Cyber security concept. Shield With Keyhole icon on digital data background. Illustrates cyber data security or information privacy idea. Blue abstract hi speed internet technology.

Subject Access Request

A number of jurisdictions, including the U.K, EU, and U.S., have enacted laws and regulations, such as Article 15 of the General Data Protection Regulation (GDPR) and the California Privacy Rights Act, that give individuals the right to request a copy of their personal data being “processed” (i.e., used in any way) by data controllers (i.e., those who decide how and why data is processed), as well as other relevant information about that processing. These requests are often referred to as “data subject access requests” or “access requests.”

What is the right of access?

An individual’s right of access varies based on their country of residency or, in some instances, citizenship. Fundamentally, the right of access is a data privacy right allowing individuals to request and receive a copy of the personal data an organization holds about them, along with information about how that data is being processed, and often provides the ability to exercise certain rights, like correction or deletion.

For example, there are a few different aspects to the right of access under Article 15 GDPR, including the right to access certain information about the processing of their personal data, and to receive a copy of certain personal data. Individuals, or “data subjects,” have the right to obtain the following from the data controller:

Confirmation of whether personal data concerning you is being processed.
Where personal data concerning you is being processed, a copy of your personal data.
Moreover, where personal data concerning a data subject is being processed, the individual may obtain other additional information as follows:

Purpose(s) of the processing.
Categories of personal data.
Any recipient(s) of the personal data to whom the personal data has or will be disclosed, in particular recipients in third countries or international organizations and information about appropriate safeguards.
The retention period or, if that is not possible, the criteria used to determine the retention period.
The existence of the following rights: Right to rectification; Right to erasure; Right to restrict processing; Right to object; as well as information on how to request these from the controller.
The right to raise a concern with a supervisory authority (in Ireland this is the Data Protection Commission).
Where personal data is not collected from the data subject, any available information as to its source.
The existence of automated decision-making, including profiling and meaningful information about how decisions are made, the significance and the consequences of processing..

If you are an individual who resides in a country that provides the right to a subject access request, please fill out the form below.

First Name

Last Name

Email Address Linked to Account

Phone Number Linked to Account

Please identity qualifying country of citizenship/residency:

World Kinect Relationship

Please enter the name the company name

Please identify World Kinect-related company/ies you believe may hold your personal data:

Please select the ID Type

Customer/Account Number

License Number

National ID

Passport Number

Enter the last 4 digits of the selected ID