FADP

Be told of a decision based solely on automated processing that has a legal consequence or a considerable adverse effect on you, state your point of view and ask for it to be reviewed by a natural person, unless it is tied to a contract with you and your request is granted or you explicitly consented.

Ask a controller whether it processes personal data about you and receive the processed data itself, generally free of charge; it may refuse, restrict or delay only on the grounds in Articles 26 and 27 and must tell you why, and if it cannot answer in time it must say how long it will take.

Receive, with an access request, the controller's identity and contact details, the purpose, the retention period or its criteria, the available information on the source of data not collected from you, any automated individual decision and its logic, and the recipients or their categories, including countries abroad.

Receive the personal data you disclosed to a controller in a conventional electronic format, or have it transferred to another controller where that takes no disproportionate effort, when it is processed automatically with your consent or in direct connection with a contract with you.

Have incorrect personal data corrected unless a statutory provision prohibits it or the data is processed for archiving in the public interest, and have data marked as disputed when neither its accuracy nor its inaccuracy can be established.

Object to processing, since processing against your express wishes breaches your personality rights unless an overriding private or public interest or the law justifies it, and ask for a specific processing activity or disclosure to third parties to be prohibited, if necessary through a civil action.

Ask for personal data about you to be deleted or destroyed where its processing unlawfully breaches your personality rights, if necessary through a civil action to protect personality under the Civil Code.