The General Data Protection Regulation (AVG) gives you more privacy rights. This gives you more control over what an organization knows about you.
Privacy rights under the AVG
Under the AVG, you have the following privacy rights.
The right of inspection
This is the right to see the personal data that organizations process about you.
The right to rectification and supplementation
This is the right to change the personal data that organizations process about you.
The right to oblivion
You have the right to have certain outdated or inaccurate privacy-sensitive information removed by personal data processors.
The right to data portability (also known as data portability)
This means that you have the right to receive the personal data that an organization processes about you. You can then store this data yourself for personal (re)use or pass it on to another organization. The purpose of this right is to empower you and give you more control over your data.
The right to restrict processing
You have the right to ask organizations to process less personal data about you.
You also have the right to be safeguarded from automated use of your personal data and decisions about it without human intervention. This means that you have the right to have an employee evaluate your data and make a decision about it. Thus, a credit application submitted online should not be automatically denied.
The right to object
You have the right to object to the processing of your personal data.
Execute request within 1 month
Organizations are obliged in most cases to carry out your request within 1 month and also to let you know within 1 month that this has been done. Unless they are not required by the AVG to comply with your request. But even then they must let you know within 1 month.
Execute request within 3 months
In exceptional cases, an organization may respond to your request within 3 months. For example, when a request is very complex. Or if there is a large number of requests. But even then, they must let you know within 1 month that they need more time to carry out the request.
Source: https://www.rijksoverheid.nl/onderwerpen/privacy-en-persoonsgegevens/vraag-en-antwoord/hoe-versterkt-de-algemene-verordening-gegevensbescherming-avg-mijn-privacyrechten , accessed January 27, 2025.