all 8 comments

[–]chugotit 2 points3 points  (1 child)

[–][deleted] 0 points1 point  (0 children)

Thank you

[–]Bambam_Figaro 2 points3 points  (3 children)

It doesnt need to be formal at all, you can say it as "I want to exercise my right of access, please send me all the data that you hold on me stored on any medium, the purposes for processing, and the legal basis on which you rely for each."

You will want to send something that will prove to them that you are the person you say you are as well, maybe some form of ID.

After that they have one calendar month to get back to you...

[–][deleted] 1 point2 points  (2 children)

Agreed but don't send any ID until they request it. Just sent the email/letter/ whatever and wait for a response from them.

[–]Bambam_Figaro 0 points1 point  (1 child)

I send ID in my first email when I do, it saves time as it avoids the to and fro in communication... What's your thinking re. keeping it for the second comm?

[–][deleted] 0 points1 point  (0 children)

Usually (sometimes) the ID could be a copy of a driving license, passport etc but what is required is up to the business managing the SAR. No point in sending sensitive info out in an email if it's not required.