Document summary
This page explains available rights, identity verification, target timing, exceptions, appeals, and the records kept when a request is completed.
Rights
Subject to legal conditions, rights include being informed, accessing data, obtaining a clear readable copy, correction, completion, updating, destruction, consent withdrawal, and other rights granted by law.
Submit a request
Use the dedicated data rights form. State the right, service, account or project, and approximate period. Do not send passwords, verification codes, or a full identity document before we provide a specific secure method.
Identity and authority verification
We use a method proportionate to request sensitivity, such as an account email, re-authentication, or authority evidence. We do not request more data than needed. Verification material is separated from the response file and access is restricted.
Time and updates
Timing starts when the request is received. We target completion within 30 days and conduct information gathering and identity verification during this period without restarting it. If a legally permitted extension ground applies, such as unexpected or unusual additional effort or multiple requests, we notify you before the deadline with reasons and the new date, limited to 30 additional days.
Search across systems
The request record maps systems that may hold data, such as accounts, Council, support, clients, files, and backups. Each system owner records the search outcome and what was included or excluded and why.
Access and copy
We provide data in an understandable, secure format. Other people’s rights, trade secrets, and internal privileged notes are protected. If material is withheld, we explain its category and reason without exposing protected information.
Correction and destruction
The source is corrected and the result is propagated to relevant operational copies. For destruction, we identify deleted or anonymized records and retained records with reason and period. Final deletion does not occur before obligation and legal-hold review.
Consent withdrawal
Withdrawal stops future processing based on consent. It does not invalidate prior lawful processing or prevent processing based on an independent basis such as contract or legal obligation. Withdrawal time and notice version are recorded.
Refusal or limitation
If a request cannot be completed in full or in part, we explain the decision, basis, affected categories, and appeal route. A response does not rely on a vague legal-requirements statement without identifying the obligation type where permitted.
Escalation and complaint
Start an internal review using the request number and disputed part. The same person does not review their own decision where another reviewer is available. You retain rights to contact the competent authority or use lawful remedies.
Official references
References used to prepare this content
Links point to official legal or guidance sources. Applicability depends on the organization, product, and contract.
Versions
Change log
- Version 1.0.0
Published the first operational version with clear scope, responsibilities, rights, and escalation routes.