Chapter III - Rights of the data subject

Article 12 - Transparent information, communication and modalities for the exercise of the rights of the data subject
Measures of the controller in terms of providing information to data subjects.
Facilitating the data subject rights exercising under the Articles 15 to 22
Providing the information on action taken on a request under Articles 15 to 22 to the data subject
Obligations of the controller when the data subject request is unadopted
Rights of the controller in context of the inappropriate requests from the data subject
Additional information claims from the controller
Providing the information in terms of Articles 13 and 14
The right of the Commission to act in terms of the Article 92 of the regulation

Article 13 - Information to be provided where personal data are collected from the data subject
Information provided to the data subject when personal data has been acquired from a data subject
Additional information provided to the data subject when personal data has been acquired from a data subject
Information provided to the data subject when controller intends to further process the personal data for a purpose other than that for which the personal data were collected
Exemption from exercising the paragraphs 1 – 3, Article 13 of the regulation

Article 14 - Information to be provided where personal data have not been obtained from the data subject
Information provided where personal data have not been obtained from the data subject
Some additional information provided where personal data have not been obtained from the data subject
Principles of providing the information in terms of the Article 14, paragraph 1 and 2 of the regulation
Providing the information where the controller intends to further process the personal data for a purpose other than that for which the personal data were obtained
Exemptions from the obligation of the controller to provide information in terms of the Article 14, paragraphs 1 – 4 of the regulation

Article 15 - Right of access by the data subject
Right of the data subject to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed
Right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer
Obligation to provide a copy of the personal data undergoing processing
Limitation of the negative implications regarding the the right to obtain a copy referred to in paragraph 3 of the regulation

Article 16 - Right to rectification
Right to rectification

Article 17 - Right to erasure (‘right to be forgotten’)
Reason for eligibility to exercise the right to be forgotten
Obligations of the controller when the right to be forgotten has been applied
Exemptions from exercising the Article 17, paragraph 1 and 2 of the regulation

Article 18 - Right to restriction of processing
Restraining the personal data processing
Processing of the personal data after the application of the right to restriction of processing
Obligation of the controller regarding the processing limitation

Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing
Information obligation of the controller towards the recipients

Article 20 - Right to data portability
Right to data portability
Portability of the personal data from one controller to another
Limitation of the right to obtain the personal data
Limitation of the negative implications in context of the other subjects rights

Article 21 - Right to object
Right to object
Right to object on case of the direct marketing purposes
Prohibition of the personal data processing after the Article 21, paragraph 2 application
Obligation to inform the data subject in context of the right to object
Application of the right to object using the automated services
Right to object in context of the personal data processing for the purposes of scientific, historical or statistical reasons

Article 22 - Automated individual decision-making, including profiling
Right not to be subject to a decision based solely on automated processing
Restriction of the Article 22, paragraph 1 application
Proceedings of the controller in case of the Article 22, paragraph 2, points a) – c) application
Decisions referred to in Article 22, paragraph 2 of the regulation

Article 23 - Restrictions
Restrictions of the scope of rights and obligations settled in the Articles 12 – 22, 34 and 5 of the regulation
Minimum scope of the individual provisions in terms of the Article 23, paragraph 1 of the regulation