Data Subject Access Request (DSAR) Process Notice
The data subject access request (DSAR) provisions set out in the 60 Decibels (hereinafter referred to as the “Company”) Privacy Notice provides the process for individuals to use when making an access request, along with the protocols followed by the Company when such a request is received.
As a company, we need to collect personal information to effectively carry out our everyday business functions and services, and in some circumstances, to comply with the requirements of the law and/or regulations. Since we process personal information regarding individuals (data subjects), we are to protect such information, and to obtain, use, process, store and destroy it, in compliance with the EU General Data Protection Regulation (GDPR) and its principles, and other relevant privacy and data protection laws in jurisdiction where we operate.
- Territorial Scope
The company will adhere to any relevant privacy and data protection laws in jurisdictions where it operates. As two of the most significant laws, a specific emphasis will be placed on the GDPR and California Consumer Privacy Act (CCPA), as amended.
The GDPR and similar national laws apply to companies or entities which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or a company established outside the EU and is offering goods/services or is monitoring the behavior of individuals in the EU.
California laws and regulations apply to a business that meets certain thresholds and collects California consumers’ personal data.
- How long we keep your personal information
We will maintain a record for you until such time as you tell us that you no longer wish us to keep in touch.
- Purpose of notice
A subject access request enables a data subject to gain access to any personal information held about them by 60 Decibels. It promotes the right of data subjects to submit a subject access request in order to obtain a copy of such information held about them, in electronic or hard copy form, from 60 Decibels as the data controller or processor. It also outlines the procedure to be followed by data subjects when submitting a data access request to 60 Decibels.
- The Right of Access
Article 15 of the EU GDPR (Regulation (EU) 2016/679), and the CCPA, as amended, grants you the right to access your personal data held by 60 Decibels including the right to obtain confirmation that we process your personal data, receive certain information about the processing of your personal data, and obtain a copy of the personal data we process.
Where requested, we will provide the following information:
- The purposes of the processing
- The categories of personal data concerned
- The recipient(s) or categories of recipient(s) to whom the personal data have been or will be disclosed
- If the data has been transferred to a third country or international organisation(s) (and if applicable, the appropriate safeguards used)
- The envisaged period for which the personal data will be stored (or the criteria used to determine that period)
- Where the personal data was not collected directly from the individual, any available information as to its source
- Your Other Rights
In addition to exercising your access right, the GDPR also grants you the right to
- Request correction or erasure of your personal data.
- Restrict or object to certain types of data processing.
- Make a complaint with the local data protection authority.
- Fees and Timeframes
Under the GDPR, we have 30 calendar days to respond to your request. This period begins from the time we received the request.
60 Decibels shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, 60 Decibels may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
- Submission of DSAR