My rights

The state supervisory body for personal data protection (Information Commissioner) must allow everyone to examine the Register of personal databases and to copy its contents. The examination and copying must, as a rule, be allowed on the same day and at the latest in 8 days, or it shall be deemed that the request was denied.

The personal data controller must on an individual's request:

1. enable the examination of the personal database's catalogue;
2. confirm whether the data in connection with an individual is or is not being processed, and enable the individual examination thereof, as well as its transcription or copying;
3. transmit a copy of personal data, contained in the personal database, referring to the individual;
4. transmit a list of users, the data was transmitted to, when, on which legal grounds and for what purpose;
5. give information on sources, on which the database entries referring to an individual are based, and on the method of processing;
6. give information on purpose of processing and type of personal data being processed, as well as all necessary pertaining explanations;
7. explain technical or logically-technical decision procedures in case automated decision-making of an individual's data is being performed.