Legal framework and regulations related to digital identity and privacy

How can you exercise your rights guaranteed under the General Data Protection Regulation (GDPR) and the Act on the Implementation of the General Data Protection Regulation?

More information is available on the AZOP website: Source.

• Right of access to personal data – Article 15
• Right to rectification of personal data – Article 16
• Right to erasure of personal data (“right to be forgotten”) – Article 17
• Right to restriction of processing of personal data – Article 18
• Right to object – Article 21
• Right to data portability – Article 20
• Right related to automated individual decision-making, including profiling – Article 22
• Obligation to report a personal data breach – Organisations must report a personal data breach to the supervisory authority and, where applicable, to affected individuals within 72 hours. To exercise your rights, you should contact the company or organisation that processes your personal data, i.e., the data controller or processor.

If the data controller does not comply with your request and you believe that your right to the protection of personal data has been violated, you may contact the Croatian Personal Data Protection Agency (AZOP) and submit a request for the determination of a violation of your rights.