(59) Procedures should be provided for facilitating the data subject's exercise of his or her rights under this Regulation, including mechanisms for requesting - and, when applicable, obtaining free of charge - in particular access to and rectification or erasure of personal data and the possibility of exercising the right to object. The controller should ensure that the relevant requests can also be made electronically, in particular when personal data is processed electronically. The controller should be obliged to respond to the requests of data subjects without undue delay - within one month at the latest, and if it does not intend to comply with such a request - to provide reasons for this.