Consumer Privacy Request and Appeals Procedure
1. Submission Method
Privacy requests should be directed to Contact@GEISolutions.com. GEIS may later establish a dedicated request webform or authenticated portal workflow.
2. Intake and Logging
GEIS should log each request with the date received, requester identity information provided, type of request, jurisdiction if known, verification status, assigned reviewer, and response deadline if applicable.
3. Verification
GEIS may request reasonable information necessary to confirm the requester’s identity and authority. GEIS should avoid collecting excessive data solely for verification purposes.
4. Review
GEIS should determine whether the request appears to fall under an applicable law, whether any legal exceptions apply, and whether GEIS has sufficient information to respond.
If the request concerns targeted advertising choices or cookie-level rights, GEIS should coordinate the response with the current website and marketing configuration.
5. Response
GEIS should respond within any applicable legal timeframe or, if no specific law applies, within a commercially reasonable period.
Responses should state whether GEIS is granting, partially granting, or denying the request and should explain any legally permitted basis for denial.
6. Appeals
If a law provides an appeal right and GEIS denies a request, GEIS should identify the appeal method and any timeframe for seeking internal review.
Appeals should be reviewed by a person or role not solely responsible for the original denial where practicable.
7. Recordkeeping
GEIS should maintain a record of requests, verification steps, decisions, and response dates for a reasonable retention period, subject to legal, operational, and security considerations.
8. Accessibility
If a requester cannot use the ordinary email or web method because of disability or technology limitations, GEIS should offer a practical alternative communication method.
9. Updates
This procedure should be reviewed whenever GEIS changes its data practices, launches a portal or dApp, adopts new marketing tools, or receives enough requests that a more formal workflow is needed.
