The right to obtain information on the processing of personal data

Data subjects have the right to be informed of the collection and processing of their personal data. The processing of personal data shall be done in a transparent manner.

Data subjects have to be informed of, among other things,

  • the purposes for which the data is being processed
  • the processing times of the data
  • to whom the data is disclosed and
  • the rights of the data subject.

The information on processing must be provided in a concise, transparent, intelligible and accessible from and be presented in clear and plain language. This is particularly important if the information is addressed specifically to a child.

The contents and dates of these notifications are partially tied to the source of the data. If the data is collected from the data subjects, the information on processing must be provided in connection with collecting the data. On the other hand, if the data is not obtained directly from the data subject, the information must be provided within a reasonable time and no later than in one month after the data was obtained.

In certain cases, data subjects do not have to be informed of the processing of their personal data. This is the case when, for example, the data was not obtained from the data subject and the collection or disclosure of the data is specifically provided for in legislation applied to the controller, in which appropriate measures for protecting the legitimate interests of the data subject are confirmed.

Read more:

Inform data subjects about processing
GDPR: Articles 12, 13 and 14