If you receive a request to right of access, you must inform to person who made the request which data you hold about them. You can use this template, but make sure to either  insert the data you hold about them in the text or to add a list of the data as attachment. Also make sure you send a copy of your privacy statement.

Hello,

We have received your request for access to your personal data. We thank you for reaching out to us. This helps us keep our company in line with GDPR. 

You will find an overview of your personal data that has been processed by us, listed below or as attachment.

Your data are being processed for the purposes mentioned in our privacy statement. To make things easy for you, we are also sending you a copy of our privacy statement.

If you have any further questions, please do not hesitate to contact us.

Kind regards,