The GDPR grants data subjects a range of rights, including the right of access (Art. 15), erasure (Art. 17), and to object (Art. 21). Controllers must implement appropriate procedures to handle these requests in a timely manner (usually within one month) and in full.

Handling data subject requests requires the utmost care and adherence to short deadlines.

As your external DPO, we advise you on developing and implementing efficient internal processes to ensure that you can fulfil requests for access, erasure, or rectification correctly and on time.

We assist you in reviewing and creating response templates. In the case of complex requests or difficult balancing decisions, we are at your side with advice to support you in formulating a compliant response and to minimise risks.