DSAR Process Statement

List of contents

Home Policies Terms of Service Data Subject Terms DSAR Process Statement

Data Subject Access Request (DSAR) process statement

At Legado, we take data privacy and compliance with data protection regulations, including the General Data Protection Regulation (GDPR), seriously. We understand the importance of data subject access rights, and we are committed to facilitating DSARs in a timely and transparent manner.

1. DSAR submission to corporate partner

Data subjects (end-users or consumers) who wish to exercise their data subject access rights should initially contact, The Corporate Partner, who is our direct customer. The data subject should submit their DSAR directly to The Corporate Partner, in accordance with their established DSAR process.

2. Corporate partner requests DSAR on behalf of data subject

Upon receiving a DSAR from a data subject, The Corporate Partner will review the request and assess its validity. Once validated, The Corporate Partner will then contact Legado through our designated helpdesk, specifying the details of the DSAR. This request should include, but is not limited to:

  • A clear description of the requested data.
  • Verification of the data subject’s identity.
  • The purpose of the request.
  • Any relevant timeframes or deadlines.

3. Processing DSAR by Legado

Upon receiving a valid DSAR request from The Corporate Partner, Legado will begin the process of  gathering and preparing the requested data. This process will involve:

  • Identifying and collecting the relevant data associated with the data subject.
  • Verifying the data subject’s identity in accordance with data protection  requirements.
  • Assessing and redacting any third-party or sensitive information, where  applicable.
  • Compiling the data into a suitable format for delivery.

4. Format of data provided

Legado will provide the requested data in a secure and easily accessible format. The specific format may vary depending on the nature of the data and the request, but examples of common formats include:

  • PDF documents.
  • CSV (Comma-Separated Values) files for structured data.
  • Password-protected files with access instructions.
  • Secure download links via encrypted channels.

5. Delivery to the corporate partner

Once the DSAR request has been processed, Legado will securely transmit the data to The Corporate Partner, ensuring the confidentiality and integrity of the information.

6. The corporate partner communicates with data subject

The Corporate Partner will then take responsibility for communicating the results of the DSAR to the data subject, in accordance with their own established procedures. We are dedicated to safeguarding the rights of data subjects and ensuring that DSARs are handled professionally, securely, and in compliance with applicable data protection laws.   For any inquiries or clarifications regarding our DSAR process, please contact our Data Protection Officer at helpdesk@joinlegado.com