Informative Notes: What is a request for access to personal data?
The General Data Protection Regulation (EU) 2016/679 entitles the data subject to access the personal data processed by the controller, CTC-ARI. This form is used for the exercise of this right.
Individuals can make a subject access request verbally or in writing but in both cases the request will be documented and the identity of the requestor shall be checked. In general, and unless otherwise notified, there is no fee for exercising a data subject’s right. CTC-ARI Airports Ltd has 30 days to respond to a valid request after it has verified the identity of the requestor.
The forms will be stored in a secure cabinet for proof of request for a maximum of 3 years from the request date.