As a Data Subject as defined by the GDPR, you have the right to obtain confirmation as to whether or not your personal data is being processed, and, if it is, to access that personal data and the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
You also have:
- the right to request rectification of personal data
- the right to request erasure of personal data when:
-
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw consent and where there is no other legal ground for the processing;
- you object to the processing for direct marketing purposes;
- the personal data have been unlawfully processed;
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- the right to restriction of processing of personal data, or to object to such processing, when;
-
- you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- we no longer need the personal data for the purposes of the processing, but you require us to retain it for the establishment, exercise or defence of legal claims;
- you have objected to processing, pending the verification whether the our legitimate grounds override your data concerns.
- the right to lodge a complaint with a supervisory authority;
- the right to request information as to the source of your data, where you did not provide the personal data;
- the right to inquire into the existence of automated decision-making, including profiling, and meaningful information about the logic involved.