Data Subject Access Request (DSAR) Policy
1. Purpose
Ballia Corpus respects data protection and privacy rights under the General Data Protection Regulation (GDPR), UK GDPR, California Privacy Laws (CCPA/CPRA), India’s Digital Personal Data Protection Act (DPDP Act) and similar laws in other jurisdictions. This Data Subject Access Request (“DSAR”) Policy explains how individuals can exercise their rights regarding their personal data.
2. Who Can Submit a DSAR
You may submit a DSAR if Ballia Corpus processes your personal data. “Personal data” refers to information that identifies or could reasonably identify an individual. Business or professional contact information may be considered personal data under certain laws, even in a B2B context.
3. Rights You May Exercise
Depending on applicable laws, you may have the right to:
Access. Obtain confirmation that we process your personal data and request a copy of that data.
Rectification. Request correction of inaccurate or incomplete personal data.
Erasure (“Right to Be Forgotten”). Request deletion of your personal data when it is no longer needed, when processing is based on consent that you withdraw, or when processing is unlawful (subject to legal exceptions).
Restriction. Request that we restrict the processing of your personal data in specific circumstances (for example, while verifying accuracy or legal grounds).
Portability. Request that we provide your personal data in a structured, commonly used, machine‑readable format for transfer to another controller (where technically feasible).
Objection. Object to the processing of your personal data for direct marketing or on grounds relating to your particular situation (if processing is based on legitimate interests).
Withdraw Consent. Withdraw your consent to processing at any time (where processing is based on consent), without affecting the lawfulness of prior processing.
Lodge a Complaint. Lodge a complaint with a supervisory authority or regulatory body if you believe your rights have been infringed.
4. How to Submit a DSAR
Contact Details. Please submit requests by email or postal mail using the contact information provided below. We recommend including “Data Subject Request” in the subject line.
Required Information. To help us process your request, please provide:
Your full name and contact information (email address and/or postal address).
The nature of your request (for example, access, correction, deletion, etc.).
Any specific identifiers that may help us locate your data (such as the context of your interactions with us—e.g., inquiry date, project name, etc.).
Verification. We may need to verify your identity to prevent unauthorised access to personal data. We may ask for additional information to confirm your identity. If you submit a request on behalf of someone else, we may request proof of your authority (e.g., a power of attorney or written authorisation).
Response Time. We will confirm receipt of your request within a reasonable period and respond within the timeframe required by applicable law (e.g., one month under GDPR). If we cannot comply with your request (for example, due to legal obligations or the existence of legitimate overriding interests), we will inform you and provide the reasons.
Cost. We usually do not charge a fee for processing DSARs. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.
