The right to be informed
Individuals have the right to be informed about the collection and use of their personal data. This is a key transparency requirement under GDPR.
The right of access
Individuals have the right to access their personal data and supplementary information. The right of access allows individuals to be aware of and verify the lawfulness of the processing.
The right to rectification
Individuals have the right to have inaccurate personal data rectified, or completed if it is incomplete. An individual can make a request for rectification verbally or in writing. Organizations have one calendar month to respond to a request.
The right to erasure
Individuals have the right to have personal data erased. This right is also known as “the right to be forgotten.” Individuals can make a request for erasure verbally or in writing. Organizations have one calendar month to respond to a request. This right is not absolute and only applies in certain circumstances.
The right to restrict processing
Individuals have the right to request the restriction or suppression of their personal data. When processing is restricted, organizations are permitting to store the personal data, but not use it. Organizations have one calendar month to respond to a request. This right is not absolute and only applies in certain circumstances.
The right to data portability
Individuals can obtain and reuse their personal data for their own purposes across different services. This right allows individuals to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability. This right enables consumers to take advantage of applications and services which can use this data to find them a better deal, or help them understand their spending habits.
The right to object
Individuals have the right to object to:
- Data processing based on legitimate interested or the performance of a task in the public interest/exercise of official authority (including profiling);
- Direct marketing (including profiling);
- Data processing for purpose of scientific/historical research and statistics.
Rights in relation to automated decision and profiling
This right protects individuals if organizations are carrying out solely automated decision-making that has legal or similarly significant effects on them.
Submit a Data Rights Request
In accordance with GDPR compliance, after you submit the request, you will obtain the following from the company you are requesting access from:
- Confirmation that your data is being processed;
- Access to your personal data; and,
- Other supplementary information.
This information will be provided to you without delay and at the latest within one month of the request receipt.