Restrict the processing of your personal data in accordance with the General Data Protection Regulation (GDPR)
As part of your right to self-determination under data protection law, you can, under certain conditions, request that your personal data may only be stored but no longer processed.
Description
As a citizen of the European Union (EU), you can request from any body that stores and processes personal data about you that your data may only be stored but no longer processed.
Personal data includes, for example
- Online data, such as IP address, location data, email address
- Bank data, such as account balances, account numbers
- Identification numbers, such as identity card number or social security number
- Land register entries
- Health information, such as genetic data, medical data
- certificates
- General personal data, such as name, address, age, marital status
- Physical characteristics, such as gender, skin, hair or eye color, height
With your right to restriction of processing, you can initially prevent your personal data from continuing to be processed electronically. As soon as the rights of the data controller have expired, your data will be permanently deleted. You can only invoke your right to restriction of processing under certain conditions.
You can assert the right to restriction of processing against public and non-public bodies. Public bodies are, for example, authorities, non-public bodies are, for example, commercial enterprises, associations or clubs.
You must request the restriction of the processing of your personal data directly from the relevant public or non-public body.
If you wish to submit a written request by post or require general information, please contact the relevant authority with your questions.
The contact details of the relevant authority can be found in the list of authorities on the "service.bund.de - Service Online" portal.
Online service
Online form for asserting data subject rights under the General Data Protection Regulation (GDPR)
Description
Use this service online
Trust level
You need an account with password to use this online service (trust level: basic registration).
further information on the level of trust for online services
Identification
- electronic identification using national eID means - identity card
- electronic identification using national eID means – software certificate
Contact person
Required documents
Depending on the circumstances and the authority, additional information may be required to prove your eligibility, for example
- Copy of your identity card
- Copy of your passport with a copy of your registration certificate
- Clear information on the facts of the case
Prerequisites
You may request the restricted processing of your personal data if:
- you have requested the rectification of inaccurate data and the data controller is examining this request,
- you have objected to the processing and it is still necessary to check whether the interests of the data controller outweigh your interests,
- you expressly request restriction instead of erasure, or
- the data controller no longer needs your data, but you still wish to use it for its own purposes.
You cannot have the processing of your personal data restricted if it is being processed
- for archiving purposes which are in the public interest and which would be seriously affected by the restriction,
- for research, scientific or statistical purposes, insofar as the original purpose would no longer be achieved or would be seriously impaired by the restriction of processing.
Basis for legal action
Legal remedy
There are no generally applicable legal remedies.
Procedure
You can request the restricted processing of your stored personal data online or in writing by post.
Request restricted processing of your personal data online:
- Call up the online application on the federal portal. This will guide you step by step through the necessary information, which you can enter electronically.
- Upload the required documents as a file (in the file formats PDF, DOC, JPEG, PNG, maximum 10 megabytes per file) and send the application. Alternatively, you can also submit the required documents by post.
- The public authority will usually send you the corresponding reply by post to your registration address or, under certain circumstances, by e-mail.
Request restricted processing of your personal data in writing:
- You can submit your request informally.
- Send your request with the required documents by post to the public authority.
- The public authority will send you the corresponding reply by post to your registration address.
Deadlines
There is no deadline.
Processing time
4 weeks (Note for further information on the processing period: The processing of your personal data must be stopped immediately, i.e. without culpable delay on the part of the body processing the data. In principle, you must be informed of the measures taken no later than 1 month after you have requested the restriction. If this is not possible, you must be informed of the reasons for the delay and the extended deadline.)
Costs
Fee free of charge
Further Information
Area of validity
Germany-wide
Official approval
Officially approved by Federal Ministry of the Interior (BMI) on 05.11.2025
Keywords
Rights of data subjects, DS-GVO, BDSG, Federal Data Protection Act, Data information, personal data, Rights of affected persons, person-related, General Data Protection Regulation