In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become

Data subject may request access to their information. The controller shall provide information in a concise, transparent, intelligible and easily accessible form, using clear and

Sensitive or special category data includes racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data

Data subjects must give their consent freely when controllers are processing their data. This can be done by a statement or by a clear affirmative