“The data subject has a legal and inalienable right to know if their data is being processed. In other words, in a case where we can’t remember if we have registered with a company (a very common case in the digital age), we have the right to ask the company to confirm that some kind of processing of personal data is taking place.”