The GDPR gives data subjects the right to access personal information held about them by the Institute. The purpose of a subject access request is to allow individuals to confirm the accuracy of personal data and check the lawfulness of processing, to allow them to exercise rights of correction or objection if necessary. However, individuals can request to see any information that Institute of Technology Tralee holds about them which includes copies of email correspondence referring to them or opinions expressed about them.
Data subjects have a number of rights under GDPR. These include:
Right of Access;
Right to Rectification;
Right to Erasure (sometimes referred to as the Right to be Forgotten);
Right to Restriction of Processing;
Right to Data Portability;
Right to Object to Direct Marketing;
Right to Object to Automated Decision Making, including Profiling.
Any requests made to invoke any of the rights above must be dealt with within one month of receiving the request.
Further information on your rights can be accessed at the website of the Data Protection Commissioner at https://www.dataprotection.ie/en/individuals