Identify the organisation and the outcome you need
EU data-protection rules give people rights concerning their personal information. Depending on the circumstances, these include access, correction, erasure, restriction, portability and objection. They also require information about how data is used. A right is not necessarily unlimited: deletion, for example, can be affected by legal record-keeping duties and other exceptions.
Start by identifying the organisation responsible for the data. Look for its privacy notice and contact details. A brand, an app store, an employer and the supplier hosting a service may have different roles. Decide what you need: a copy of information, a correction to a record, an explanation of a use, or an end to a particular activity.
Write a request that can be answered
Write a short, specific request through the organisation’s stated channel. Identify the account or interaction, explain the outcome you want and give enough context to locate the relevant records. For a correction, say what is wrong and what it should say. Avoid sending a large bundle of identity documents before the organisation explains what verification is necessary.
For example: “I used your service through this account. Please explain what personal data you hold about me and provide a copy. I am particularly interested in the profile information and marketing preferences associated with the account.” Adjust the wording to your actual request rather than asking for every possible remedy at once.
Keep evidence and know where to go next
Keep the request, the date sent, any acknowledgement and the response. Organisations generally must respond within one month, with a possible extension in specified circumstances. If the answer is incomplete, point to the missing part and ask for the reason. You can complain to a data-protection authority; the official guidance explains how to find the appropriate one.
The Your Europe privacy guide is the place to check the rights, exceptions and complaint route. Keep a copy of useful correspondence outside the account involved in the dispute. That small habit helps if access to the service later changes.