What is the Right of Access
The right of access allows EU citizens to verify the processing of their personal data. This is a nearly absolute right of citizens (with exceptions only in cases established by Article 23 — national and public security interests, etc.).
Every EU citizen has the right to know and be informed about:
the purposes of processing,
the categories of personal data concerned,
the recipients to whom personal data have been or will be disclosed,
the period for which personal data will be stored,
the right to request from the controller the rectification or erasure of personal data and the right to object,
the right to lodge a complaint (with a supervisory authority),
all available information about the source of the personal data,
the fact that automated decision-making is taking place, including profiling.
How to enter a Right of Access request in Flexi
Let's now walk through our example of creating a request for the right of access to personal data.
Open the Requests register in the GDPR module.
In this case, it is important to specify the request type as Right of Access to Personal Data.
The maximum time allowed to resolve the request may vary; in this example, 1 month is indicated.
Next, specify the subject from the address book who submitted the request, and the person within your company who is handling it.
Additional information such as Circumstances, Note, Communication, and Attachments is not mandatory, but we recommend including it in case you need to provide evidence to the personal data protection authority.