When your personal info has not been received directly from you but from Yet another source, you need to receive the same details as earlier mentioned (aside from the proper to withdraw your consent). The eu Information Security Board delivers suggestions on the applying from the GDPR. Details safety authorities https://nathanlabsadvisory.com/supply-chain-security/