How to submit a data subject request
We have set out more details on the rights you would have as a “data subject” in the Privacy Policy on this website. The following is a brief summary of that notice which you should refer to if you need more detail (e.g. where we collect the data from, the legal basis on which we process it, who we share it with, how long do we keep it etc.).
CRIF Decision Solutions as a Data Controller
CRIF Decision Solutions is the Data Controller for certain services as set out in our Privacy Policy. We might also have some personal data about you if you are an employee of a client or other organisation with whom we deal (e.g. a supplier), or because you had expressed an interest in our services. If your request concerns data for which we are the data controller, we will respond to you directly. Please provide us with any detail or relevant date, or search criteria that can help us to identify the information needed.
CRIF Decision Solutions as a Data Processor
CRIF Decision Solutions acts as a Data Processor for a number of organisations in the insurance or wider financial services sector. These include the Motor Insurers’ Bureau and Claims Portal as well as individual companies in the wider financial services sector. If your request concerns data for which any of these organisations are the data controller, we will forward your request to them and support them in responding to you.
Data Subject Rights’ Requests
It is important to note that we are processing much of your Personal Data either on the legal basis of legitimate interests or performance of contract, rather than consent. Data protection laws create certain rights for you as a data subject, such as the right to request of us access to, and rectification or erasure, of personal data or the restriction of processing concerning your data or to object to processing as well as the right to data portability.
However your rights in relation to your Personal Data are not absolute and do not apply in all circumstances. For example, when we are processing your Personal Data for the purposes of performing a contract between you and us, you do not have a right to object to such processing. And when we are processing data on the basis of performing a contract or legitimate interests you do not have a right to data portability.
To the limited extent that our processing is based on consent, you do have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before such withdrawal.
If you wish to pose a query to us about your personal data, or wish to exercise any of your data subject rights, you can do so by either emailing dpo.uk@crif.com or posting your query to the postal address in the Privacy Policy.
Depending on your query, we may need to request further information to help us to identify your data within our databases and/or to verify your identity. If this is the case we will contact you with details of the further information we need.
If you are seeking access to personal data which we may hold on you, it would help us to process your request more expeditiously if you can use the form below to identify yourself as fully as possible.
