Skip to main content

Make a data rights/GDPR request

You are always in control of your data. If you want to exercise your rights (e.g. erasure), let us know.

Written by Jacob

Summary

At Konfir, protecting your personal data and upholding your data rights is central to how our service works. This article explains who to contact, and what happens after you make a request.


Who should I contact?

You can make a data rights request to either:

  • Your verifier (i.e. the organisation that requested your verification) - In most cases, your verifier is the Data Controller. This means they decide why your data is processed, how it is used, how long it is kept, and how your data rights request should be handled.

  • Konfir - We are usually the Data Processor. This means we process your data on behalf of your verifier and support them in responding to requests where required.

ℹ️ Note: Contacting the data controller directly can be the quickest route. The data processor is required to pass on requests to them and can not take any action independently.

ℹ️ Note: If you consented to Konfir storing your data for future use at the end of your verification, Konfir may act as a joint Data Controller for that stored data. You can withdraw this consent at any time.


How do I make a request?

To make a data rights request, contact your chosen party and clearly explain what you want to do. For example, you can say:

  • “I want to access my data”

  • “I want to delete my records”

  • “I want to correct my information”

  • “I want to withdraw my consent”

  • “I want to restrict how my data is processed”

You may be asked for more information if it is needed to find the correct records, confirm your identity or clarify your request.


What happens next

The organisation handling your request will acknowledge it and explain the next steps. If you contact Konfir, we will review your request and confirm whether it needs to be handled by Konfir, your verifier, or both.

Where your verifier is the Data Controller, they are usually responsible for deciding how your request should be handled. Konfir will support them where required, for example by helping locate, provide, correct, or delete data processed through the Konfir platform.

Data rights requests are normally completed within one calendar month. If a request is complex or requires coordination between Konfir and your verifier, it may take longer. If this happens, you will be kept updated.

Did this answer your question?