Under relevant data protection legislation (the General Data Protection Regulation), individuals have rights over the processing, retention and deletion of their Personal Data. Not all rights may be available to each data subject as the rights are dependent on the applicability of the purpose for processing and lawful basis of processing.
You can exercise your rights verbally or in writing. Upon request and where applicable, e.surv will comply with your request within 30 days of receipt. Where we have received your data from a lender (and you are their mortgage applicant), we will refer the request to the lender as the data controller and comply with any of their requests in the first instance.
If your request is complex, we may require more time and can extend our response time by another 30 days (two months). If an extension is required we will contact you within the original 30 day response date to explain why we are extending and provide you with a new response date.
Upon the event of having to verify your identification in order to proceed with the request, we will contact you as soon as possible. Once we are satisfied with your identity, we will continue to process your request. Please note that only when we are satisfied with your identity will the 30-day response time begin.
If we refuse your request, we will provide you with a full explanation within 30 days of receipt along with justification as to why. We will also provide you with your right to complain to the supervisory authority and information of how to enforce your rights via judicial remedy.
The Right to be Informed; You have the right to know what personal data we are processing, how we process this data, why we process and to whom we share your data with. This right is satisfied upon receipt or notification of our privacy notice.
The Right of Access; You have the right to request copies of the personal data we hold and control relating to you and details of how we use that information.
The Right to Rectification; You have the right, if you think any of the personal data we hold about you is inaccurate to request that it is corrected.
The Right to Erasure; You have the right to for your personal data to be deleted by us, however this only applies under certain circumstances.
The Right to Restrict Processing; You have the right to restrict what information we process about you depending on certain circumstances.
The Right to Object; You have the right to object/stop us processing your personal data where the lawful basis for this processing is legitimate interest, consent or public interest.
The Right to Data Portability; You have the right to request an electronic copy of your personal data be sent to you, or to another organisation should you wish. This is however limited to the information being processed under the lawful basis of consent or the information is being processed under automated means.
The Right to Automated Decision Making and Profiling; you have the right to request that human intervention take place in such processing to challenge a decision being made under automated decision making and profiling.