§ 59 BDSG
Procedure for exercising the rights of the data subject
(1)The controller shall take reasonable measures to facilitate the exercise by the data subject of the rights referred to in Sections 57 and 58.
(2)Where the controller has reasonable doubts concerning the identity of the natural person making a request referred to in Sections 57 and 58, it may request the provision of additional information necessary to confirm the identity of the data subject.
(3)Without prejudice to other administrative or judicial remedies, the data subject shall have the right to lodge a complaint with the Federal Commissioner if the data subject considers that the processing of personal data relating to him or her violates data protection provisions.
(4)The controller shall inform the data subject of the right to lodge a complaint with the Federal Commissioner.