To Q10:
Data subjects have the right to be informed about how data is being processed.
Data subjects have the right to obtain confirmation that their data is being processed and access their personal data.
Data subjects can recify their personal data if it is inaccurate or incomplete.
This is an individual's right to be forgotten (i.e. their right to ask for their personal data to be erased)
Data subjects have the right to restrict any component of data processing (collecting, holding, storing, transmitting and sharing)
Data subjects have the right to object to personal data being processed completely.
Data subjects have the right to move their personal data from one data processor/controller to another.
If a decision is based on automated processing or profiling, data subjects have the right to ask for manual intervention or challange the automated decisions.