Article 4 paragraph 1 GDPR:
”Data subject: an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;”
Based on the considerations, we can state that the data subject regains control over his or her personal data.
Rights of the data subject (Article 12 et seq. GDPR) are far-reaching. The rights of the data subject create obligations for the controller and (sub)processors (Article 24 et seq. GDPR).
The data protection officer (DPO) is the first point of contact for the data subject (Article 37 et seq. GDPR).
