The General Data Protection Regulation (GDPR) regulates everybody operating within the European Union and the European Economic Area (even if non-European). GDPR Article 15 gives people the "right of access" to their personal information processed by digital platforms. These platforms must communicate with no delay many precious details regarding how they process personal data, such as purposes of processing, parties with whom data will be shared, and even the logic of their automated decision-making. In this workshop, participants will learn the best strategies for submitting Data Subject Access Requests and countermeasures for most common elusive replies. DSARs have often been used by the non-profit Tracking Exposed (tracking.exposed/), who foster digital rights and algorithm accountability. Also of great support is the presenters' Guardoni tool, which allows users to double-check if the information received matches that provided by digital platforms.