Request data information from doctors and companies
Since the GDPR came into force in May 2018, you have the right to receive data from companies if this data is processed. And since this is actually always the case in some form, you can of course exercise this right. Basically, this is nothing really new, because the old BDSG was already quite strict.
With the GDPR, however, the requirements for content and scope have been further expanded. According to Art. 15 Para. 1 GDPR, data subjects (i.e. you as the person about which data is collected and processed) have the right to request information from the person responsible (each company must designate someone for this area) whether and to what extent personal data is processed, and of course whether this data is also passed on to third parties.
Request data information from doctors and companies
Since the GDPR came into force in May 2018, you have the right to receive data from companies if this data is processed. And since this is actually always the case in some form, you can of course exercise this right. Basically, this is nothing really new, because the old BDSG was already quite strict.
With the GDPR, however, the requirements for content and scope have been further expanded. According to Art. 15 Para. 1 GDPR, data subjects (i.e. you as the person about which data is collected and processed) have the right to request information from the person responsible (each company must designate someone for this area) whether and to what extent personal data is processed, and of course whether this data is also passed on to third parties.
1. What information rights do you have?
1. What information rights do you have?
The right to information is divided into two stages. In the first step, each data subject can request information from the person responsible about whether personal data is generally collected, and if this is the case, the data subject must provide information about the scope of the data collected.
In addition, the person responsible must also provide the following information (extract) for those affected:
- Purpose of data processing
- Categorization of personal data
- Other recipients of the personal data
- Storage period of the data
- Education of the person concerned about their rights to correction, deletion and restriction of the data
- Informing the person concerned about the right to lodge a complaint with the supervisory authority
- Origin of the data (unless it was collected directly from the data subject)
As a data subject, you already have very extensive rights to receive information about which data is collected and processed by you. As soon as personal data is also transferred to third countries outside the EU, you also have the right to be informed about the guarantees agreed in connection with the data transfer.
But it is really important that it is also personal and non-anonymized data. In the latter case, you would simply receive negative information.
The right to information is divided into two stages. In the first step, each data subject can request information from the person responsible about whether personal data is generally collected, and if this is the case, the data subject must provide information about the scope of the data collected.
In addition, the person responsible must also provide the following information (extract) for those affected:
- Purpose of data processing
- Categorization of personal data
- Other recipients of the personal data
- Storage period of the data
- Education of the person concerned about their rights to correction, deletion and restriction of the data
- Informing the person concerned about the right to lodge a complaint with the supervisory authority
- Origin of the data (unless it was collected directly from the data subject)
As a data subject, you already have very extensive rights to receive information about which data is collected and processed by you. As soon as personal data is also transferred to third countries outside the EU, you also have the right to be informed about the guarantees agreed in connection with the data transfer.
But it is really important that it is also personal and non-anonymized data. In the latter case, you would simply receive negative information.
2. Cost and frequency of data information
2. Cost and frequency of data information
If you request a single copy of information for yourself, the company’s representative must provide you with this data in any case free of charge. If you also need copies for other people, the company can invoice you to a reasonable extent (which is in the amount of normal administrative costs).
As far as the frequency of data information is concerned, the law does not issue a clear guideline here, but only states that data subjects can exercise their right to information at reasonable intervals free of charge. So if you request data information once a week, you will surely span the sheet here. Realistically, we keep a time frame of once a year here.
If you request data information very frequently, the person responsible for the company can refuse this to you due to unfounded or excessive requests, or invoice you accordingly. As I said, all (like many points of the GDPR) is not clearly defined.
Recital 63 of the GDPR states that you as a data subject can exercise your right to information at reasonable intervals free of charge. There are, however, some exceptions to the right to information, for example the case when the rights or freedoms of other people would be violated by the data information.
If you request a single copy of information for yourself, the company’s representative must provide you with this data in any case free of charge. If you also need copies for other people, the company can invoice you to a reasonable extent (which is in the amount of normal administrative costs).
