Chapter III - Rights of the data subject

Article 12 - Transparent information, communication and modalities for the exercise of the rights of the data subject

Measures of the controller in terms of providing the information to data subjects
Facilitating the data subject rights
Providing the information on action taken on a request under Articles 15 to 22 to the data subject
Obligations of the controller in case when the data subject request is unadopted
Rights of the controller in case of the inappropriate requests from the data subject
Additional information claims from the controller
Providing the information in terms of Articles 13 and 14
The right of the Commission to act in terms of the Article 92

Article 13 - Information to be provided where personal data are collected from the data subject

Information provided to the data subject when personal data has been acquired from a data subject
Additional information provided to the data subject when personal data has been acquired from a data subject
Information provided to the data subject when controller intends to further process the personal data for a purpose other than that for which the personal data were collected
Exemption from exercising the paragraphs 1 – 3, Article 13

Article 14 - Information to be provided where personal data have not been obtained from the data subject

Information provided where personal data have not been obtained from the data subject
Some additional information provided where personal data have not been obtained from the data subject
Principles of providing the information in terms of the Article 14, paragraph 1 and 2 of the regulation
Providing the information where the controller intends to process the personal data for a purpose other than that for which the personal data were obtained
Exemptions from application the obligation of the controller to provide information in terms of the Article 14, paragraphs 1 – 4

Article 15 - Right of access by the data subject

Right of the data subject to obtain a confirmation of the personal data processing from the controller
Right to be informed of appropriate safeguards pursuant to Article 46 relating to the transfer
Obligation to provide a copy of the personal data which are being processed
Limitation of the negative implications in context of the other subjects' rights

Article 16 - Right to rectification

Right to rectification

Article 17 - Right to erasure 'right to be forgotten'

Reason for eligibility of the data subject to exercise the right to be forgotten
Obligations of the controller after the right to be forgotten has been applied
Exemptions from the application of Article 17, paragraph 1 and 2

Article 18 - Right to restriction of processing

Restraining the personal data processing
Processing the personal data after the right to restriction of processing has been applied
Information duty of the controller in context of the personal data processing limitation

Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing

Information obligation of the controller towards the recipients

Article 20 - Right to data portability

Right of the data subject to personal data portability
Portability of the personal data from one controller to another controller
Limitation of the right to obtain the personal data
Limitation of the negative implications relating to other subjects' rights

Article 21 - Right to object

Right of the data subject to object the processing of personal data
Right of the data subject to object the personal data processing related to the marketing purposes
Prohibition of the personal data processing after the Article 21, paragraph 2 has been applied
Obligation of the controller to inform the data subject about the to object
Application of the right to object using the automated services
Right to object the personal data processing for the purposes of the scientific, historical or statistical reasons

Article 22 - Automated individual decision-making, including profiling

Right not to be subject to a decision based solely on the automated processing
Restrictions in application of the Article 22, paragraph 1
Proceedings of the controller in case of the Article 22, paragraph 2, points a) – c) application
Decisions according to the Article 22, paragraph 2

Article 23 - Restrictions

Restrictions of the scope of rights and obligations settled in the Articles 12 – 22, 34 and 5
Minimum scope of the individual provisions in terms of the Article 23, paragraph 1 of the regulation