On January 28th, we will celebrate the European Data Protection Day for the fifth time. This date was not chosen by accident. 30 years ago, on this very day, the oldest international legal act regulating issues related to personal data protection was adopted, namely the Council of Europe Convention 108 of January 28, 1981, for the Protection of Individuals with regard to Automatic Processing of Personal Data. In Poland, Data Protection Day will be celebrated on January 31st. An Open Day will be organized at the GIODO Office on that occasion.
Your rights
You have the right to control your personal data, which you can exercise, among other things, by requesting information regarding the processing of your data.
You may request the completion, updating, rectification of personal data, temporary or permanent suspension of their processing, or their deletion if they are incomplete, outdated, untrue, or have been collected in violation of the law, or are no longer necessary for the purpose for which they were collected.
You may object to the data controller regarding the use of your data for marketing purposes or their transfer to another data controller. This right does not apply when your data is processed based on consent, a specific legal provision, or in connection with the performance of a contract concluded with the controller.
You may request the controller to cease the processing of your personal data, justifying the request with your particular situation. This right does not apply when your data is processed based on consent, a specific legal provision, or in connection with the performance of a contract concluded with the controller.
Powers of the Inspector General for Personal Data Protection
In the event of a violation of personal data protection regulations, they may, among other things, order:
-
the removal of irregularities;
-
the completion, updating, rectification, disclosure, or non-disclosure of personal data;
-
the application of additional security measures for the collected personal data;
-
the suspension of the transfer of personal data to a third country;
-
the securing of data or their transfer to other entities;
-
the deletion of personal data.
In the event of finding that the act or omission of the head of an organizational unit, their employee, or another natural person acting as a data controller constitutes a crime defined in the Act, the Inspector General shall submit a notification of the commission of a crime to the authority appointed to prosecute crimes, attaching evidence documenting the suspicion.
The article comes from the Dziennik Internautów website.