The Control by and Rights of the Data Subject Under the GDPR · Study