by the controller before the restriction of processing is lifted.
4. Right to Erasure
a) Erasure Obligation
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller has the obligation to erase such data without undue delay where one of the following grounds applies:
1. the personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
2. you withdraw consent on which the processing is based according to Art. 6 para. 1 s. 1 lit. a) or point Art. 9 para. 1 s. 1 lit. a) GDPR, and where there is no other legal ground for the processing;
3. you object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 1 GDPR;
4. the personal data concerning you has been unlawfully processed;
5. the personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
6. the personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
b) Information to Third Parties
Where the controller has made the personal data public and is obliged pursuant to Art. 17 para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary.
1. for exercising the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h) and i) as well as Art. 9 para. 3 GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
5. for the establishment, exercise or defence of legal claims.
5. Right to Information
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to communicate such rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right vis-à-vis the controller to be informed of such recipients.
6. Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where:
1. the processing is based on consent pursuant to Art. 6 para. 1 s.1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 s. 1 lit. b) GDPR; and
2. the processing is carried out by automated means.
In exercising such right, you further have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.
The right to data portability does not apply to personal data processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 s. 1 lit. e) or f) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
8. Right to Withdraw Consent
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
9. Automated Individual Decision-Making Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
1. is necessary for entering into, or performance of, a contract between you and the controller;
2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
3. is based on your explicit consent.
However, such decisions must not be based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless points Art. 9 para. 2 lit. a) or g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (1) and (3), the data controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express its point of view and to contest the decision.
10. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.