GDPR data

Answer:

The personal data itself belong to the individuals (data subjects) and this is why the EU GDPR grants individuals extended rights as regard to their personal data.

The controllers only process the personal data for specific purposes using one of the six legal grounds for processing: consent, contract obligation, legal obligation, vital interests, public interest, and legitimate interest.

You can find out more about more about the individuals rights and legal basis for processing from our articles: “8 data subject rights according to GDPR “ https://advisera.com/eugdpracademy/knowledgebase/8-data-subject-rights-according-to-gdpr// and “Is consent needed? Six legal bases to process data according to GDPR” https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/