Skip to main content

You are here

EU-GDPR / DS-GVO Data Request Form

We would like to provide an easy way to execute their rights as EU-citizens or EU-residents you have under the EU General Data Processing Regulation (GDPR). This is why we have created the attached form to make your submission as efficient as possible.

Wir möchten Ihnen eine einfache Möglichkeit bereitstellen, Ihre Rechte als EU-Bürger oder EU-Residenten nach der Datenschutzgrundverordnung (DS-GVO) gegenüber uns einfordern zu können. Daher haben wir folgendes Formular erstellt, um den Vorgang für alle Beteiligten möglichst effizient zu gestalten. 

Attention: This form is meant to be used by former students and their parents. If you currently have your child(ren) enrolled at BIS and would like to file a GDPR request, please login to the community section of our webpage and click on the GDPR button. According to Article 13 GDPR: we will store your data as long as required to answer your inquiry.

Achtung: Dieses Formular ist für ehemalige Schüler und deren Eltern gedacht. Sofern Sie derzeit Ihr Kind/ Ihre Kinder bei uns eingeschrieben haben und eine Anfrage nach DS-GVO stellen möchten, loggen Sie sich bitte bei uns im Communitybereich der Webseite ein und klicken auf den DS-GVO Button. Entsprechend Artikel 13 DS-GVO werden wir Ihre Daten nur so lange speichern, wie es für die Bearbeitung und Beantwortung Ihrer Anfrage notwendig ist.

The GDPR provides the following rights for individuals: / Die DS-GVO definiert folgende Rechte für EU-Bürger und EU-Residenten:

  • The right to be informed | Informationsrecht
  • The right of access | Recht auf Zugriff auf die verarbeiteten personenbezogenen Daten
  • The right to rectification | Recht auf Berichtigung
  • The right to erasure | Recht auf Löschung
  • The right to restrict processing | Recht auf Einschränkung der Verarbeitung 
  • The right to data portability | Recht auf Datenübertragbarkeit
  • The right to object | Recht auf Widerspruch 
  • Rights in relation to automated decision making and profiling | Rechte im Zusammenhang mit automatisierten Entscheidungen inkl. Profiling.

We do everything we can to process your request as quick as possible. Our reply can take up to 30 days, which is the legal maximum for a reply. / Wir versuchen unser Möglichstes, Ihre Anfrage so schnell wie möglich zu beantworten. Unsere Antwort kann bis zu 30 Tage in Anspruch nehmen.

I herebye declare that the following statement is legally correct:
Please select from one of the options listed above.
You have the right to be informed about the collection and use of your personal data at BIS. We provide you with information including: our purposes for processing your personal data, our retention periods for that personal data, and who it will be shared with. There are a few circumstances when BIS does not need to provide you with privacy information, such as if you already have the information or if it would involve a disproportionate effort to provide it to you.
The right of access, commonly referred to as subject access, gives you the right to obtain a copy of your personal data as well as other supplementary information. It helps you to understand how and why we are using your data, and check we are doing it lawfully. You have the right to obtain the following from us: 1) confirmation that we are processing your personal data, 2) a copy of your personal data and 3) other supplementary information - if available.
You have the right to have inaccurate personal data rectified. You may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing.
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. You have the right to have their personal data erased if: - the personal data is no longer necessary for the purpose which BIS originally collected or processed it for; - BIS is relying on consent as our lawful basis for holding the data, and the you withdraws your consent; - BIS is relying on legitimate interests as our basis for processing, you object to the processing of your data, and there is no overriding legitimate interest to continue this processing; - BIS has processed the personal data unlawfully (ie in breach of the lawfulness requirement of the 1st principle); - BIS has to do it to comply with a legal obligation. The right to erasure does not apply if processing is necessary for one of the following reasons: - to exercise the right of freedom of expression and information; - to comply with a legal obligation (e.g. German School Law, here: Schulgesetz NRW); - for the performance of a task carried out in the public interest or in the exercise of official authority; - for archiving purposes or statistical purposes where erasure is likely to render impossible or seriously impair the achievement of that processing; or for the establishment, exercise or defence of legal claims.
Article 18 of the GDPR gives you the right to restrict the processing of your personal data in certain circumstances. This means that you can limit the way that BIS uses your data. This is an alternative to requesting the erasure of your data. You have the right to restrict the processing of your personal data where you have a particular reason for wanting the restriction. This may be because you have issues with the content of the information BIS holds or how BIS has processed your data. In most cases BIS will not be required to restrict your personal data indefinitely, but will need to have the restriction in place for a certain period of time. When does the right to restrict processing apply? You have the right to request you restrict the processing of your personal data in the following circumstances: - you contest the accuracy of your personal data and BIS is verifying the accuracy of the data; - the data has been unlawfully processed (ie in breach of the lawfulness requirement of the first principle of the GDPR) and you opposes erasure and requests restriction instead; - BIS no longer needs the personal data but the you need BIS to keep it in order to establish, exercise or defend a legal claim; or you have objected to BIS processing your data, and BIS is considering whether BIS' legitimate grounds override those of you.