When Your own data has not been obtained directly from you but from Yet another source, you have to obtain the exact same facts as higher than (other than the correct to withdraw your consent). Read about the rights you have in excess of your individual info underneath the GDPR, https://nathanlabsadvisory.com/ensure-data-privacy-and-security-with-hipaa-compliance-services-in-the-usa/