The General Data Protection Regulation contains rules that give the individual data subject, i.e. the person about whom information is processed, a number of rights vis-à-vis SDU:
When SDU processes personal information about data subjects, we must disclose a number of things ourselves, e.g. the purpose of the processing, the types of personal information processed and for how long the information will be processed.
The right to gain access to the personal information about you/the data subject processed by SDU.
The right to have incorrect/wrong personal information about you/the data subject corrected.
The right to have your personal information deleted/forgotten if a number of conditions are met – e.g. if the consent has been withdrawn or if the purpose of the processing is no longer relevant.
The right to data portability is about the data subject in certain cases having the right to receive his or her personal information and to request that the information be transferred from one data controller to another.
The right to object to the otherwise lawful processing of data if the person in question has compelling reasons not to have his or her data processed. If, for example, you want your name deleted from an examination list as you are particularly vulnerable due to a protected job function or other private matters.
The right not to be subject to a decision based solely on automatic processing, including profiling.
If you receive an enquiry in which the data subject wants to use his or her rights – or as a data subject you want to use them yourself – you must contact the Legal Office. Please remember that the words ‘right of access’ or ‘the right to rectification’ do not have to be mentioned explicitly. The text can easily say ‘What personal information does SDU process about me?’ or ‘I would like a copy of my case record. Would you please send it?”.
You can read more in the Danish Data Protection Agency’s guidance (in Danish).