DocMuse

Subject access request under the GDPR (France)

Français
France
Data & Privacy
Application
Print & sign
1 page · 0 sold

Published byDocMuse

This document is in French

The PDF you download is in French — that is the language it has to be filed in, so it is not translated. Everything on this page is here to tell you what it says.

For finding out what a company, administration or association based in France knows about you. The CNIL publishes a free model letter; this letter, in French, follows the same right and goes further: confirmation of processing, a copy of the data, purposes, recipients, retention period, source and automated decisions (article 15 of the GDPR), an answer within one month (article 12), first copy free. It announces a complaint to the CNIL if there is no reply. Send it by post or through the channel named in the privacy policy.

  • Made for use in France
  • Last updated October 13, 2026

When to use this document

  • You want to know what personal data a company in France holds about you.
  • You keep receiving adverts from a business and want to know where it got your details.
  • A bank, an employer or a public body has a file on you and you want a copy of it.
  • You want to send a subject access request under the GDPR.

What you fill in

The details the document asks for.

  • Applicant
  • Applicant's address
  • Data controller
  • Controller's postal address (from its privacy notice)
  • City
  • Date
  • Customer number or username with the organisation
  • Email

Preview

This document is produced for you. Your answers are typed into it and the finished PDF is yours to keep.

Preview coming soon

Common questions

Is there a free model for exercising the right of access in France?
Yes: the CNIL publishes a free model letter on its website for the right of access, and many organisations offer a dedicated form or e-mail address, named in their privacy policy. No form is imposed (article 12 of the GDPR). This letter spells out every item of article 15 and the response time, which makes a later complaint to the CNIL easier.
May the organisation in France demand ID or charge for the copy?
It may ask for proof of identity only if it has reasonable doubt about who you are (article 12(6) of the GDPR). The first copy of your data is free; it may charge a reasonable fee for further copies, or refuse a manifestly unfounded or excessive request, giving its reasons (article 12(5)). It answers within one month, two more if it tells you so within the first month.
What if the organisation in France does not answer the access request?
After one month, or three if extended, lodge a complaint with the CNIL, free, online on its website, with a copy of your request and proof that you sent it. The CNIL examines a complaint only after a request to the controller, so keep the proof of receipt or a copy of the message. To correct or erase data, articles 16 and 17 of the GDPR provide for other requests.

How you can sign this document

  • Print it and sign by hand. The signature lines in the document are left blank on purpose — sign on them in ink.
  • Sign it yourself with a qualified electronic signature. If you already hold a QES — Evrotrust, B-Trust, StampIT, ZealiD or any qualified provider on the EU Trusted List, on a card, a USB token, in a mobile app or in the cloud — our signing guide explains step by step how to sign this exact file without invalidating it. Step-by-step help, and a way to check it worked

DocMuse sells documents, not legal advice. Acceptance always depends on the recipient's rules and your local law.