Your right of access

What is the right of access?

You have the right to ask our organisation (Originmaler) whether or not we are using or storing any of your personal information. If we store any of your personal informationt you can ask for copies, verbally or in writing.

This is called the right of access and is commonly known as making a subject access request or SAR.

This guide explains how to make a subject access request.

Why make a subject access request?

You can make a subject access request to find out:

what personal information we hold about you;

how we are using it;

who we share it with; and

where do we got your data from.

This information can also help you exercise your other information rights effectively.

What should your request say?

Do include:

a clear label for your request (eg use ‘subject access request’ as your email subject line or a heading for your letter);

the date of your request;

your name (including any aliases, if relevant);

any other information used by us to identify or distinguish you from other individuals (eg user account number or client number);

your up-to-date contact details;

a comprehensive list of what personal data you want to access, based on what you need;

any details, relevant dates, or search criteria that will help us to identify what you want; and

how you would like to receive the information (eg by email or account settings).

Don’t include:

other information with your request;

threatening or offensive language.

What should your request look like?

You could use our subject access request template as a guide, adding exactly what information you are asking for:

[Your Acount Name]
[Your email address]
[The date]

Dear Originmaler
Subject access request
[Include your name and other relevant details on how would you like to be approached and called].

Please supply the personal data you hold about me, which I am entitled to receive under data protection law, held in:

[Give specific details of where to search for the personal data you want,
for example:

your account file;

your account history payments

application history;

...

any other data stored in our database including encrypted data;

]

If you need any more information, please let me know as soon as possible.
Yours faithfully
[Signature]

How long does it take to respond?

We have an obligation to respond to your request within one month.

If you have made a number of requests or your request is complex, we may need extra time to consider your request and we can take up to an extra two months to respond.

We will let you know within one month if we need more time and why.

Can we charge a fee?

In most circumstances, we give you a copy of your personal information free of charge.

However, we can charge a reasonable fee to cover administrative costs – if we think your request is ‘manifestly unfounded or excessive’.

We can also charge a fee if you ask for further copies of your information following a request.

If we charge a fee, the one-month time limit does not begin until we received the fee.

What should we send back to you? When we responds to your request, we should normally tell you whether or not we process your personal information and, if we do, we will give you copies of it.

Will I always receive everything you asked for?

Not always. Depending on the circumstances:

you may receive only part of the information you asked for; or

we may not provide you with any personal information at all.

We can refuse to comply with your subject access request if we think it is ‘manifestly unfounded or excessive’.

There can be other reasons why you may not receive all the information you expect, such as when an exemption applies, or the type of information you asked for is not covered by a subject access request.

Originmaler ™