This procedure addresses the data subject(s) right to withdraw consent for the processing of his or her personal data.

 

Withdrawal of consent by the data subject means an unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies withdrawal of consent to the processing of personal data relating to him or her.

 

Withdrawal of consent shall be without effect to the lawfulness of processing based on consent before its withdrawal. Whereas consent covered all processing activities carried out for the same purpose or purposes, withdrawal of consent covers all processing activities carried out for the same purpose or purposes.

 

 

 

2.1  As a data controller, Inchol Solutions, is responsible under the GDPR for administering withdrawal of consent from the data subject under advisement from Data Protection Officer / GDPR Owner.

 

 

 

3.1  Inchol Solutions demonstrates the data subject has withdrawn consent to the processing of his or her personal data as recorded in the (GDPR REC 4.6A – Data Subject Consent Withdrawal form). 

 

3.2  Where the processing had multiple purposes, Inchol Solutions demonstrates withdrawal of consent for each purpose as recorded in the (GDPR REC 4.6A – Data Subject Consent Withdrawal form).

 

3.3  The processing activities that relied upon the consent is stopped in accordance with the relevant process. The Data Protection Officer / GDPR Owner will inform the relevant process owner of this change so that processing can be stopped.

 

 

 

4.1  Inchol Solutions demonstrates the holder of parental responsibility over the specified child has withdrawn consent (GDPR REC 4.7A – Parent Consent Withdrawal).

 

4.2  Inchol Solutions demonstrates that reasonable efforts have been made to establish the authenticity of the parental responsibility, when withdrawing consent for the specified child, considering available technology. 

 

4.3  The processing activities that relied upon the consent is stopped in accordance with the relevant process. The Data Protection Officer / GDPR Owner will inform the relevant process owner of this change so that processing can be stopped.