- Right to Consent: Individuals must give explicit consent before their data is collected and used for email marketing. - Right to Access: Individuals have the right to access the personal data that a business holds about them. - Right to Rectification: Individuals can request corrections to inaccurate or incomplete data. - Right to Erasure: Also known as the 'right to be forgotten,' individuals can request the deletion of their data. - Right to Restrict Processing: Individuals can limit how their data is used. - Right to Data Portability: Individuals can request their data in a commonly used format to transfer it to another service.