The Data State Inspectorate shall declare that, in accordance with the third paragraph of Article 12 of the General data Protection Regulation (hereinafter referred to as “the Regulation”), the controller (hereinafter referred to as “the organisation”) shall inform the data subject, without undue delay and in any event within one month of receipt of the request, of the action taken on request in accordance with Articles 15 to 22 of the Regulation.
You have the right to access an organization.
You have the right to access your personal data (Article 15 of the Regulation).
If an organization processes your personal data, you have the right to request access to all your personal data, including receiving copies of your personal data in a format of your choice.
Correct inaccurate personal data (Article 16 of the Regulation).
If you notice that an organization has inaccurate information containing your personal data, you have the right, and the organization has the obligation, to correct inaccurate data without undue delay.
Right to be forgotten (Article 17 of the Regulation).
If an organization processes your personal data, in accordance with the cases specified in the Regulation, you have the right, and the organization has the obligation, to erase your personal data without undue delay.
Restrict the processing of personal data (Article 18 of the Regulation).
You have the right to restrict the processing of your personal data if:
- You dispute the accuracy of your personal data held by the organization.
- The processing of your personal data is illegal.
- The organization no longer needs your personal data, but you require it to fulfill or defend your legitimate requirements.
- Your right to data protection outweighs the legitimate interests of the organization.
An organization has a duty to inform you if your personal data have been disclosed to third parties, if corrections have been made to personal data, if deletions have been made, or if restrictions on the processing of your personal data have been applied.
If an organization processes your personal data based on your prior consent or contractual obligations between the organization and you, then you have the right to require the organization to return your personal data or "transfer" it to another organization.
If an organization processes your personal data, when evaluating your right to data protection, you have the right to object to the processing of your personal data.
Remember that an organization must demonstrate that the legitimate interests of the organization do not outweigh your right to the processing of personal data.
If your personal data are processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time, including requesting the deletion of your personal data from the organization's database.
Right of objection to automated processing of personal data, including profiling (Article 22 of the Regulation).
Unless automated processing of personal data is permitted by specific law, you have the right to express your opinion in cases of automated decision-making. The organization must provide appropriate measures to protect your rights, freedoms, and legitimate interests.