As far as the frequency of data information is concerned, the law does not issue a clear guideline here, but only states that data subjects can exercise their right to information at reasonable intervals free of charge. So if you request data information once a week, you will surely span the sheet here. Realistically, we keep a time frame of once a year here.
If you request data information very frequently, the person responsible for the company can refuse this to you due to unfounded or excessive requests, or invoice you accordingly. As I said, all (like many points of the GDPR) is not clearly defined.
Recital 63 of the GDPR states that you as a data subject can exercise your right to information at reasonable intervals free of charge. There are, however, some exceptions to the right to information, for example the case when the rights or freedoms of other people would be violated by the data information.
3. Request Data information (sample form)
3. Request Data information (sample form)
To make the process a little easier for you, we provide a free sample form for data information as a PDF. You can either insert this in Word to edit it further, or you can use the appropriate PDF software.
By the way:
We generally do not collect any personal data from you when you visit our website. The only exceptions are if you write to us using a contact form or if you purchase one of our digital products. For contact inquiries, your data will be deleted immediately after answering your inquiry. And when purchasing digital products, we are legally obliged to keep invoices for 10 years.
However, we never pass on data to third parties, sell them, or use them to carry out marketing measures. Your data belongs to you and nobody else.
To make the process a little easier for you, we provide a free sample form for data information as a PDF. You can either insert this in Word to edit it further, or you can use the appropriate PDF software.
By the way:
We generally do not collect any personal data from you when you visit our website. The only exceptions are if you write to us using a contact form or if you purchase one of our digital products. For contact inquiries, your data will be deleted immediately after answering your inquiry. And when purchasing digital products, we are legally obliged to keep invoices for 10 years.
However, we never pass on data to third parties, sell them, or use them to carry out marketing measures. Your data belongs to you and nobody else.
Popular Posts:
Create a Word letter template with form fields
Create a professional DIN 5008 letter template with form fields and drop-down lists in Microsoft Word, and write letters as easily as you would fill out a form.
Protect Word documents from editing
Protect your documents in Microsoft Word from unauthorized editing or block access completely.
Show and remove duplicate entries in Excel | Tutorial
We explain how to remove duplicate entries from Excel. And also how you can only display duplicate entries in Excel but not delete them immediately in order to decide on a case-by-case basis.
Create vCard with Business Photo in Outlook
Whereas digital business cards used to be used primarily in e-mail programs such as Outlook, today they are increasingly being sent via e-mail, SMS or messenger services such as WhatsApp to smartphones
The Xreference function – difference to Sreference and Wreference
Pretty much everyone who uses Excel knows the Vreference and the Wreference. On the other hand, something newer is the X reference, which can be used to iron out some of the weaknesses of the functions used up to now. We explain the differences between Xreference and Sreference & Wreference.
Custom Formatting Excel – Number Format Codes Excel
We use a practical example to explain the importance and possible uses of custom formatting in Excel. Number format codes in Excel are not rocket science!
Popular Posts:
Create a Word letter template with form fields
Create a professional DIN 5008 letter template with form fields and drop-down lists in Microsoft Word, and write letters as easily as you would fill out a form.
Protect Word documents from editing
Protect your documents in Microsoft Word from unauthorized editing or block access completely.
Show and remove duplicate entries in Excel | Tutorial
We explain how to remove duplicate entries from Excel. And also how you can only display duplicate entries in Excel but not delete them immediately in order to decide on a case-by-case basis.
Create vCard with Business Photo in Outlook
Whereas digital business cards used to be used primarily in e-mail programs such as Outlook, today they are increasingly being sent via e-mail, SMS or messenger services such as WhatsApp to smartphones
The Xreference function – difference to Sreference and Wreference
Pretty much everyone who uses Excel knows the Vreference and the Wreference. On the other hand, something newer is the X reference, which can be used to iron out some of the weaknesses of the functions used up to now. We explain the differences between Xreference and Sreference & Wreference.
Custom Formatting Excel – Number Format Codes Excel
We use a practical example to explain the importance and possible uses of custom formatting in Excel. Number format codes in Excel are not rocket science!