It is the right of any interested party to obtain from the controller confirmation of whether their personal data are being processed, to access them and to obtain, in addition, the following information:
- The purposes of the treatment.
- The categories of personal data subject to processing.
- The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations.
- the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right of the data subject to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning him or her, or to object to such processing;
- The right to lodge a complaint with a supervisory authority
- When the personal data have not been obtained directly from the interested party, any available information about their origin.
- the existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and envisaged consequences of such processing for the data subject;
- When personal data are transferred to a third country or to an international organisation, the data subject has the right to be informed of the appropriate guarantees with which the transfers are made.
The right of access is considered granted when the person responsible for the treatment provides the interested party with a system of remote, direct and secure access to the permanent data that guarantees access to all of them, communicating the way to access it.
