Chapter IIIRights of the data subject

Section 1 – Transparency and modalities

• Article 12Transparent information, communication and modalities for the exercise of the rights of the data subject

  1. The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34…

Section 2 – Information and access to personal data

• Article 13Information to be provided where personal data are collected from the data subject

  1. Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the…

• Article 14Information to be provided where personal data have not been obtained from the data subject

  1. Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information: (a) the identity and the…

• Article 15Right of access by the data subject

  1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed,…

Section 3 – Rectification and erasure

• Article 16Right to rectification

  The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account…

• Article 17Right to erasure (‘right to be forgotten’)

  1. The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller…

• Article 18Right to restriction of processing

  1. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: (a) the accuracy of the personal…

• Article 19Notification obligation regarding rectification or erasure of personal data or restriction of processing

  The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16 , Article 17(1) and Article 18…

• Article 20Right to data portability

  1. The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a…

Section 4 – Right to object and automated individual decision-making

• Article 21Right to object

  1. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning…

• Article 22Automated individual decision-making, including profiling

  1. The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him…

Section 5 – Restrictions

• Article 23Restrictions

  1. Union or Member State law to which the data controller or processor is subject may restrict by way of a legislative measure the scope of the obligations…