EXERCISE OF DATA PROTECTION RIGHTS