...
These are the rights provide for in the GDPR and in the Convention 108+.
Subject Access
Rectification
Erasure
Restrict Processing
Object
Automated Individual Decision Making: Processing and Profiling
Recital 67 and 68 - GDPR
In automated filing systems, the restriction of processing should in principle be ensured by technical means in such a manner that the personal data are not subject to further processing operations and cannot be changed. The fact that the processing of personal data is restricted should be clearly indicated in the system.
...