Procedure for Data Subject Access Requests (DSARs)

1. Procedure for Data Subject Access Requests (DSARs)

Data subjects can submit requests through this dedicated form available or via info@thriveagric.com. Requests would include necessary identification details (e.g., full name, contact information, and ID card) to verify the identity of the requestor.

2. Personal Data We Collect

Within 7 days of receiving a request, we will acknowledge its receipt. We will also provide the data subject with an estimated timeline for processing the request, typically within 30 days.

3. Identity Verification

To ensure the security of personal data, we will verify the identity of the requestor. This may require confirmation of personal information or submission of additional documentation.

4. Data Retrieval

Upon verification, we will collect the relevant personal data from our systems. This may include data from third-party processors if applicable.

5. Data Delivery

The requested personal data will be provided securely and in a structured, commonly used electronic format. The report will include:

1. Categories of personal data processed.
2. The purpose for processing the data.
3. Recipients of the data, if any.
4. The retention period.
5. Information on the rights to rectification, erasure, and restriction of processing.

6. Record Keeping

All DSARs will be documented in our records, including the date of submission, verification steps, and the date of response. This ensures proper auditing and compliance.

7. Special Cases

If the request is complex or additional time is required, we will notify the data subject of an extension within the original 30-day period. If a request is denied, we will provide an explanation and inform the data subject of their right to lodge a complaint with the relevant Data Protection Authority.