Request for the exercise of rights
(for personal data protection)
INFORMATION NOTE
The Data Controller, following the above request, provides the actions without delay and with a maximum duration of one month from the receipt of the request, after first evaluating the legal basis of the request.
This deadline may be extended by two additional months, if necessary, taking into account the complexity of the request and the number of requests. The data controller informs the data subject of this extension within one month of receiving the request, as well as the reasons for the delay. If the data subject submits the request electronically, the information is provided, if possible, electronically, unless the data subject requests otherwise.
If the data controller does not act on the data subject’s request, the data controller informs the data subject, without delay and no later than one month from the receipt of the request, of the reasons for not acting and the possibility of lodging a complaint with a supervisory authority and exercising judicial remedies.
If the data subject’s requests are manifestly unfounded or excessive, especially due to their repetitive nature, the data controller may either impose a reasonable fee, taking into account administrative costs for providing the information or communication or taking the requested action, or refuse to comply with the request.
The data controller may request additional information necessary to confirm the identity of the applicant.