[My Address]Data Protection Officer/Data Controller Tesco ClubcardFREEPOST TESCO SCO 5043DundeeDD2 9XU14

August 2009Dear Sir/Madam

RE: SUBJECT ACCESS DISCLOSURE

This is a subject access request for disclosure of information under section 7 of the Data Protection Act 1998. In order to assist with this request, my TescoClubcard number is

[Clubcard Number]

.Please send me the information which I am entitled to under section 7(1). Inaccordance with that section please provide a statement:

•

Confirming whether any personal data is being processed;

•

Describing the personal data processed;

•

Specifying the purposes for which data is processed for each category of data, and the recipients of any data disclosed;

•

Detailing any transfers of data outside the UK in whatever form or bywhatever means;

•

Naming the person responsible for the data protection compliance. This information should contain any personal data comprised in, linkable to, orwhich can be associated with the following identifiers:

•

All records relating to the Tesco Clubcard number

[Clubcard Number]

;In particular, the following types of personal data are sought:

•

“communications data” as defined by Section 21(4) and Section 21(6) of the Regulation of Investigatory Powers Act 2000;

•

Any data processed by monitoring-systems, or other software or hardwaredevices under your control, which is retained and/or disclosed in hardcopy,electronic media, backup devices, transient storage or otherwise includinglocation information;

•

Records of disclosures to other parties, including emails;

•

The logic of any automated decision processes;

•

The sources of the personal data;As required by the Data Protection Act 1998 section 8(2), please provide anexplanation of the purpose, meaning, and context of the information. Thisincludes geographical information for any location data that is retained.