andmepöördumine

Andmepöördumine, sometimes translated as data request or data inquiry, refers to the act of formally asking for access to or information about personal data held by an organization. This is a fundamental right in many jurisdictions, often established by data protection laws such as the General Data Protection Regulation (GDPR) in the European Union. Individuals can typically exercise this right to understand what personal data an organization possesses about them, how it is being used, and who it is being shared with.

The process of an andmepöördumine usually involves submitting a written request to the data controller, which is the entity responsible for processing the personal data. This request should clearly identify the individual making the inquiry and specify the nature of the data they wish to access. Organizations are generally required to respond to such requests within a specific timeframe, often one month, though extensions may be possible under certain circumstances.

Upon receiving a valid andmepöördumine, the organization must provide the requested information. This might include details about the categories of personal data processed, the purposes of the processing, the recipients of the data, and the retention periods. In addition to access, individuals may also have the right to request rectification, erasure, or restriction of the processing of their personal data, as well as the right to data portability. The ability to make an andmepöördumine empowers individuals to maintain control over their personal information and promotes transparency in data processing practices.