An individual has the right to receive confirmation that their data is being processed, access to their personal data and supplementary information which means the information which should be provided in a privacy notice. We will not charge a fee. We will ensure that we respond without delay, and within 40 calendar days of receipt. We endeavour to provide data subjects access to their information in commonly used electronic formats. If complying with the request is complex or numerous, the deadline can be extended by two months, but the individual must be informed within one month. Approval from the DPO must be obtained before extending the deadline.
We can refuse to respond to certain requests, and can, in circumstances of the request being manifestly unfounded or excessive, charge a fee. If the request is for a large quantity of data, we can request the individual specify the information they are requesting. This can only be done with express permission from the DPO.
Once a subject access request has been made, you must not change or amend any of the data that has been requested. Doing so is a criminal offence.
Details of the specific information you require and any relevant dates, for example:
- Your personnel file;- Supplier contact details- Customer contact details- Emails between ‘A’ and ‘B’ (between 1/6/11 and 1/9/11);
This form is not compulsory and is simply one way to submit a Data Subject Access request . We we will accept any request in writing, whatever the format, as a valid request. If you prefer to write then please send this to: firstname.lastname@example.org or send a hard copy to Appsbroker Consulting Ltd, Appsbroker House, Dammas Lane, Old town, Swindon, SN1 3EB for the attention of Appsbroker Compliance Team. If you are unable to make a subject access request in writing we will consider making a reasonable adjustment under the Equality Act 2010 and would ask you to contact us through any of the channels above or call us on 01793 391 420. We are asking for details set out in the form in order to be able to respond to a Data Subject Access request as required and within the 40-day period. There may be circumstances where we need to verify the identity of an individual if they are not known to us.