Rights of Data Subjects

The data subject has the following rights:

  • of information : The data subject has the right to obtain confirmation from the controller that personal data concerning him are or are not processed and, where available, access to such personal data;
  • of rectification : The data subject has the right to obtain from the data controller, as soon as possible, the correction of inaccurate personal data concerning him. The data controller has the obligation to notify the correction to the data subject;
  • of deletion: The data subject has the right to obtain from the data controller the deletion, as soon as possible, of personal data concerning him and the data controller has the obligation to erase this personal data as fast as he can. The data controller has also the obligation to notify the deletion to the data subject;
  • of portability: Data subjects have the right to receive personal data concerning them which they have provided to a data controller in a structured, commonly used and machine-readable format and have the right to transmit this data to an other data controller without being hindered by the previous data controller;
  • to limitation of treatment: the data subject has the right to obtain from the processor a limitation of the processing when the accuracy of the data is disputed, the processing is unlawful, the data is no longer needed by the processor or the individual opposed to treatment
  • of objection: The data subject has the right to object at any time, for reasons relating to his particular situation, to the processing of personal data concerning him.

According to article 48 of law “Informatique et libertés” modified by article 63 of the Digital Republic Act, the data subject is informed, except where it has been previously done, by the processor or his legal representative of his right to give instruction concerning the use and disclosure of his data after his death. This article also extends the right of deletion. The processor has to delete as soon as possible, when asked by the data subject or his legal representative, the personal data collected as part of the information society service offer when the data subject was a minor at the time of collection.

 

Please visit: https://www.cnil.fr/fr/reglement-europeen-protection-donnees/chapitre3