§ 21 ThürDSG
Right of access
(1)(Articles 15 and 23 of Regulation (EU) 2016/679)
(2)The right of access under Article 15 of Regulation (EU) 2016/679 may be restricted insofar as and for as long as 1. the provision of information would jeopardise public safety or otherwise cause disadvantage to the welfare of the Federation or of a Land, 2. the personal data or the fact that they are stored must be kept secret by virtue of a legal provision or by their nature, in particular because of the rights and freedoms of another person, or 3. the provision of information would be contrary to the purposes referred to in Section 31 and the interest of the data subject in obtaining the information must therefore take second place.
(3)The right to the provision of information under Article 15 of Regulation (EU) 2016/679 shall not apply to data which are stored exclusively for the purposes of data security or data protection control.
(4)Where the provision of information relates to the transmission of personal data to authorities of the public prosecution service, police authorities, constitutional protection authorities, the Federal Intelligence Service, the Military Counter-Intelligence Service or, insofar as the security of the Federation is concerned, other authorities within the portfolio of the Federal Ministry responsible for defence, it shall only be permissible with the consent of those bodies. The same shall apply in the case of data transmission by the authorities referred to in sentence 1.
(5)The refusal to provide information shall not require justification insofar as and for as long as the disclosure of the factual and legal reasons on which the decision is based would jeopardise the purpose pursued by withholding the information. In such a case, the data subject shall be informed that he or she may lodge a complaint with the State Commissioner for Data Protection.
(6)Where the data subject is not provided with information, the information shall, at the data subject's request, be provided to the State Commissioner for Data Protection, unless the competent supreme Land authority determines in an individual case that doing so would jeopardise the security of the Federation or of a Land. zur Einzelansicht § 21