Subject Access Requests (SARs)

You have the right to be informed whether we hold data/information about you and to be given a description of the data together with details of the purposes for which your data is being kept.  You must make this request to us in writing and we will accede to the request within one month having first verified your identity to ensure the request is legitimate.

Where a subsequent or similar request is made soon after a request has just been dealt with, it is at our discretion whether or not we need to comply with the second request. This will be determined on a case-by-case basis. In cases where we processes a large quantity of information concerning the you, we may request that, before the information is delivered, you specify the information or processing activities to which the request relates.

No personal data can be supplied relating to another individual unless that third party has consented to the disclosure of their data to the applicant.  Data will be carefully redacted to omit references to any other individual and only where it has not been possible to redact the data to ensure that the third party is not identifiable we must refuse to furnish the data to the applicant.

A Subject Access Request Form is available here, we would ask that you complete this form, though it is not mandatory. Once we have verified your identity and the request is not deemed to be manifestly unfounded or excessive, we will comply with the request at no charge within one month


Right to Rectification

Under Article 16 of the GDPR you have the right to have inaccurate personal data that we hold about you rectified. You may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing and this may involve providing a supplementary statement to the incomplete data.

Should you wish to exercise this right, please complete the attached form which can be found here and return it to us.


Right to Erasure

Under Article 17 of the GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay and we shall have the obligation to erase personal data without undue delay unless we have overriding legitimate grounds for continued processing. This will be handled on a case by case basis under the circumstances listed in the GDPR and the Irish Data Protection Act 2018.

The majority of information that we collect, process and store is done so in order to comply with legal requirements to which we are subject as a financial institution and so, in many instances, we will not be able to process a Data Erasure Request. In such cases, we will write to you and explain the reasons we cannot process the request.

Should you wish to exercise this right, please complete the attached form which can be found here and return it to us.