The Right of Access:

• Individuals have the right to access their personal data.
• This is commonly referred to as subject access.
• Individuals can make a subject access request verbally or in writing.
• You have one month to respond to a request.
• You cannot charge a fee to deal with a request in most circumstances.

Personal data of the individual

An individual is only entitled to their own personal data, and not to information relating to other people (unless the information is also about them or they are acting on behalf of someone). Therefore, it is important that you establish whether the information requested falls within the definition of personal data. For further information about the definition of personal data please see the key definitions guidance.

Other information:

In addition to a copy of their personal data, you also have to provide individuals with the following information:

• the purposes of your processing;
• the categories of personal data concerned;
• the recipients or categories of the recipient you disclose the personal data to;
• your retention period for storing the personal data or, where this is not possible, your criteria for determining how long you will store it;
• the existence of their right to request rectification, erasure, or restriction or to object to such processing;
• the right to lodge a complaint with the ICO or another supervisory authority;
• information about the source of the data, where it was not obtained directly from the individual;
• the existence of automated decision-making (including profiling); and
• the safeguards you provide if you transfer personal data to a third country or international organization.
• You may be providing much of this information already in your privacy notice.

Note: You must act on the subject access request without undue delay and at the latest within one month of receipt.

You should calculate the time limit from the day after you receive the request (whether the day after is a working day or not) until the corresponding calendar date in the next month.

What to do if you receive a subject access requests

We’re in the process of building and releasing tools that will make it easier for our users to handle their customer’s data appropriately. If you receive a request from one of your clients, leads, or drop-ins, you can email Wodify and we have developed an automated script that will pull all of the personal data we collect.

To put in a request just email gdpr@wodify.com with the email of the user and we will export their data using our automated script and respond to your email request.  It's important that you also include your personal privacy policy to address the other information required under GDPR.

We can also do the same for our customers.  If you would like to submit a subject access request for your own personal data, simply email gdpr@wodify.com and we will export all personal data held by Wodify and respond to your request with this information and our privacy policy details.