1. RIGHT OF ACCESS (Article 15 GDPR)
The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in an intelligible form.
2. RIGHT TO RECTIFICATION (Article 16 GDPR)
The data subject has the right to obtain the rectification of inaccurate personal data concerning them and the completion of incomplete data.
3. RIGHT TO ERASURE (Article 17 GDPR)
The data subject has the right to obtain the erasure of personal data in the presence of specific reasons such as withdrawal of consent, objection to processing, or if the data are no longer necessary for the purposes for which they were collected and processed or in case of unlawful processing. It may not always be possible to proceed with erasure, but the data controller must provide adequate justification.
4. RIGHT TO RESTRICTION OF PROCESSING (Article 18 GDPR)
The data subject has the right to obtain the restriction of processing in the presence of specific circumstances, such as, for example, in case of a request for rectification or objection during the evaluation period of the requests.
5. RIGHT TO DATA PORTABILITY (Article 20 GDPR)
If the processing is based on consent or a contract and is carried out using automated tools, the data subject may receive the data in a structured, commonly used, and machine-readable format or request their transfer to another controller.
6. RIGHT TO OBJECT (Article 21 GDPR)
The data subject has the right to object, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning them, even if relevant to the purpose of the collection;
b) to the processing of personal data concerning them for the pursuit of purposes not contemplated in Article 2. The user may submit a request to object to the processing of their personal data under Article 21 of the GDPR, in which they provide the reasons justifying the objection. The Data Controller reserves the right to evaluate the request, which would not be accepted in case there are compelling legitimate reasons for proceeding with the processing that prevail over the user’s interests, rights, and freedoms.
7. RIGHT TO LODGE A COMPLAINT
The data subject has the right to lodge a complaint with the competent supervisory authority under Article 77 of the GDPR if they believe that the processing of their data is contrary to the current legislation.