The GDPR grants data subjects a number of rights that ensure transparency and control over their personal data. The module "Granting the rights of data subjects" in Anyva supports controllers in implementing these rights in a timely, comprehensible and complete manner - even with complex organisational structures and a large number of processing activities.

Central rights under the GDPR - such as Information (Art. 15), Rectification (Art. 16), Cancellation (Art. 17), Restriction of processing (Art. 18), Data portability (Art. 20) and Objection (Art. 21) - are mapped in Anyva using structured processes and templates. Enquiries from data subjects can be recorded, classified and processed in accordance with the law.

A special focus is on:

• Traceability and deadline controlin order to comply with the statutory response obligations.

• Link to the record of processing activitiesto automatically determine where data is processed.

• Documentation of all measuresincluding feedback to the data subject, internal review steps and technical implementations.

• Risk assessment for information or deletionespecially in the case of sensitive data or competing legal bases.

The module is fully embedded in Anyva's data protection management and can optionally be linked to vulnerability management and the DPIA, e.g. if enquiries provide indications of possible deficits. Integration into the platform ensures legally compliant, auditable and resource-efficient processing.