§ 35 LDSG SH
Procedure for the exercise of the rights of the data subject
(1)The controller shall communicate with data subjects using clear and plain language in a concise, intelligible and easily accessible form. Without prejudice to special formal requirements, the controller should, when responding to requests, use the form chosen for the request.
(2)In the case of requests, the controller shall, without prejudice to § 33(5) and § 34(6), inform the data subject without undue delay in writing of how the request has been dealt with.
(3)The provision of information pursuant to § 31, the notifications pursuant to §§ 32 and 42, and the handling of requests pursuant to §§ 33 and 34 shall be free of charge. In the case of manifestly unfounded or excessive requests pursuant to §§ 33 and 34, the controller may either charge a reasonable fee on the basis of administrative costs or refuse to act on the request. In such cases, the controller must be able to demonstrate the manifestly unfounded or excessive character of the request.
(4)Where the controller has reasonable doubts concerning the identity of a data subject who has submitted a request pursuant to §§ 33 or 34, the controller may request additional information from the data subject that is necessary to confirm his or her identity. zur Einzelansicht § 35