In the case of public authorities
A public authority must make a decision on your request for information within 7-30 days from receiving your signed application or a verbal request. If it rejects the access to your data, it should explain the reasons for the negative decision and how you may challenge this decision.
In the case of private individuals and entities
If your personal data is held by a private person, such as an individual or an entity, there is no definite period, determined by law, within which it should reply to your request for information. However, this period should not be unreasonable. For an ordinary request, this would be no more than 30 days.
If the private person fully or partly rejects the claim for access to your personal data or does not act upon your request, you have a right to complain about this decision or the lack of action.
Fees
You should be provided with copies of your processed personal data free of charge, except when requests are unreasonably repetitive or you ask for multiple copies on paper.