State the right you want to exercise, the municipal service or office involved, the relevant date or reference number, the personal data concerned, and the result you are requesting. Explain any urgency or risk of harm. Keep copies of supporting records and do not send originals unless requested.

Submit the request through the published DPO email, postal address, or municipal contact form using the subject “Data-Subject Request.” If you need an accessible format or another reasonable way to submit it, say so in your message.

To protect personal data, the municipality will verify identity using information proportionate to the request. A representative may be asked for proof of authority. A parent, guardian, lawful heir, or authorized assignee may be asked for documents establishing that role. Verification information is used only to assess and fulfill the request and related legal obligations.

The DPO will route the request to the responsible office, clarify scope when needed, search relevant systems and records, and provide a decision or status update within the period required by applicable law. Complex, repeated, broad, archived, or third-party-sensitive requests may take longer.

A request may be limited or denied when a lawful exception applies, identity or authority cannot be verified, another person's rights would be harmed, a record must be preserved, or the request would interfere with an authorized investigation or legal duty. The response will explain the reason and available next step when allowed by law.

If you disagree with the response, ask the DPO to review it and include the earlier reference. You may also file a complaint with the National Privacy Commission subject to its current Rules of Procedure and complaint requirements. The NPC generally expects available organizational remedies to be raised first, unless an applicable exception exists.