GDPR DSAR (EU/EEA) — Starter Template

Send via the controller’s designated channel. Keep a copy.

Subject: Data Subject Access Request (GDPR) — [Your Name]

To: [Company / Data Controller Name]

I am making a request under Article 15 GDPR (right of access).

Please confirm whether you process personal data about me and, if so, provide:

1. A copy of my personal data undergoing processing. 2. The purposes of processing. 3. Categories of personal data concerned. 4. Recipients or categories of recipients (including processors). 5. Retention periods or criteria used to determine them. 6. The source of the data (if not collected from me). 7. Information about automated decision-making/profiling (if applicable). 8. Safeguards for any international transfers (if applicable).

Identifiers to help locate my data:

Preferred delivery format: machine-readable electronic copy (e.g., PDF + CSV/JSON where applicable).

If you need additional information to confirm my identity, please specify exactly what is required and why it is necessary.

Regards, [Name] [Country]