How can we help?

Individuals may have rights concerning their personal information under applicable data protection laws. Depending on the jurisdiction and circumstances, these rights may include access, rectification, erasure, restriction, objection, and data portability. Organizations using Polyosync should establish procedures for identifying and responding to relevant privacy requests. Who is responsible for responding to a customer privacy request? The organization determining the purposes and means of the relevant processing will generally have primary responsibility for responding to requests involving its own customer records. The precise responsibilities depend on the applicable law and contractual roles. What types of requests might an organization receive? 1. A request to access personal information. 2. A request to correct inaccurate records. 3. A request to delete personal information. 4. A request to restrict processing. 5. An objection to particular processing. 6. A request for portable information, where applicable. 7. A request for information about how personal data is used. How should a business handle a request? Step 1: Record the request. Document when it was received and what the individual is asking. Step 2: Verify identity where appropriate. Avoid disclosing personal information to an unauthorized requester. Step 3: Identify relevant systems. Determine whether the information appears in Polyosync, external integrations, or other business systems. Step 4: Determine the applicable legal requirements. Consider the relevant jurisdiction, lawful exemptions, and response deadlines. Step 5: Review the organization's records. Identify the information involved and the operations that may be affected. Step 6: Use supported functionality. Perform authorized corrections or deletions through available administrative processes. Step 7: Contact Polyosync Support if assistance is required. Provide the necessary context without unnecessarily exposing personal information. Step 8: Review external systems. A request involving connected services may require action outside Polyosync. Step 9: Document the outcome. Maintain an appropriate record of the organization's response. Does Polyosync automatically respond to every data subject request? Organizations should not assume that privacy requests are automatically identified or fulfilled by the platform. The responsible organization must manage its legal obligations. Can a request always result in immediate deletion? Not necessarily. Applicable law may permit or require certain information to be retained. The correct response depends on the specific circumstances. What about data processed by AI providers? Third-party processing arrangements may be relevant to the organization's assessment. Where necessary, the organization should review the applicable agreements and seek appropriate assistance. Recommended approach Maintain a documented privacy request procedure, identify the relevant data locations, and coordinate with Polyosync Support when platform-specific assistance is needed.