Annex 1 Purposes of Processing

The following are non-exhaustive examples of the types of Processing undertaken by the HBFI along with a description of the underlying statutory basis:

GDPR Lawful BasisAssociated Data Processing Activities
Processing that is necessary for performance of a contract or in relation to preparatory steps prior to entering into a contract:Personal Data (including name, contact details, address and Eircode, and registration number) will be processed to determine if a business is eligible for a HBFI supported financial product. Providing Personal Data to HBFI for this purpose is a contractual requirement. HBFI may also use personal contact details to contact a person in relation to their application for eligibility pre-clearance and for connected purposes.
Processing that is necessary to comply with a legal obligation (other than a contractual obligation)We may be required to Process Personal Data in order to comply with a legal obligation such as (a) to process a request for information or when a person exercises their rights against us under data protection law; (b) for compliance with legal and regulatory requirements, including certain requirements to retain records; (c) for establishment and defence of legal rights; (d) for activities relating to the prevention, detection and investigation of crime; (e) to verify identity/ies including under anti-money laundering legislation.
Processing that is based on freely given, specific, informed and unambiguous consentIn limited circumstances we may rely on consent to process Personal Data such as where consent is provided to participate in certain promotional activities in connection with our activities and in relation to publication of Personal Data. Individuals are entitled to withdraw their consent at any time using the contact details above.