GDPR Email Templates
Use these email templates to answer your users when they make a right request.
What's a Right Request?
This is a request made by a data subject to obtain the exercise of one of his/her rights under the GDPR.
The GDPR does not specify how data subjects should make requests, whether it is verbally or in writing. They can also be made to any part of your organisation and do not have to be to a specific person or contact point, or to include as object "right request under the GDPR".
The GDPR does not specify how data subjects should make requests, whether it is verbally or in writing. They can also be made to any part of your organisation and do not have to be to a specific person or contact point, or to include as object "right request under the GDPR".
What's a Right of Access?
The right for a data subject to obtain from the controller the confirmation that data related to him/her are being processed, the purpose(s) for which they are processed, as well as the logic involved in any automated decision process concerning him or her.
This right also allows the data subject to receive communication in an intelligible form of the personal data processed.
This right also allows the data subject to receive communication in an intelligible form of the personal data processed.
What's a Right of Data Portability?
It’s the right for data subjects to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits this data directly to another controller.
What's a Right of Erasure?
Data subjects have the right to have personal data erased from a system or a website. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.
What's a Right to Object?
It’s the right for a data subject to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (a) of Article 5(1), including profiling based on that provision.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
What's a Right to Restriction of Processing?
It’s the marking of stored personal data with the aim of limiting their processing in the future.
Become GDPR compliant in minutes!
Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.
