As foreseen by article 15 of the Regulation, the interested party can access their personal data, request their correction and updating, if incomplete or incorrect, request their cancellation if the collection took place in violation of a law or regulation, as well as oppose to the processing for legitimate and specific reasons.
In particular, we list below all the rights that can be exercised, at any time, towards the data controller and / or the joint data controllers:
Right of access: the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain from the data controller confirmation that personal data is being processed or not and, in this case, to obtain access to such personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations; d) when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the personal data are not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, of the Regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of this treatment for the interested party. All this information can be found in the information that will always be available in the Privacy section of each of the websites.
Right of rectification: right to obtain, pursuant to Article 16 of the Regulation, the rectification of personal data that are inaccurate, taking into account the purposes of the processing, moreover, it is possible to obtain the integration of personal data that are incomplete, also by providing an additional declaration.
Right to cancellation: right to obtain, pursuant to Article 17, paragraph 1 of the Regulation, the cancellation of personal data without undue delay and the data controller will have the obligation to cancel your personal data, if there is even only one of the following reasons: a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) you have revoked the consent on which the processing of your personal data is based and there is no other legal basis for their processing; c) the interested party has opposed the processing pursuant to Article 21, paragraph 1 or 2 of the Regulation and there is no longer any legitimate overriding reason to proceed with the processing of personal data; d) the personal data have been unlawfully processed; e) it is necessary to delete personal data to fulfill a legal obligation provided for by a community standard or internal law. In some cases, as required by article 17, paragraph 3 of the Regulation, the data controller is entitled not to delete your personal data if their processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the ascertainment, exercise or defense of a right in court.
Right to limit the processing: right to obtain the limitation of processing, pursuant to Article 18 of the Regulation, in the event that one of the following hypotheses occurs, the interested party: a) has contested the accuracy of his personal data (the limitation will last for the period necessary for the data controller to verify the accuracy of such personal data); b) the processing is unlawful but you have opposed the cancellation of your personal data, requesting, instead, that its use be limited; c) although the data controller no longer needs it for processing purposes, personal data are used to ascertain, exercise or defend a right in court; d) has opposed the processing pursuant to Article 21, paragraph 1, of the Regulation and is awaiting verification of the possible prevalence of the data controller's legitimate reasons with respect to his own. In case of limitation of the processing, personal data will be processed, except for conservation, only with the consent or for the ascertainment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest.
Right to data portability: right to request and receive, in accordance with Article 20, paragraph 1 of the Regulation, at any time, all personal data processed by the data controller and / or by the joint data controllers in a structured, user-friendly format common and legible or request its transmission to another data controller without
