{"reference":"DSAR-2025-0117","response_date":"2025-02-18","controller":{"name":"Acme Supplies SRL","address":"Rue de la Loi 100, 1040 Brussels, Belgium","contact_email":"privacy@acme-supplies.eu","dpo_email":"dpo@acme-supplies.eu"},"request":{"received_on":"2025-01-25","channel":"Email to privacy@acme-supplies.eu","scope_requested":"All personal data held, plus the disclosures listed in Art. 15(1).","identity_verified_on":"2025-01-27","identity_verification_method":"Matched to email on file plus last 4 digits of order reference."},"data_subject":{"name":"Sophie Martens","address":"Kerkstraat 12, 1000 Brussels, Belgium","email":"sophie.martens@example.com","reference":"CUS-2022-0842"},"response":{"decision":"fulfilled","delivery_method":"Encrypted ZIP attached to this reply, with password sent via SMS to the mobile number on file."},"activities":[{"purpose":"Customer account and order history","data_categories":["Name","Postal address","Email","Phone","Order history (2022-2025)","Payment references (masked)"],"recipients":["Shipping carriers (per delivery)","Payment service provider"],"retention":"7 years after the last order (commercial-law retention).","source":"Collected directly from the data subject at signup and during orders."},{"purpose":"Newsletter subscription","data_categories":["Email","First name","Engagement metrics (opens, clicks)"],"recipients":["Email marketing provider (EU-hosted)"],"retention":"Until consent is withdrawn; records are currently active.","source":"Consent captured at signup (opt-in checkbox, timestamp 2022-03-14)."},{"purpose":"Support ticket history","data_categories":["Ticket content","Agent notes","Attachments uploaded by the customer"],"recipients":["Helpdesk software provider (EU-hosted)"],"retention":"24 months after ticket closure; oldest ticket in scope dates to 2023-08.","source":"Collected directly during support interactions."}],"data_summary":"We hold 14 orders placed between 2022-03-14 and 2025-01-10, newsletter engagement metrics from 37 campaigns, and 3 closed support tickets. The attached export includes every record in machine-readable JSON plus a human-readable PDF summary.","attachments":["dsar-2025-0117-records.json","dsar-2025-0117-summary.pdf"],"signatory":{"name":"Marie Laurent","title":"Data Protection Officer"}}