§ 52 NDSG
Rectification, erasure and restriction of processing
(1)1The data subject shall have the right to obtain from the controller the rectification without undue delay of inaccurate data concerning him or her. 2In particular, in the case of statements or assessments, the question of accuracy does not concern the content of the statement or assessment, but rather the fact that the statement or assessment was made as such. 3Where the controller has made a rectification, it shall notify the body that previously transmitted the personal data of the rectification. 4Where the accuracy or inaccuracy of the data cannot be established, restriction of processing shall take the place of rectification. 5In such a case, the controller shall inform the data subject before lifting the restriction. 6The data subject may also request the completion of incomplete personal data where this is appropriate in view of the processing purposes.
(2)The data subject shall have the right to obtain from the controller the erasure without undue delay of data concerning him or her where their processing is unlawful, their knowledge is no longer necessary for the performance of tasks, or they must be erased to comply with a legal obligation.
(3)§ 28(2) and (3) and § 32(2) and (3) shall apply.
(4)1The controller shall inform the data subject in writing of a refusal to rectify or erase personal data or of a restriction of processing in lieu thereof, and of the reasons therefor. 2This shall not apply where the provision of such information would give rise to a risk within the meaning of § 51(3). 3The notification pursuant to sentence 1 shall be accompanied by reasons, unless stating the reasons would defeat the purpose pursued by the refusal to provide notification. 4§ 51(6) shall apply mutatis mutandis.