Rights of the data subject
“Effective protection of personal data throughout the Union requires the strengthening and setting out in detail of the rights of data subjects...”. This sentence from Recital 11 [External] of the GDPR explicitly points to an essential objective to be achieved by the data protection law. In order to meet this requirement, HHU has set up the Data Protection Information and Complaints Office in the Legal Unit of the university, to which you can contact with your concerns.
In addition to the general information obligations set out in Article 13 [External] and Article 14 [External] of the GDPR, data subjects’ rights include the following rights:
- Right of access by the data subject (Article 15 GDPR [External])
- Right to rectification (Article 16 GDPR [External])
- Right to erasure (Article 17 GDPR [External])
- Right to restriction of processing (Article 18 GDPR [External])
- Right to data portability (Article 20 GDPR[External])
- Right to object (Article 21 GDPR [External])
- Right not to be subject to an automated individual decision (Article 22(3) GDPR [External])
- Right to withdraw consent (Article 7(3) GDPR [External])
It is essential that Article 12 of the GDPR [External] contains basic requirements for the controller in the perception of the data subjects: Transparency, comprehensibility and the timely accessibility of the information are required.