Right of Access & Right to Erasure

Right of Access & Right to Erasure ("Right to be Forgotten")

The protection of your personal data is of great importance to Rock RTB GmbH.

Under the General Data Protection Regulation (GDPR), you have various rights regarding the processing of your personal data. These include, in particular, the right of access and the right to erasure of your personal data ("Right to be Forgotten").

You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you may request access to the following information:

• the personal data being processed,
• the purposes of the processing,
• the categories of personal data,
• the recipients or categories of recipients,
• the envisaged storage period or the criteria used to determine it,
• the source of the data, if the data were not collected directly from you,
• the existence of automated decision-making, including profiling (where applicable),
• appropriate safeguards for transfers of data to third countries.

You also have the right to receive a copy of the personal data undergoing processing, insofar as this does not adversely affect the rights and freedoms of other persons.

If the personal data stored about you are inaccurate or incomplete, you have the right to request their immediate rectification or completion.

You may request the erasure of your personal data if one of the statutory grounds for erasure applies. This is particularly the case if:

• the data are no longer necessary for the original purposes,
• you withdraw consent that you have given and there is no other legal basis for processing,
• you have effectively objected to the processing,
• the processing has been carried out unlawfully,
• there are statutory obligations to erase the data.

Please note that we may not delete data insofar as statutory retention obligations or other legal obligations prevent such deletion.

Under the conditions set out in Art. 18 GDPR, you may request the restriction of the processing of your personal data.

During the restriction period, personal data may generally only be stored or processed to the extent permitted by law.

Where the requirements of Art. 20 GDPR are met, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request that such data be transmitted to another controller.

Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you may object to such processing at any time on grounds relating to your particular situation.

Where personal data are processed for the purposes of direct marketing, you may object to such processing at any time.

The services of Rock RTB GmbH are primarily aimed at business customers.

Within our programmatic advertising platform, we generally do not process directly identifying personal data of end users, such as names or email addresses. Instead, we primarily process pseudonymous online identifiers, such as Cookie IDs, Mobile Advertising IDs, or similar technical identifiers.

In order to process your request for access to or erasure of your data, we may require additional information that enables us to match your request to the data being processed, such as:

• Cookie ID,
• Mobile Advertising ID (IDFA or GAID),
• Consent ID,
• other technical identifiers.

Without corresponding identifiers, it may not be technically possible to match your request in many cases.

Upon receipt of your request, we will carefully review it and respond within the statutory deadlines in accordance with Art. 12 GDPR.

Where necessary, we may request additional information to verify your identity if there are reasonable doubts regarding the identity of the requesting person.

You may contact us at any time to exercise your data protection rights:

Rock RTB GmbH
Halbmondstraße 2
74072 Heilbronn
Germany

Email: [email protected]
Website: https://rockrtb.com

Regardless of whether you contact us directly, you have the right to lodge a complaint at any time with a competent data protection supervisory authority regarding the processing of your personal data.

Further information on data protection supervisory authorities in Germany can be found at: https://www.bfdi.bund.de