Oooh, thanks for the clarification! It wasn’t clear to me it was a legal constraint.
I haven’t submit mine yet, I was waiting for the blackout to end, but I’ll sure check my calendar and report to my data regulator if they don’t comply.
Well, just a heads up, I might have wrote total bullshit (sorry about that!).
I tried to find a reference to the “one calendar month” rule in the EU’s legalese, but I didn’t find anything.
What I found is that depending on your country, the data regulator might require services to give you your data in 30 days or less, but this might not be the case everywhere in the EU. The relevant legal article for this can be found here: https://gdpr-info.eu/art-15-gdpr/
I am not a lawyer anyway, so your best bet would be to message an organization that fights for personal data protection to ask them about your rights in your home country.
Sorry about the confusion once again, as I might have been wrong!
“The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request.”
No, no. They say it can take up to 30 days, yes.
But that’s not the correct wording. It legally needs to be done under 30 days (well, one calendar month), if you’re a EU citizen.
If they do not, I highly encourage you to contact your country’s data regulator and complain about it.
Oooh, thanks for the clarification! It wasn’t clear to me it was a legal constraint.
I haven’t submit mine yet, I was waiting for the blackout to end, but I’ll sure check my calendar and report to my data regulator if they don’t comply.
p.s. yes I’m a EU citizen
Well, just a heads up, I might have wrote total bullshit (sorry about that!).
I tried to find a reference to the “one calendar month” rule in the EU’s legalese, but I didn’t find anything.
What I found is that depending on your country, the data regulator might require services to give you your data in 30 days or less, but this might not be the case everywhere in the EU. The relevant legal article for this can be found here: https://gdpr-info.eu/art-15-gdpr/
I am not a lawyer anyway, so your best bet would be to message an organization that fights for personal data protection to ask them about your rights in your home country.
Sorry about the confusion once again, as I might have been wrong!
It’s ok :)
I’ll start by sending my request and see if they respond within 30 days, if not, I’ll search my government website to know what to do.
Your post has been useful anyway because it made aware there might be other legal obligations than just sending your data.
@satouru @ulu_mulu The one month rule is in article 12(3):
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2182-1-1
“The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request.”