Data subjects have rights upon their personal data: right of access (Article 15), of rectification (Article 16), of erasure (Article 17) and objection (Article 21), right to the restriction of processing (Article 18), right to data portability (Article 20), right not to be subject to an automated individual decision (Article 22).
According to Article 28 of the GDPR, to the extent possible, the processor must assist the controller in fulfilling its obligation to answer within one month requests of data subjects exercising their rights.