Data subject rights

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21 and 22 – Data Subject Rights

• The data subject has the right to obtain confirmation of whether personal data concerning them exists, even if not yet recorded, and to receive that data in an intelligible form.
• The data subject has the right to obtain information about:
• the origin of the personal data;
• the purposes and methods of processing;
• the logic involved where processing uses electronic tools;
• the identifying details of the Data Controller, the Data Protection Officer (DPO) and the representative;
• the parties or categories of parties to whom personal data may be disclosed or who may access it as a designated representative within the State, a processor or an authorised person.

1. The data subject has the right to obtain:

• updating, rectification or, where relevant to the data subject, completion of the data;
• erasure, anonymisation or blocking of data processed unlawfully, including data no longer necessary for the purposes for which it was collected or subsequently processed;
• confirmation that the operations described above have been communicated, including their content, to those to whom the data was disclosed or made public, except where this proves impossible or involves a manifestly disproportionate effort compared with the right protected;
• data portability.

2. The data subject has the right to object, in whole or in part, to the processing of their personal data on grounds relating to their particular situation.

3. To exercise your rights and obtain any useful information about the processing of your data, you may submit an express written request.

4. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your data infringes the GDPR.