1. Who We Are

Dillon Marshall acts as a Data Processor on behalf of its landlord clients, who are the Data Controllers for tenant applications and lettings. For queries, please contact our Data Protection Officer at: info@dmpc.ie.

 

2. Personal Data We Collect

We may collect the following categories of personal data:
– Full name, address, and contact details
– Photo ID (passport or driver’s license)
– PPS number (for RTB registration)
– Employment and income details (e.g. payslips)
– Bank statements (for affordability)
– Previous landlord references
– Vehicle details (if applicable)

 

3. Legal Basis and Purpose for Processing

We process your data for the following purposes and legal bases:

– To assess your suitability for a tenancy – Consent (Article 6.1(a))
– To register a tenancy with the RTB – Legal Obligation (Article 6.1(c))
– To provide information to our landlord clients – Legitimate Interest (Article 6.1(f))

 

4. Who We Share Your Data With

Your data may be shared with:
– Your prospective landlord
– Maintenance and service contractors
– Referencing or screening agencies
– RTB or regulatory bodies where required

 

5. Transfers Outside the EEA

We do not routinely transfer your data outside the European Economic Area. If such transfer is necessary, we will ensure adequate safeguards such as Standard Contractual Clauses (SCCs) are in place.

 

6. How Long We Keep Your Data

If your application does not proceed, your data is deleted within 30 days. If your tenancy is successful, we retain your data for the duration of the tenancy and up to 6 years after termination to meet legal obligations.

 

7. Your Rights

Under GDPR, you have the right to:
– Access your data
– Rectify inaccurate data
– Erase data (‘right to be forgotten’)
– Restrict or object to processing
– Data portability
– Withdraw consent at any time
– Lodge a complaint with the Data Protection Commission

 

8. How We Keep Your Data Safe

We use technical and organisational measures to protect your data, including encryption, secure servers, and limited access controls.

 

9. Automated Processing

We do not use your data for automated decision-making that has legal or similarly significant effects.

 

10. Updates

We may update this Privacy Notice from time to time. Updates will be published on our website: https://dmpc.ie/privacy-policy/