SUMMARY - Right to Access and Control Your Data
A person exercises their GDPR right to access and receives a 300-page PDF containing raw data exports they cannot understand, database field names without context, and no explanation of how information has been used. Another person requests deletion and receives confirmation their data has been removed, then discovers the company retained information under exemptions for legal compliance, fraud prevention, and legitimate business interests that were never explained.