Privacy Management
Data Subject Rights as a Core Obligation.
Structured process for handling data subject requests per GDPR Art. 15-21 with deadline tracking.
Rights Overview
Right to Access (Art. 15)
Data subjects have the right to obtain confirmation of processing and access to their data.
Right to Rectification (Art. 16)
Data subjects can request the correction of inaccurate personal data.
Right to Erasure (Art. 17)
Data subjects can request deletion of their data under certain conditions.
Right to Restriction (Art. 18)
Data subjects can request restriction of processing under certain conditions.
Right to Data Portability (Art. 20)
Data subjects can receive their data in a structured, commonly used format.
Right to Object (Art. 21)
Data subjects can object to processing for direct marketing or legitimate interests.
Process
- Receipt and verification of the request
- Classification of the right and applicable deadline
- Collection of relevant data from all systems
- Review and redaction (if applicable)
- Provision/response within the deadline (max. 1 month, extendable)
- Documentation and file closure