Line 7: |
Line 7: |
| | | |
| Copies of my personal data | | Copies of my personal data |
| + | ========================== |
| | | |
| This request covers all my personal data including specifically all data belonging to each of the following categories: | | This request covers all my personal data including specifically all data belonging to each of the following categories: |
| | | |
− | 1. Volunteered data - data that I have explicitly shared with you | + | 1. Volunteered data - data that I have explicitly shared with you<br> |
− | 2. Observed data - data that you have collected about me and my activity through my use of the service or through interactions with your staff | + | 2. Observed data - data that you have collected about me and my activity through my use of the service or through interactions with your staff.<br> |
− | 3. Derived data - data you have created and stored about me as a result of analysis, processing or inspection of my data or service activity. | + | 3. Derived data - data you have created and stored about me as a result of analysis, processing or inspection of my data or service activity.<br> |
− | 4. Acquired data - data you have acquired from any external sources including e.g. credit checks, other users or advertiser’s lists. | + | 4. Acquired data - data you have acquired from any external sources including e.g. credit checks, other users or advertiser’s lists.<br> |
− | 5. Sharing & Handling data - all metadata and handling information (as detailed below) about who you have shared my data with, as well as copies of the specific data that has been shared, and details of how you have stored and handled and processed my specific data. | + | 5. Sharing & Handling data - all metadata and handling information (as detailed below) about who you have shared my data with, as well as copies of the specific data that has been shared, and details of how you have stored and handled and processed my specific data.<br> |
− | 6. Consents - where you rely on my consent to process my personal data, please provide details of those consents including when and by what means I gave consent, and the scope of that consent, and how I might change that consent if I wanted to. | + | 6. Consents - where you rely on my consent to process my personal data, please provide details of those consents including when and by what means I gave consent, and the scope of that consent, and how I might change that consent if I wanted to.<br> |
| | | |
| In particular, please make sure that all personal data you state in your privacy policy you collect, create, store or share is provided. Please also make sure to include data for which you remain controller that is held by third parties. | | In particular, please make sure that all personal data you state in your privacy policy you collect, create, store or share is provided. Please also make sure to include data for which you remain controller that is held by third parties. |
Line 24: |
Line 25: |
| | | |
| For data falling within the right to data portability (GDPR article 20), which includes all data I have provided and which have been indirectly observed about me [2] and where lawful bases for processing include consent or contract, I wish to have that data: | | For data falling within the right to data portability (GDPR article 20), which includes all data I have provided and which have been indirectly observed about me [2] and where lawful bases for processing include consent or contract, I wish to have that data: |
− | · sent to me in commonly used, structured, machine-readable format, such as a CSV file. A PDF is not a machine-readable format [3]. | + | · sent to me in commonly used, structured, machine-readable format, such as a CSV file. A PDF is not a machine-readable format [3]. <br> |
− | · accompanied with an intelligible description of all variables or abbreviations. | + | · accompanied with an intelligible description of all variables or abbreviations.<br> |
| | | |
| Article 15 | | Article 15 |
Line 32: |
Line 33: |
| | | |
| · a copy sent to me in electronic format. This includes any data derived about me, such as opinions, inferences, settings and preferences. Note that opinions, inferences and the like are considered personal data [4]. For data that is available to the controller in machine readable format, it must be provided to me in that form in accordance with the principle of fairness and provision of data protection by design. | | · a copy sent to me in electronic format. This includes any data derived about me, such as opinions, inferences, settings and preferences. Note that opinions, inferences and the like are considered personal data [4]. For data that is available to the controller in machine readable format, it must be provided to me in that form in accordance with the principle of fairness and provision of data protection by design. |
− |
| + | |
| If your organisation considers me a controller for whom you process | | If your organisation considers me a controller for whom you process |
− |
| + | |
| Furthermore, if your business considers me the controller of any personal data for which your business acts as processor, please provide me with all the data you process on my behalf in machine readable format in accordance with your obligation to respect my to determination of the means and purposes of processing. | | Furthermore, if your business considers me the controller of any personal data for which your business acts as processor, please provide me with all the data you process on my behalf in machine readable format in accordance with your obligation to respect my to determination of the means and purposes of processing. |
− |
| + | |
| Metadata on processing | | Metadata on processing |
− |
| + | ====================== |
| + | |
| This request also includes the metadata I am entitled to under the GDPR. | | This request also includes the metadata I am entitled to under the GDPR. |
− |
| + | |
| Information on controllers, processors, source and transfers | | Information on controllers, processors, source and transfers |
| · The identity of all joint controllers of my personal data, as well as the essence of you contracts with them (GDPR Article 26). | | · The identity of all joint controllers of my personal data, as well as the essence of you contracts with them (GDPR Article 26). |