GDPR rights are not “principles” in the Article 5 sense, but they are the practical human-facing counterpart: the enforceable rights that make the principles bite in real life - ico.org.uk 
- edpb.europa.eu
- Right to be informed: you can obtain clear information about how and why your personal data is processed - ico.org.uk .
- Right of access: you can obtain access to the personal data held about you, typically via a subject access request - ico.org.uk .
- Right to rectification: you can ask for incorrect, inaccurate, or incomplete personal data to be corrected - ico.org.uk .
- Right to erasure: you can request that personal data be erased in certain situations, such as when it is no longer needed or processing is unlawful - ico.org.uk .
- Right to restriction of processing: you can request the restriction of processing in specific cases, as an alternative to deletion while a dispute is resolved - ico.org.uk .
- Right to data portability: you can receive your personal data in a machine-readable format and transmit it to another controller, in the situations where the right applies - edpb.europa.eu .
- Right to object: you can object to processing for direct marketing and, in some cases, object on grounds relating to your particular situation - edpb.europa.eu .
- Rights in relation to automated decision-making and profiling: you can request protections around solely automated decisions that have legal or similarly significant effects, including a right not to be subject to such decisions in many cases - ico.org.uk .