The data subject shall have the right to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Having regard to the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Upon rectification or completion of personal data pursuant to paragraph 1, the controller shall, without undue delay, take all reasonable steps to ensure that the rectified or completed data are accurate and consistent across all systems and records under the controller's authority.
The controller shall communicate any rectification of personal data carried out in accordance with paragraph 1 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
Where the data subject contests the accuracy of the personal data but the controller considers the data to be accurate, the controller shall not erase the contested data but shall clearly mark the data as contested and shall retain both the original data and the data subject's position regarding its accuracy until the matter is resolved.
The controller shall respond to a request for rectification without undue delay and in any event within thirty days of receipt of the request. Where the controller does not take action on the request, the controller shall inform the data subject without delay and at the latest within thirty days of receipt of the request of the reasons for not taking action and of the possibility of lodging a complaint with the competent supervisory authority and seeking a judicial remedy.