The rights of a data Subject versus the responsibilities of a data controller