You have the right to have an entity confirm if it processes your personal data. If it does process them, you have the right to access and know the following information:
- The purposes of the processing, the categories of personal data they process, and the recipients or categories of recipients to whom the data has been conveyed or will be conveyed.
- The expected retention period of the personal data or the criteria used to determine it.
- The right to request from the data controller entity the rectification or deletion of the data, the limitation of the processing or the right to oppose it.
- The right to submit a claim to the competent control authority, such as the APDCAT.
- The source of the data, when they have not obtained it from you.
- The existence of automated decisions, including profiling, the logic applied and the consequences of this processing.
- In the case of international data transfers, the appropriate guarantees offered to you.
In addition, the right of access allows you to obtain a free copy of your processed data. For subsequent copies, a fee may be applied based on administrative costs. It must be said that you can be denied a copy if it infringes upon the rights of third parties. If you make the request by electronic means, you have the right to receive the information in this same format.
Highlights