Forward the data request to your DPO or the person responsible for data privacy.
Confirm you have received the request by forwarding it to the person who made it, using the verified contact information listed in the request.
If the type of personal information you store requires further verification, communicate directly with the requestor.
Collect/delete/correct/send data as requested within 30 days using the verified contact information listed.
Remember that local privacy regulations may protect your customers even if your company is in a different region, so make sure you are familiar with the rules that apply to you and to your customers.
Always communicate directly with the data subject once you’ve received a request. Personal data should only be shared with the verified requestor, never send it to us or to any other person.