Anyone’s whose personal data is collected and stored. They have legal rights protected under GDPR like: GDPR Right to Erase