WEBVTT

00:00:05.570 --> 00:00:08.171
If your organisation stores personal data,

00:00:08.226 --> 00:00:11.944
individuals have the right to know what
information you keep about them

00:00:12.023 --> 00:00:14.499
and also access this information.

00:00:14.840 --> 00:00:16.907
How does this work in practice?

00:00:17.351 --> 00:00:21.108
Let’s say you run a taxi service and
you get orders through an app.

00:00:21.484 --> 00:00:25.570
Individuals have the right to know why you use their location data

00:00:25.600 --> 00:00:27.529
as well as their other personal data.

00:00:27.850 --> 00:00:31.310
They also have the right to access
the data you store about them.

00:00:31.680 --> 00:00:35.117
They also have the right to know if you
share their data with anybody else.

00:00:35.560 --> 00:00:40.315
Individuals must be able to request access
to their information by different means,

00:00:40.340 --> 00:00:43.188
for example,
via e-mail, letter

00:00:43.213 --> 00:00:46.033
or via your app or website,
if you have one.

00:00:46.361 --> 00:00:51.345
You must explain clearly how individuals can
make an access request to your organisation.

00:00:51.942 --> 00:00:55.473
You must respond to these requests
at the latest within one month,

00:00:55.661 --> 00:00:56.942
and free of charge.

00:00:57.435 --> 00:01:00.677
You can find information on
how to handle access requests

00:01:00.740 --> 00:01:04.880
in the EDPB Data Protection
Guide for Small Business.