Datenschutz - Auskunft über gespeicherte Daten verlangen

• Art. 15 Datenschutz-Grundverordnung (DSGVO) – Auskunftsrecht der betroffenen Person

You have the right to request information about the data stored about you in accordance with data protection law. You can request this from the following bodies:

• public authorities of the federal government, the Free State of Saxony, the municipalities and districts
• other legal entities under public law subject to the supervision of the Free State of Saxony (for example universities, chambers, guilds, foundations under public law)
• private entities that fulfil sovereign tasks (so-called "Beliehene", for example the TÜV).

However, the legal basis for providing information varies depending on which organisation you request information from.

In most cases, Art. 15 of the General Data Protection Regulation will be the basis for the request for information. According to this, the controller must confirm and inform you at your request

• that it is processing your personal data,
• what data this is,
• the purposes for which it is processing the data
• which categories of data it processes,
• to which recipients or categories of recipients it discloses your data,
• how long it stores your data,
• that you have the right to rectification, erasure, restriction of processing or objection and that you may contact the competent state data protection supervisory authority,
• In addition, if the data has not been collected from you, they must inform you of the origin of the data,
• You must be provided with a copy of your data that is being processed if this does not affect the rights and freedoms of third parties,
• You have no right to inspect the original file, unless your right to information can be fulfilled in the manner described here.

Restriction of access to stored data

With regard to federal agencies, the federal legislator has excluded the right to information if, for example, the information would jeopardise public security or the rights and freedoms of other persons, if the information relates to transmissions to the intelligence services or if data carriers still in storage could only be searched with disproportionate effort.

With regard to bodies of the Free State of Saxony, the state legislator has the right to refuse to provide information if, among other things, the information would jeopardise public security, it is necessary for the prosecution of criminal offences or administrative offences or your data must be kept secret in accordance with a legal provision or because of the rights and freedoms of other persons.

Your right to information may also be restricted by other (EU, German or Saxon) legal provisions. For example, to safeguard public security or to protect the rights and freedoms of others.

Note : With regard to the police, public prosecutor's offices, judicial or penal institutions and the Saxony State Office for the Protection of the Constitution, your right to information is governed by different but similar provisions.

none

none

• Procedural fee: none
• Expenses: Copying costs (for more than one copy)

Making a request

If you wish to receive information about the personal data stored about you, you must apply to the data controller in writing, verbally, by telephone or in any other way.

• You do not have to justify your interest in obtaining information.
• In your request, you should specify the type of personal data about which you would like information.
• The controller must provide you with a copy of the personal data that is the subject of the processing.

Refusal to provide information

• If your request for information is rejected, you will receive a notification.
• The refusal of the request does not have to be justified if this would jeopardise the purpose of the refusal to provide information.
• In this case, the controller must inform you that you can contact the Federal Commissioner for Data Protection and Freedom of Information in the case of federal public bodies, or otherwise the Saxon Data Protection and Transparency Commissioner.

• usually up to one month after receipt of application
• up to three months for complex enquiries and an increased number of applications

none

complaint to the Saxon Data Protection and Transparency Commissioner; complaint against the controller(s)