Why do companies want your personal data

Query, change or delete saved data: Letter templates

You have a right to information about the processing of your personal data. On request, companies must inform you about data processing in a precise, transparent, understandable and easily accessible form in clear and simple language. This includes, for example, the storage period, the purpose for which the data is processed, which categories of personal data are processed, information about the origin of the data and possible recipients of the data.

The right to information is of great importance. Because only when you know what a company has stored about you can you take action against it. These include, for example: the right to delete or correct your data and the right to restrict processing (blocking of data).

With our sample letters you can ask companies what is stored about you. You can also request that data be changed or deleted.

Attention: You can enclose a copy of your ID with some of the letters as proof of identification. Be sure to black out any irrelevant information. The visibility of name, address and date of birth is sufficient for identification!

Further information:

We offer different letters. Choose which one fits your situation exactly:


Information and copy of personal data

This sample letter is intended for the case that you want to know from a company whether and which data the respective company has saved about you (e.g. last name, first name, address, date of birth, occupation, medical findings). You will receive a copy of this from the company. In principle, the information must be provided free of charge. The company must also provide the first copy of the data free of charge. As soon as you know what data the company has stored about you, you can take the further steps described here.

You can download this letter as a letter template here


Objection to data processing

This sample letter is intended for the case that you want to object to the lawful use of your data by a company that the company processes on the basis of a legitimate interest. In this case you can also request the deletion of the data. Whether the company is still allowed to process the data depends on the individual case (e.g. if the processing serves to assert, exercise or defend legal claims).

You can download this letter as a letter template here


Revocation of consent and request for the deletion of data

This sample letter is intended for the event that you want to revoke your consent to the processing of your personal data by a company. In addition, you can use this sample letter to request the deletion of the data stored by the company. This is useful, for example, if data is processed unlawfully or is no longer required for the original purpose for which the data was collected. But be careful: in practice, the data is often only blocked instead of deleted because companies are subject to retention requirements.

You can download this letter as a letter template here


Objection to data processing for direct marketing and blocking of personal data from advertisers

This sample letter is intended for the case that you want to have the data stored by a company that has sent you advertising mail blocked for further use (restriction of processing). For advertisers, for example, this makes more sense than deletion, because the data then cannot simply be collected again, for example via address dealers.

You can download this letter as a letter template here


Deletion of personal data

This sample letter is intended for the case that you want to have data stored at a company deleted. Companies are obliged to do this, for example, if the data is processed unlawfully or is no longer required for the original purpose for which the data was collected. The GDPR also strengthens the protection of children. They are usually unable to assess the dangers associated with data processing. You can therefore request the deletion of data that was collected as a child even later as a young person or even as an adult. Attention: In some cases, e.g. with advertisers, it may make more sense not to delete the data, but to have it blocked (see "Objection to data processing for direct marketing and blocking of personal data for advertisers").

You can download this letter as a letter template here


Deletion of personal data on websites

This sample letter is intended for the case that you would like to have personal data deleted from a website. Companies not only have to delete the data on their own website, they also have to take additional measures. As far as possible, you must inform third parties who are also processing the personal data that a consumer has requested the deletion of the data.

You can download this letter as a letter template here


Deletion of links in search engines

What applies to data on websites under "Deleting personal data on websites" also applies to links in search engines. Google and Co. can already display information about you in the search results (e.g. when sections of the website are displayed). You are writing to the operator of a search engine and request the deletion of your data.

You can download this letter as a letter template here