Yes, they can. Enforcing those rights is more difficult if you wish to remain anonymous, but still possible.