All data subjects are entitled to exercise rights of access, rectification, cancellation and objection regarding their personal data (collectively known as ARCO rights). These rights are not mutually exclusive.
Right of Access
The data subject is entitled to access its personal data held by the Data Controller, as well as information regarding the conditions and generalities of the processing.
Right of Rectification
Data subjects may request, at any time, that Data Controllers rectify personal data if it is inaccurate or incomplete.
Right of Cancellation
Data subjects have the right to cancel (i.e. seek erasure of) its personal data. There are certain situations where Data Controllers have the right to object to such erasure (e.g. if required by applicable law or public interest).
Right of Objection
Data Subjects may, at any time, oppose the processing of their personal data for legitimate purposes.