Data Deletion

Data Deletion

1. Purpose and Scope

This policy outlines the procedures for individuals to request the deletion of their personal data held by MRT1 Initiative. The policy applies to all personal data collected, processed, or stored by the organization.

2. Request Process

Individuals who wish to request the deletion of their personal data should follow the steps outlined below:

1. Submission : Submit a written request for data deletion to the designated Data Protection Officer (DPO) or the Privacy Officer, if applicable. The request should include the individual's name, contact information, and any relevant details that can help identify the data to be deleted.

2. Verification : The organization may require additional information or verification to ensure the authenticity of the requestor's identity and their right to make the deletion request.

3. Review and Approval : The DPO or Privacy Officer will review the request to ensure it meets the organization's criteria for data deletion. If the request is valid, it will be approved, and the deletion process will be initiated.

3. Data Deletion Process

Once a valid data deletion request is approved:

1. Identification : The relevant data will be identified and located across the organization's systems, databases, and backups.

2. Deletion : The data will be securely and permanently deleted using appropriate methods and technologies, ensuring that it is irretrievable.

3. Verification : A confirmation of data deletion will be sent to the requestor, along with any relevant documentation or reports.

4. Exceptions

Certain circumstances may prevent immediate data deletion, such as:

1. Legal Obligations : If data retention is required to comply with legal or regulatory obligations, the organization may not be able to fulfill the deletion request until the retention period expires.

2. Ongoing Legal Proceedings : If the data is required for ongoing legal proceedings, the organization may temporarily retain the data until the proceedings are concluded.

5. Timeframe

The organization will make best efforts to respond to data deletion requests within 7 days from the date of receipt. The actual deletion process may take additional time, depending on the complexity and volume of data.

6. Record Keeping

The organization will maintain records of data deletion requests, including the requestor's details, request date, approval status, and details of the data deleted.

7. Contact Information

For submitting data deletion requests or inquiries related to this policy, individuals can contact:

8. Policy Review

This policy will be reviewed and updated as necessary to ensure alignment with legal and regulatory requirements and evolving best practices.