Recital 68

(68) In order to gain greater control over their data through automated processing of personal data, the data subject should also be able to receive personal data concerning them that they have provided to the controller in a structured, commonly used, machine-readable and interoperable format and send it to another controller. Data controllers should be encouraged to develop interoperable formats that enable data portability. This right should apply in cases where the data subject has provided the personal data with his or her own consent or where the processing is necessary for the performance of a contract. It should not apply if the processing is based on a legal basis other than consent or contract. This right - due to its nature - should not be exercised against controllers who process personal data in the performance of public duties. Therefore, it should not apply in cases where the processing of personal data is necessary to comply with a legal obligation to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of public authority entrusted to the controller. The data subject's right to send or receive his or her personal data should not impose an obligation on controllers to maintain or implement technically compatible processing systems. If a specific set of personal data relates to more than one data subject, the right to receive personal data should not cause prejudice to the rights and freedoms of other data subjects under this Regulation. In addition, this right should be without prejudice to the data subject's right to have the personal data erased and without prejudice to the limitations on that right set forth in this Regulation, and should not, in particular, result in the erasure of personal data relating to the data subject that the data subject has provided for the performance of the contract, if and to the extent that the personal data are necessary for the performance of the contract. Insofar as technically possible, the data subject should have the right to have the personal data sent by one controller directly to another controller.

Receive a free package of 4 tutorials and 4 e-learning trainings
The controller of your data is ODO 24 sp. z o. o.
Recital 68 of the preamble to the GDPR | ODO 24