What rights do data subjects have in different situations?

Not all of the rights of the data subject can be exercised in all situations, depending on factors such as the basis for the processing of personal data.

Some of the rights of the data subject are only related to specific bases for processing provided for in the GDPR. The controller must base the processing of personal data on a legal basis for processing.

It is possible to refuse to fulfil any of the rights in individual cases if there is a basis for refusal relevant to the right in question or the conditions for fulfilling the right are otherwise not met. In addition, special legislation concerning the organisation in question may provide for exceptions to the rights.