Data Subject Rights
Request Procedure.
This procedure explains how an individual can ask Pintop Technologies Limited to provide access to personal data or take another action concerning information that relates to them.
A clear route for questions and requests about personal data.
Individuals may have rights concerning personal data that Pintop processes about them. These rights depend on the nature of the information, Pintop’s role, the processing activity and the conditions applying to the particular request.
This procedure explains how to submit a request, what information may be needed, how identity is verified and the main stages involved in providing a response.
A request does not need to use a particular form. Providing clear details about the relevant relationship, account, product or communication can help Pintop locate the correct records.
Rights that may be
exercised.
The availability and scope of each right depend on the circumstances, lawful basis and applicable conditions or limitations.
Access
Ask whether personal data is being processed and request a copy of eligible information.
Rectification
Ask for inaccurate or incomplete personal data to be corrected.
Erasure
Ask for deletion where there is no continuing lawful reason to retain the information.
Restriction
Ask for processing to be limited in appropriate circumstances.
Portability
Request eligible information in a structured and machine-readable format.
Objection
Object to certain processing, including eligible direct-marketing activity.
Automated decisions
Exercise applicable rights concerning solely automated decisions that have significant effects.
Withdraw consent
Withdraw consent where consent is the basis for the relevant processing activity.
Tell us which right you want to exercise.
A request can be submitted through Pintop’s contact page or directly by email. Select or state that the enquiry concerns privacy or a data-subject-rights request.
Pintop Technologies Limited
St Finbarr’s College Rd, Akoka Yaba, Lagos
Clear context helps us locate the right information.
The request should contain enough information for Pintop to understand the right being exercised and identify the relevant records.
Personal data should only be released to the right person.
Pintop may need to confirm the requester’s identity or authority before disclosing information or taking the requested action.
Existing account details
Verification may use an email address, telephone number, account reference or other information already connected to the relationship.
Additional questions
Pintop may ask for contextual information that a person legitimately connected to the records would reasonably be expected to know.
Identification documents
A suitable identification document may be requested where less intrusive verification methods are not sufficient for the sensitivity of the request.
Authorised representatives
A person acting for someone else may be required to provide evidence of their authority and confirm the identity of the individual concerned.
What to expect after a
request is submitted.
The time needed may depend on identity verification, the scope of the request, the systems involved and whether information about other people must be protected.
Receipt
The request is identified as a privacy or data-subject rights request and routed for handling.
Clarification and verification
Pintop may request information needed to confirm identity, authority or the scope of the request.
Standard response period
Pintop aims to respond without undue delay and within 30 calendar days after receiving the request and information needed to process it.
Complex requests
Where additional time is permitted because of the complexity or number of requests, the requester will be informed of the extension and the reason for it.
How a request is
handled.
Each request is considered according to the right involved, the relevant processing activity and the rights of other people whose information may also appear in the records.
Understand the request
Confirm the right being exercised, the information involved and the relevant product, service, relationship or period.
Verify identity and authority
Apply a proportionate verification method before disclosing information or changing personal data.
Locate relevant information
Search the systems, records, accounts and teams reasonably likely to contain information within the scope of the request.
Review the information
Consider whether disclosure or another requested action would affect another person’s rights, legal privilege, contractual obligations or an applicable restriction.
Take the appropriate action
Provide access, correct data, restrict processing, delete eligible information, record an objection or take another action supported by the request.
Respond securely
Send the outcome through an appropriate channel and explain any information withheld, limitations applied or further steps available.
Fees, limitations and
other people’s rights.
Rights requests are generally handled without charge, but some circumstances may affect the extent or manner of the response.
Requests are generally free
Pintop does not ordinarily charge for handling a data-subject rights request. Where a request is manifestly unfounded, excessive or repetitive, Pintop may take the action permitted under applicable law and explain the basis for that decision.
Information about other people
A record may contain personal data relating to another individual. Pintop may redact, withhold or otherwise protect that information where disclosure would adversely affect another person’s rights and freedoms.
Legal and regulatory restrictions
Access or another requested action may be limited where information is protected by legal privilege, required for a legal obligation, connected to a claim or subject to another applicable restriction.
Reasons are explained
Where Pintop cannot fully comply, the response should explain the outcome, the principal reason and the complaint or review route available to the requester.
What the different rights may
lead to.
The outcome depends on the right exercised and the conditions applying to the relevant processing.
Access
Confirmation of whether eligible data is being processed, a copy of that information and relevant context about its use, source, recipients and retention.
Rectification
Correction or completion of inaccurate or incomplete personal data, together with related updates where appropriate.
Erasure
Deletion or anonymisation where the relevant conditions are met and no continuing lawful or required retention basis applies.
Restriction
Limitation of eligible processing while an accuracy, objection, legal-claim or lawfulness issue is being resolved.
Portability
Provision of eligible data in a structured, commonly-used and machine-readable format where the required conditions are satisfied.
Objection
Cessation or reassessment of the relevant processing, including prompt suppression from eligible direct marketing.
Contact Pintop if you are dissatisfied with the response.
A requester may ask Pintop to clarify the outcome or provide additional context about a limitation applied to their request.
An individual may also submit a complaint to the Nigeria Data Protection Commission where they remain dissatisfied with how their personal data or request has been handled.
Related privacy and
governance documents.
These documents provide additional information about Pintop’s handling of personal data, consent, retention and incident management.
Ready to submit a request concerning your personal data?
Explain the right involved and provide enough context for Pintop to identify the relevant relationship, account, product or records.