You can ask an organization if it has data on you (website, store, bank…) and ask to be given it to verify its content.
The exercise of the right of access allows you to find out whether your personal data is being processed and to obtain communication of it in an understandable format. It also allows you to check the accuracy of the data and, if necessary, to have them corrected or deleted.
The organization from which you request your « right of access » will have to send you a copy of the data it holds on you and provide you with a certain amount of information:
You can find the coordinates of Atlante Technologies on the information page reserved for the exercise of your rights on the website.
Data protection officer
Atlante Technologies Inc.
336 de L’Artisan Street
United Kingdom – Satellite Office
Atlante Technologies Ltd.
20-22 Wenlock Road
You can exercise your right of access by various means: electronically (form, e-mail address, download button, etc.), or by mail for example.
If your request is made electronically, the organization will respond electronically, unless you request otherwise (e.g. by mail).
If the organization has reasonable doubts about your identity, it may ask you to attach any document that proves your identity, for example to prevent identity theft. However, they cannot ask you for supporting documents that would be disproportionate to your request.
There is no charge for exercising this right. You may be asked to pay a reasonable fee for processing your file, for example, if you request an additional copy.
This step is essential if you wish to refer the matter to the regulatory authority in the event of a refusal, unsatisfactory response or lack of response.
Are you doing this by mail? Ask for an acknowledgement of receipt that will prove the date of your request.
The organization must respond to you as soon as possible and no later than one month. This period may be extended to three months depending on the complexity of the request or the number of requests received by the organization. In the latter case, the organization must inform you of the reasons for the extension within the same one-month period.
If the organization does not respond within one month or refuses to grant your request, you may file a complaint with the regular authorities with evidence of your prior actions. During this period, you can request the limitation of the processing, i.e. the « freezing » of the use of your data.
If you feel that the organization’s response to your request for access is incomplete, you can complain to the regulatory authority so that it can intervene in support of your request.
However, it is recommended that you first ask the regulatory authority to complete its response with the data you consider to be missing. If there is no response or if the response is unsatisfactory, you can file a complaint with the regulatory authority, enclosing proof of your previous actions.
Some files are particularly regulated. For certain police files or files concerning State security, the law does not authorize a private individual to directly access the information contained in the file. However, he or she can access it indirectly through the regulatory authority.
If the agency believes that your request is unfounded or excessive, it may refuse to grant access, provided that it can demonstrate that the request is « unfounded » or « excessive.
The right of access must not affect the rights of third parties:
In practice, the organization may hide the identity of third parties or elements that indirectly identify them in its response.