Subject Access Request

This system blueprint is designed for SAR application developed by a company registered in Gibraltar, Spain called Deeshaa and is a part of the project documentation.

It is one of several key project documents and it is used to identify not only the technical standards and guidance but also to understand flow of the application along with key schematics related to the project.

Individuals have the right to access and receive a copy of their personal data, and other supplementary information. This is commonly referred to as a subject access request or ‘SAR’. Individuals can make SARs verbally or in writing, including via social media. A third party can also make a SAR on behalf of another person.

In most circumstances, you cannot charge a fee to deal with a request. You should respond without delay and within one month of receipt of the request. You may extend the time limit by a further two months if the request is complex or if you receive a number of requests from the individual. You should perform a reasonable search for the requested information. You should provide the information in an accessible, concise and intelligible format.

The information should be disclosed securely. You can only refuse to provide the information if an exemption or restriction applies, or if the request is manifestly unfounded or excessive.