DSAR (Data Subject Access Request) is a formal request to exercise one of your GDPR rights. On Booquela, you can submit one in a few clicks, without writing emails.
How to submit a request - step by step
1. Go to the GDPR panel
After logging in, open your account menu and click My data (GDPR). There you will find the submission form and a list of your previous requests.
2. Choose the request type
Available options:
- Data access - you want a copy of your personal data
- Data rectification - your data is incorrect and you cannot change it in your profile
- Data erasure - you want us to delete (anonymize) your data
- Data portability - you need a data export in a transferable format
- Restriction of processing - you want to limit how we use your data
- Objection - you object to data processing for a specific purpose
3. Describe details (optional)
In the details field, you can specify your request, e.g.:
- "Please export all my bookings from the last year"
- "Please correct my phone number - I cannot change it in my profile"
- "I want my account and all associated data deleted"
4. Submit the request
Click Submit request. The system will set a processing deadline (30 days), notify our team, and assign the status "Pending".
Tracking your status
After submitting, track progress on the My data (GDPR) page:
- Pending - request submitted, waiting for assignment
- In progress - we are working on your request
- Completed - request has been fulfilled
- Rejected - request was rejected, with a stated reason
What happens after submission
- Verification - we confirm your identity and the validity of the request
- Processing - depending on the type: we prepare a data export, correct data, anonymize your account, or adjust processing
- Notification - we inform you when processing is complete
When a request may be rejected
In rare cases, a request may be rejected:
- We cannot verify your identity
- The request is manifestly unfounded or excessive
- Legal requirements mandate continued data processing (e.g., tax obligations)
You will always receive a written justification for the rejection.
Remember that basic data (name, email, phone) can be changed directly in your profile - you do not need to submit a formal request. DSAR is mainly needed for data export, deletion, or more complex operations.
Was this article helpful?
What could we improve?
Thanks! Your feedback will help us improve this article.