Can anyone help on how I can answer this question? I was thinking of using the right for erasure and right to object but not sure how I would use this for the problem.

Imagine that you are working for a marketing company that collects people's personal data in exchange for allowing them to log in to Wi-Fi hotspots that your company supplies. Their data is processed using a machine-learning algorithm that tries to work out what sorts of advertisements are most suitable to present to each user of the Wi-Fi system. Your company sells targeted marketing to other companies delivered to that person. UK GDPR gives people whose data is being collected a set of rights. Give two subject rights (not principles) that you think are relevant in this scenario and would need to be carefully considered. For each of the subject rights you give: explain how it impacts upon this scenario; describe any particularly interesting challenges you see in ensuring you do not violate this right; and describe how the right might be safely worked around by your company. (10 Marks]