Right of access
The Right of access (Art. 15) is the right of the Data Subject to obtain confirmation from the Data Controller as to whether or not their personal data are being processed, to access such data, and to obtain other information such as the purpose of the processing, the recipients or categories of recipients. The Data Subject also has the right to receive a copy of the personal data being processed and the indication of the retention period.
Right of access in the platform
Only platform users with specific permissions (DPO permissions; for more information, contact Customer Support) can access and provide the Data Subject with a list of the personal data being processed and other information as required by the regulation.
If the Data Subject exercises the right of access, platform users with specific permissions can proceed directly from the UI as follows:
-
Go to Customers > Customer List.
-
Search for and/or select the contact of interest.
-
Click the DPO Area button.
-
Click on Right to data portability to obtain a JSON file containing the requested data.
The Data Controller, or the platform user with specific permissions, is provided with the following data:
- Profile Information
- Events loaded from external sources
- Email information from the Send module
The above actions can also be performed via API.