– Subject access – To have inaccuracies corrected – To have information erased – To object to direct marketing – To restrict the processing of their information, including automated decision-making – Data portability