How to obtain information regarding your data processing?
Request to data user
You have the right to request the following information from the person or institution operating the particular database or register in which your personal data has been included:
- the kind of data that has been collected about you
- the person or entity to which the information has been disclosed in at least the last year
- the purpose and legal basis for the processing of your data
Read more information regarding access to your personal data.
Appeal to State Data Protection Inspectorate
If the particular authority or person has refused to provide you with the information requested, you have the right to appeal to the State Data Protection Inspectorate.
In your application, you should indicate:
- the kind of action that you expect from the authority or person
- if possible, the relevant provisions of the General Data Protection Regulation or the Law on Legal Protection of Personal Data which have been violated
- arguments as to why the authority or person should have fulfilled your request
- and include relevant documents that substantiate your opinion, if there are any.
Appeal to Administrative court
If you are not satisfied with the decision taken by the State Data Protection Inspectorate, you should challenge the decision in a regional administrative court, you can also ask for compensation due to violation of your right to access your data. You can learn more about how to prepare your application in the Law on Administrative Proceedings.
The regional administrative court will assess whether the data user has acted lawfully and, if necessary, may oblige the State Data Protection Inspectorate to order the data user to provide access to information regarding your personal data which has been included in the data base or register. The court may also order compensation if you have requested it.