Requesting information about stored personal data from federal authorities in accordance with the General Data Protection Regulation (GDPR)

If you would like to know what personal data is stored about you, you can make use of your right to information and request a comprehensive inspection of your data.

As a citizen of the European Union, you have the right to know what personal data is stored about you. You can assert this right against public and non-public bodies. Public bodies are, for example, public authorities, non-public bodies, commercial enterprises, associations or clubs.

Personal data includes, for example

• Online data, such as IP address, location data, e-mail address
• Bank data, such as account balances, account numbers
• Identification numbers, such as identity card number or social security number
• Land register entries
• Health information such as genetic data, medical data
• certificates
• General personal data, such as name, address, age, marital status
• Physical characteristics, such as gender, skin, hair or eye color, height

The European General Data Protection Regulation (GDPR) grants you the right to information and enables you to gain comprehensive insight into any data stored about you.

You can also find out, for example

• the purposes for which your data is processed
• to which recipients your data is disclosed or
• how long your data will be stored.

You can request information about the personal data stored about you online or in writing by post.

If you wish to submit a written request by post or require general information, please contact the relevant authority with your questions. The contact details of the relevant authority can be found in the list of authorities on the "service.bund.de - Service Online" portal.

Depending on the circumstances and the authority, additional information may be required to prove your eligibility, for example

• Copy of your identity card
• Copy of your passport with a copy of your registration certificate
• Clear information on the facts of the case

When providing information, the rights and freedoms of other persons must be respected. This primarily protects the personal data of third parties. This means for you:

• It must be personal data that relates to you personally.

There are no generally applicable legal remedies.

You can request information about the personal data stored about you online or in writing by post.

Request information from public bodies online:

• Call up the online application on the federal portal. This will guide you step by step through the necessary information, which you can enter electronically.
• Upload the required documents as a file (in the file formats PDF, DOC, JPEG, PNG, maximum 10 megabytes per file) and send the application. Alternatively, you can also submit the required documents by post.
• The public authority will usually send you the corresponding answer by post to your registration address or, under certain circumstances, by e-mail.

Request information from public authorities in writing:

• You can submit your request informally.
• Send your request with the required documents by post to the public authority.
• The public authority will send you the corresponding reply by post to your registration address.

There is no deadline.

If necessary, you will receive a copy of your personal data. The first copy is free of charge. If you request further copies, you may have to bear the costs.: Fee free of charge