GDPR Article 15 — Right of access by the data subject
Article 15(1) — Access and information
The data subject has the right to obtain confirmation whether personal data are being processed and, where that is the case, access to the data and information about purposes, data categories, recipients, storage periods, rights, complaints, data sources, and automated decision-making.
Article 15(1)(b) — Categories of personal data
The information provided shall include the categories of personal data concerned.
Article 15(1)(c) — Recipients
The information provided shall include the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations.
Article 15(1)(g) — Data source
Where personal data are not collected from the data subject, the information provided shall include any available information as to their source.
Article 15(1)(h) — Automated decision-making
The information provided shall include the existence of automated decision-making, including profiling, and meaningful information about the logic involved, the significance, and envisaged consequences for the data subject.
Article 15(2) — Transfer safeguards
Where personal data are transferred to a third country or an international organisation, the data subject has the right to be informed of the appropriate safeguards under Article 46.
Article 15(3) — Copy and electronic format
The controller shall provide a copy of the personal data undergoing processing. Where the request is made electronically and unless otherwise requested, the information shall be provided in a commonly used electronic form.
Article 15(4) — Rights and freedoms of others
The right to obtain a copy shall not adversely affect the rights and freedoms of others.