a) Right to Confirmation
Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they may contact any employee of the controller at any time.

b) Right of Access
Every data subject has the right granted by the European legislator to obtain, at any time and free of charge, information from the controller about the personal data stored concerning them, as well as a copy of that information. Furthermore, the European legislator has granted the data subject access to the following information:
the purposes of the processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations
where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period
the existence of the right to request the rectification or erasure of personal data concerning them, or the restriction of processing by the controller, or the right to object to such processing
the existence of the right to lodge a complaint with a supervisory authority
where the personal data has not been collected from the data subject: any available information as to the source of the data
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject
Furthermore, the data subject has the right to obtain information as to whether personal data has been transferred to a third country or to an international organization. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, they may contact any employee of the controller at any time.

c) Right to Rectification
Every data subject has the right granted by the European legislator to obtain the immediate rectification of inaccurate personal data concerning them. Furthermore, taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, they may contact any employee of the controller at any time.

d) Right to Erasure (Right to Be Forgotten)
Every data subject has the right granted by the European legislator to require the controller to erase personal data concerning them without undue delay, provided that one of the following grounds applies and the processing is not required:
The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
The data subject withdraws the consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
The personal data has been processed unlawfully.
The personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject.
The personal data was collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
If one of the above grounds applies and a data subject wishes to request the erasure of personal data stored by Dunk Dream Labs GmbH, they may contact any employee of the controller at any time. An employee of Dunk Dream Labs GmbH will ensure that the request for erasure is complied with without undue delay.
Where Dunk Dream Labs GmbH has made personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, Dunk Dream Labs GmbH shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the published personal data that the data subject has requested the erasure by such controllers of any links to, or copies or replications of, that personal data, insofar as processing is not required. An employee of Dunk Dream Labs GmbH will arrange the necessary measures in each individual case.

e) Right to Restriction of Processing
Every data subject has the right granted by the European legislator to obtain from the controller the restriction of processing where one of the following applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
The controller no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defence of legal claims.
The data subject has objected to processing pursuant to Article 21(1) GDPR, pending verification as to whether the legitimate grounds of the controller override those of the data subject.
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by Dunk Dream Labs GmbH, they may contact any employee of the controller at any time. An employee of Dunk Dream Labs GmbH will arrange the restriction of processing.

f) Right to Data Portability
Every data subject has the right granted by the European legislator to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising the right to data portability pursuant to Article 20(1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
To exercise the right to data portability, the data subject may contact any employee of Dunk Dream Labs GmbH at any time.

g) Right to Object
Every data subject has the right granted by the European legislator to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them which is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.
Dunk Dream Labs GmbH will no longer process the personal data in the event of an objection unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.
Where Dunk Dream Labs GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for such marketing. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to Dunk Dream Labs GmbH processing for direct marketing purposes, Dunk Dream Labs GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them by Dunk Dream Labs GmbH for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact any employee of Dunk Dream Labs GmbH or another employee directly. Furthermore, notwithstanding Directive 2002/58/EC, the data subject is free to exercise the right to object by automated means using technical specifications in connection with the use of information society services.

h) Automated Individual Decision-Making, Including Profiling
Every data subject has the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, provided that the decision (1) is not necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is not authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is not based on the data subject’s explicit consent.
Where the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is based on the data subject’s explicit consent, Dunk Dream Labs GmbH shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, including at least the right to obtain human intervention by the controller, to express their point of view, and to contest the decision.
If a data subject wishes to exercise rights concerning automated decisions, they may contact any employee of the controller at any time.

i) Right to Withdraw Consent under Data Protection Law
Every data subject has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.
If a data subject wishes to exercise the right to withdraw consent, they may contact any employee of the controller at any time.