When your own info hasn't been obtained straight from you but from another resource, you need to get precisely the same facts as earlier mentioned (apart from the appropriate to withdraw your consent). Examine the rights you have got in excess of your personal details under the GDPR, tips on https://nathanlabsadvisory.com/soc-2/