You have the right to know what will happen with your data
You should know who, on what ground and why is processing your personal data. The company or institution that has obtained your data should inform you about it. It is also obliged to indicate your GDPR rights. You have the right, among others to: access your data, rectification, erasure, limitation of processing, portability, objection or the right to be informed about automated decision making, including profiling. In performing the information obligation, the controller must indicate how long it will store your data and provide the contact details of the Data Protection Officer (DPO), if the DPO has been designated.