§ 38 ThürDSG
Automated individual decision-making
(1)(Article 11 of Directive (EU) 2016/680)
(2)A decision based solely on automated processing which produces an adverse legal effect concerning the data subject or significantly affects him or her shall only be permissible where it is provided for by a legal provision. The provision must ensure that the legitimate interests and rights of the data subject are safeguarded. As a minimum, it must be ensured that the data subject may request a substantive assessment and a decision based thereon by the controller.
(3)Decisions pursuant to paragraph 1 shall not be based on special categories of personal data, unless appropriate measures have been taken to safeguard the rights and legitimate interests of the data subjects. zur Einzelansicht § 38