← All Tools
GDPR Request Generator
Write a request that uses your rights under the GDPR: see what an organisation holds about you, correct it, delete it, take it with you, or stop it being used. The letter cites the right articles and the one-month deadline, in English, French or German.
A template, not legal advice. It covers the common cases of Articles 15 to 21 of the GDPR. Exceptions and national rules can apply, and the organisation may ask you to confirm your identity. Nothing you type leaves this page: no upload, no storage. Reloading clears the form.
Preview
Deadlines and next steps
- They must reply without undue delay and within one month of receiving your request (Art. 12(3)). If they receive it on the letter date, that is .
- They may extend by two further months (to ) for complex or numerous requests, but must tell you within the first month and say why.
- It is free (Art. 12(5)). They can only charge or refuse if the request is manifestly unfounded or excessive, and must prove it.
- Keep proof of sending: the sent e-mail, or a registered letter.
- No answer, or a refusal you disagree with? You can complain to a data protection authority (Art. 77), usually in the country where you live or work. In Luxembourg that is the CNPD: how to file a complaint (opens in a new tab), with an online form (opens in a new tab). Other countries: the EDPB list of national authorities (opens in a new tab).
Source: Regulation (EU) 2016/679 on EUR-Lex (opens in a new tab), Articles 12, 15–17, 19–21 and 77, checked against the official English, French and German texts. Part of the Privacy Guides.