Data access request

What the Law requires

1. 01A reply on time. Information on the action taken is provided without undue delay and in any event within one month of receipt of the request. That period may be extended by two months where necessary, taking into account the complexity and number of the requests; the person is informed of the extension and the reasons for it within one month of receipt of the request. art. 12
2. 02A full picture of the data you hold. The person has the right to confirmation of the processing, to access to the data and to information such as the purposes, the categories of data, the recipients and the storage period. Without knowing where his or her data are, you cannot reply in full. art. 15
3. 03A copy provided free of charge. The first copy of the data is provided free of charge; for further copies you may charge a reasonable fee based on administrative costs. The copy must not adversely affect the rights and freedoms of others. art. 12 art. 15
4. 04A reason for any refusal. If you do not act on the request, inform the person, without delay and within one month, of the reasons and of the possibility of lodging a complaint with the National Centre for Personal Data Protection and of bringing an action before a court. A manifestly unfounded or excessive request may be refused or charged for, but the burden of demonstrating that character lies with you. art. 12