Chapter 3 - 45 Right of Access

Data subjects must be informed that their data are being processed and who the data controller is. Of course, if you have sent or given some information to a data controller such as your credit card details on the Internet, then the data controller does not have to inform you that your data are being processed because you already know and you know the name of the data controller. Providing details carries the assumption that you want the details processed – otherwise, why would you have provided them? Obtaining your personal data is called a ‘subject access request’.