Last Updated: 26 September 2025

1. Introduction

This Data Subject Request (DSR) Form is intended for all individuals (“Data Subjects”) who wish to exercise their rights under the General Data Protection Regulation (GDPR) and the Swedish Personal Data Protection Act in relation to BOTHUB GLOBAL AB (company number: 5594314493), registered address: Kungsgatan 32, 111 35 Stockholm, Sweden.

You may use this form to submit a request regarding your personal data. Although you are not required to use this form, it has been designed to help us collect the information we reasonably need in order to process your request efficiently.

For further information about how we handle your personal data, please consult our [Privacy Policy] and [Cookie Policy].

2. Your Rights

As a Data Subject, you have the following rights under applicable data protection law (subject to legal limitations):

• Right of access – to know whether we process your personal data and to receive a copy of it.
  
• Right to rectification – to request correction of inaccurate or incomplete personal data.
  
• Right to erasure (“right to be forgotten”) – to request deletion of personal data under certain conditions.
  
• Right to restriction – to limit how we process your personal data in specific circumstances.
  
• Right to data portability – to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
  
• Right to object – to object to processing of your personal data, including for direct marketing.
  
• Right to reject automated decision-making and profiling – to not be subject to solely automated decisions that produce legal or similarly significant effects.
  
• Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time.
  
• Right to marketing opt-out – to refuse receiving direct marketing communications.
  
• Right to lodge a complaint – with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
  

3. Important Notes

• Separate Requests: If you hold both sole and joint accounts, you must submit a separate form for each account.
  
• Third-Party Data: If your request involves information that directly or indirectly identifies another person, we may need their consent before disclosure. In some cases, disclosure may be restricted to protect the rights and freedoms of others.
  
• Proof of Identity: To protect your data, we may request additional information (such as a copy of an official ID document) to verify your identity or authority to act on behalf of someone else.
  
• Fees: In most cases, your request will be processed free of charge. However, we may charge a reasonable administrative fee for repetitive, excessive, or manifestly unfounded requests.
  
• Security: All requests and supporting documents will be handled securely and used solely for processing your request.
  

4. Response Times

We will acknowledge receipt of your request promptly.

• Standard timeline: We will provide a response within 30 calendar days.
  
• Extension: If your request is complex or multiple requests are made, this period may be extended by up to an additional 60 days. If this applies, we will inform you within the initial 30-day period and explain why more time is needed.
  

5. How to Submit Your Request

You may submit your completed request by:

• Email: [Insert DPO email address]
  
• Postal mail: BOTHUB GLOBAL AB, Kungsgatan 32, 111 35 Stockholm, Sweden
  
• Online: [Insert secure online submission portal link if available]
  

6. Data Subject Request Form

A. Your Details

• Full name: _______________________
  
• Address: _________________________
  
• Email address: ____________________
  
• Phone number: ____________________
  
• Relationship with BOTHUB GLOBAL AB (e.g., customer, supplier, employee): ____________________
  

B. Identity Verification
Please attach a copy of a valid ID (passport, driver’s license, or national ID card). This will be used solely to verify your identity and will be deleted after verification.

C. Request Type (check all that apply):
☐ Access my personal data
☐ Correct my personal data
☐ Delete my personal data
☐ Restrict processing of my personal data
☐ Data portability request
☐ Object to processing
☐ Opt-out of marketing communications
☐ Withdraw my consent
☐ Object to automated decision-making/profiling
☐ Other (please specify): ________________________

D. Additional Information
Please provide any details that will help us locate your data and process your request:

E. Declaration
I confirm that the information I have provided is accurate and that I am entitled to make this request.
Signature: _______________________
Date: __________________________

7. Complaints

If you are dissatisfied with how we handle your request, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at https://www.imy.se, or with your local supervisory authority.