DATA PROTECTION

Data Subject Rights
General Data Protection Rights ( GDPR )

Right of Access

Article 15 GDPR: The data subject shall obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed, where and for what purpose, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing and the right to complaint with a supervisory authority. Where the personal data are not collected from the data subject, he or her shall obtain any available information as to their source. Further, the controller shall provide a copy of the personal data, in a commonly used electronic form.

Right to rectification

Article 16 GDPR: The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.
The data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.


Right to Erasure ( right to be Forgotten )

Article 17 GDPR:


Right to Restriction of Processing

Article 18 GDPR

Right to be Notified

Article 19 GDPR: Notification obligation regarding rectification or erasure of personal data or restriction of processing.
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with articles 16 to 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. 2The controller shall inform the data subject about those recipients if the data subject requests it.


Right to Data Portability
Article 20 GDPR: The right for a data subject to receive the personal data concerning them – which they have previously provided in a ‘commonly use and machine readable format’ and have the right to transmit that data to another controller.