Rights of the involved persons

This element is very important and allows you to describe how the rights of the involved persons are managed. Every person, of which you are holding information, is considered 'involved' and acquires certain rights, for example the right to be forgotten. You, as an organisation, need to be prepared to reply to those requests. We foresee 8 rights, and ask you to input:

  • Status : is your organisation ready to respond?
  • Information : describe how you will respond
  • Documents : Upload any document that gives further instructions on how to respond (if needed).

The rights are

  1. Right on clear communication & information : placing the generated privacy policy is a good foundation
  2. Access to personal data : The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data
  3. Rectification : The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  4. Erasure (right to be forgotten): The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay
  5. Restrictions : The data subject shall have the right to obtain from the controller restriction of processing
  6. Right to data portability : The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided
  7. Right to object : The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her
  8. Automated individual decision making (profiling) : The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.


How did we do?