[My Address]

Data Protection Officer/Data Controller

Tesco Clubcard
FREEPOST
TESCO SCO 5043
Dundee
DD2 9XU

14th August 2009

Dear Sir/Madam

RE: SUBJECT ACCESS DISCLOSURE

This is a subject access request for disclosure of information under section 7 of

the Data Protection Act 1998. In order to assist with this request, my Tesco
Clubcard number is [Clubcard Number].

Please send me the information which I am entitled to under section 7(1). In

accordance with that section please provide a statement:

• Confirming whether any personal data is being processed;

• Describing the personal data processed;
• Specifying the purposes for which data is processed for each category of
data, and the recipients of any data disclosed;
• Detailing any transfers of data outside the UK in whatever form or by
whatever means;
• Naming the person responsible for the data protection compliance.

This information should contain any personal data comprised in, linkable to, or
which can be associated with the following identifiers:

• All records relating to the Tesco Clubcard number [Clubcard Number];

In particular, the following types of personal data are sought:

• “communications data” as defined by Section 21(4) and Section 21(6) of

the Regulation of Investigatory Powers Act 2000;
• Any data processed by monitoring-systems, or other software or hardware
devices under your control, which is retained and/or disclosed in hardcopy,
electronic media, backup devices, transient storage or otherwise including
location information;
• Records of disclosures to other parties, including emails;
• The logic of any automated decision processes;
• The sources of the personal data;

As required by the Data Protection Act 1998 section 8(2), please provide an
explanation of the purpose, meaning, and context of the information. This
includes geographical information for any location data that is retained.
You are required to supply this information as soon as possible, no longer than
forty days. If possible, I request that the information be provided in electronic
form, as allowed under section 8(2) of the DPA 1998. If this is not possible,
please provide it to me in hard copy. If you are not providing me with copies of
all records that you hold related to this request containing personal information
because of an exemption in the DPA or for any other reason, please inform me of
the fact.

I understand that you are required to properly identify any applicant for access to
personal data. A photocopy of my driving license has been enclosed. Please
promptly advise me by electronic mail ([My Email]) or telephone ([My Phone
Number]) whether any further information is required from me, or whether the
information contained in this letter is sufficient. Please advise me by telephone
of any further information you require and the fee required for this request.

If you believe you are not the data controller for any of the above data, please
provide contact details of the organisation you believe to be the controller and
explain why you have reached the conclusion why you are not the controller.

Yours faithfully,

Dafydd Vaughan