Secondly, given that an average user is not even aware of this processing taking place, it is practically impossible for him to exercise rights that are granted to him by the Directive, such as the right of access (art.
the first case -processing one's own data -does not seem to raise any particular concerns as far as the lawfulness is concerned.