Under relevant data protection legislation (the General Data Protection Regulation), individuals have
rights over the processing, retention and deletion of their Personal Data. Not all rights may be available
to each data subject as the rights are dependent on the applicability of the purpose for processing and
lawful basis of processing.
You can exercise your rights verbally or in writing. Upon request and where applicable, e.surv will
comply with your request within 30 days of receipt. Where we have received your data from a lender
(and you are their mortgage applicant), we will refer the request to the lender as the data controller
and comply with any of their requests in the first instance.
If your request is complex, we may require more time and can extend our response time by another
30 days (two months). If an extension is required we will contact you within the original 30 day response
date to explain why we are extending and provide you with a new response date.
Upon the event of having to verify your identification in order to proceed with the request, we will contact
you as soon as possible. Once we are satisfied with your identity, we will continue to process your
request. Please note that only when we are satisfied with your identity will the 30-day response time
If we refuse your request, we will provide you with a full explanation within 30 days of receipt along
with justification as to why. We will also provide you with your right to complain to the supervisory
authority and information of how to enforce your rights via judicial remedy.
The Right to be Informed; You have the right to know what personal data we are processing, how
we process this data, why we process and to whom we share your data with. This right is satisfied
upon receipt or notification of our privacy notice.
The Right of Access; You have the right to request copies of the personal data we hold and control
relating to you and details of how we use that information.
The Right to Rectification; You have the right, if you think any of the personal data we hold about
you is inaccurate to request that it is corrected.
The Right to Erasure; You have the right to for your personal data to be deleted by us, however this
only applies under certain circumstances.
The Right to Restrict Processing; You have the right to restrict what information we process about
you depending on certain circumstances.
The Right to Object; You have the right to object/stop us processing your personal data where the
lawful basis for this processing is legitimate interest, consent or public interest.
The Right to Data Portability; You have the right to request an electronic copy of your personal data
be sent to you, or to another organisation should you wish. This is however limited to the information
being processed under the lawful basis of consent or the information is being processed under
The Right to Automated Decision Making and Profiling; you have the right to request that human
intervention take place in such processing to challenge a decision being made under automated
decision making and profiling.