Thank you for the question. You do have the right to refuse to share information and also the right erasure for the information that is held about you (although this is not an absolute right) there have been many questions about the track and trace feature, and GDPR, however there has not been a liable action found at this point. However if your information is being shared in a way it should not, then you can be perceived to be a "victim" of a GDPR breach. If a person’s data has been given to a third party then the are seen as the “victim” of a breach in association with GDPR. If the victim wanted to take formal legal action, they may do so under Article 77 of the GDPR. There is no need to show that financial losses have been suffered and compensation can be sought for mere distress caused by the alleged breach. The level of compensation will depend on the severity of the breach and the effects it has had on the victim.
I shall provide you with a helpful link that will assist you in finding a solicitor/representative near your local area. This will provide you with someone nearby your area who can assist you if required.
I hope this information proved helpful. You will find a local solicitor who deals with these matters on the law society webpage which is as follows;
Hopefully, I have answered your query in a way that is simple and easy to understand. If anything remains unclear, I will be more than happy to clarify it for you. In the meantime, thank you once again for using our services.
Should you require any further assistance on this matter, please do not hesitate to post a further questions for additional assistance.