Article 20
Scope of the right
- Personal data that the data subject has disclosed to the controller are:
- a. data that the data subject has knowingly and voluntarily made available;
- b. data that the controller has obtained relating to the data subject and his or her behaviour while the data subject was using a service or device.
- Personal data that the controller has itself generated from its own evaluation of the personal data provided or observed are not deemed to be personal data that the data subject has disclosed to the controller.