GDPR and Subject Access Requests
Data Subject (The Requester)
As the data subject, for any GDPR/Subject Access Requests, you will first need to make a request to your own organisation and not directly to the ScheduleLeave team, as your organisation past or present is known as the data controller. They can then make a formal request to us as to what specifically they require in terms of data and we can supply the necessary data.
Organisation (Data Controller)
If you have a GDPR/Subject Access Request from one of your employees, past or present, please get in Contact with ScheduleLeave support and supply the following pieces of information:
- Who the request is for
- Are they a past or present employee
- What data specifically is required
We can then process the request and send any data to you within the legal timeframe of a month upon receiving the request.