How to obtain information regarding your data processing?
Request to data user
You have the right to request the following information from the person or institution operating the particular database or register in which your personal data has been included:
- the kind of data that has been collected about you
- the person or entity to which the information has been disclosed
- the purpose, legal basis and method for the processing of your data
Read more about access to your personal data.
Appeal to Data Protection Inspectorate
If the particular authority or person has refused to provide you with the information requested, you have the right to appeal to the Data Protection Inspectorate. In your application, you should indicate:
- the kind of action that you expect from the authority or person
- if possible, the relevant provisions of the which have been violated
- arguments as to why the authority or person should have fulfilled your request
- and include relevant documents that substantiate your opinion, if there are any
Appeal to Administrative court
If you are not satisfied with the decision taken by the Data Protection Inspectorate, you can challenge the decision in the Administrative court and in addition, ask for compensation due to the refusal of the Data Protection Inspectorate. You can learn more about how to prepare your application and other requirements too in the Code of Administrative Court Procedure.
The Administrative court will assess whether the data user has acted lawfully and, if necessary, may oblige the Data Protection Inspectorate to order the data user to provide access to information regarding your personal data which has been included in the data base or register. The court may also order compensation if you have requested it.