§ 54 HDSIG
Procedure for the Exercise of the Rights of the Data Subject
(1)The controller shall communicate with data subjects using clear and plain language in a precise, intelligible and easily accessible form. Without prejudice to special form requirements, the controller should use the form chosen for the request when responding to requests. When selecting the medium, the requirements of § 59 shall be observed.
(2)In the case of requests, the controller shall, without prejudice to § 52 para. 6 and § 53 para. 6, inform the data subject in writing without undue delay of how the requests were handled.
(3)The provision of information under § 50, the notifications under §§ 51 and 61 and the handling of requests under §§ 52 and 53 shall be free of administrative costs. In the case of manifestly unfounded or excessive requests under §§ 52 and 53, the controller may either charge a reasonable fee based on the administrative costs or refuse to act on the basis of the request. In this case, the controller must be able to demonstrate the manifestly unfounded or excessive character of the request.
(4)Where the controller has reasonable doubts about the identity of a data subject who has made a request under §§ 52 and 53, he or she may request additional information necessary to confirm the identity of the data subject. zur Einzelansicht § 54