-
the right of access – can demand from the administrator information on the processing of their personal data , that is, confirmation whether their personal data is being processed. If the data is indeed processed, they are entintled to access them, receiving their copy and to receiving the following information: the purpose of processing, types of stored data, information on their recipients or types of recipients that have received them or will in the future, the duration of their storage, its criteria, the owner’s rights related to the processing of their personal data, the possibilities of filing a complaint with the supervising organ, the source of acquired personal data if it was not received directly from their owner, and the profiling and automated processing of decision (art. 15 of RODO);
-
the right of correction – can correct their personal data. If the person establishes that their personal data processed by the administrator is incorrect, out-of-date or incomplete, they can demand their immediate correction or supplementaion (art. 16 of RODO);
-
the right to be forgotten – can demand the deletion of their personal data, wherein if the person gave permission for processing of their data, the demand of deletion will have the same effect as withdrawing their permission (art. of 17 RODO);
-
right to limit the processing – can demand limiting the processing of their personal data (art. of 18 RODO), that is, demand cessation of their processing in any other way than storage.
-
right to transfer – can move their personal data, that is, receive the personal data provided to the administrator in a structured, commonly used format suitable for machine-based reading if their processing is based on granted permission, or demand disclosing the data to another administrator pointed by the data owner (art. 20 of RODO).