What are my rights under the GDPR?

1. You have the right to information.

  • Companies and organisations are now required to communicate to you, in plain and accessible language, what personal data they process and how they use it. (“Processing” includes anything related to the collection, aggregation, mining or sharing of data.)
  • If a company or organisation builds a profile on you (e.g. from data matched up from different sources), you have the right to know what’s in this profile.

2. You have the right to secure handling.

The GDPR regulates that personal data should be stored and processed securely.

3. You have the right to access the personal data a company or organisation holds on you, at any time.

  • If the data is inaccurate, you can change or complete it.
  • If the data is no longer necessary, you can ask the company or organisation to delete it.
  • If you initially gave the company or organisation more data than was necessary for receiving the service (e.g. for marketing purposes), but no longer want them to have this data, you can ask them to delete it.

4. You have the right to use a service without giving away additional data .

If a company or organisation wants to process personal data that is not strictly necessary for the provision of a particular service (e.g. a transport app that wants access to your phone’s contact list), they need to get your explicit consent to process that data. . (Note that even if a company or organisation believes that certain data is in their interest to process, this does not always mean that it is necessary). If you have already consented to the processing of additional data, you can always withdraw this consent.

5. When it comes to automated decision-making you have the right to explanation and human intervention. If a decision has been made about you through automatic mechanisms, you have the right to:

  • know how the decision was made (i.e. you are entitled to an explanation of the logic behind the mechanism used);
  • disagree with the result of this decision (eg. with the fact that you were denied a credit because of a “wrong” scoring result);
  • demand human intervention (eg. a person that you can talk to should verify how the decision was made and whether the result is fair).