According to GDPR, data subjects have the right to access data, right to rectification, right to erasure, and the right not to be subject to automated decisions. Data subjects also have the right to restrict personal data processing and to request the deletion of the collected personal data, as well as the right to data portability and to reject profiling.