Skip to Content
Gaeilge

Data Subject Rights

Under the General Data Protection Regulation (GDPR), you have rights relating to the personal data we have collected from you. We have outlined the eight rights afforded to you under the GDPR and how to submit a request under them. Below you can learn more about these rights and how to exercise them. 

If you wish to submit a request under one of your eight GDPR rights to ESB or an ESB subsidiary company, you can contact our Data Protection Officer via -

Email: dpo@esb.ie

Post: Data Protection Office, ESB Head Office, 27 Fitzwilliam Street Lower, Dublin 2, D02 KT92, Ireland.

Whatever your preferred method to submitting a request, please provide sufficient personal identifiers and a detailed list of your requirements.

Data Subject Rights Requests are subject to a 30-day fulfilment timeline (60-90 in some circumstances). However, the timeline will not begin until we have been able to uniquely identify you within our systems and validate your request. If we have been unable to verify your identity or validate your request, we will advise you accordingly and seek additional information from you.

Note: The GDPR does not apply to commercial entities, their associated accounts and electricity connections. Requests from such entities must be directed towards relevant customer service teams, or your regular point of contact.

    Known as the Right to be Informed (Article 13, 14)

    You can raise a general query in relation to any aspect of how we collect, share, and use your personal data.

    Known as the Right to Access (Article 15)

    You have the right to access a copy of the personal data we hold in relation to you.

    Common requests submitted under Article 15: -

    • The transcript of a specific call with our customer service team.
    • Copies of all written correspondence between you and us (our service providers).
    • A copy of all personal and account data retained by us.

    Some common limitations apply to Article 15, we will be unable to fulfil your request if it relates to: -

    • Personal data related to another person without their explicit authority.
    • Personal data which is subject legal privilege.
    • Commercially data related to our business operations, processes, and procedures.

    Note: Requests for general account data (i.e. utility bill reprints, meter readings or proof of residence letters) are not fulfilled under Article 15 and can be requested from customer service teams within Electric Ireland, ESB Networks, ESB ecars, etc.

    Known as the Right to Rectification (Article 16, 19)

    If you think personal data, we hold in relation to you is inaccurate or incomplete, you have the right to request that we update the personal data.

    Some common limitations apply to Article 16, we will be unable to fulfil your request if it relates to: -

    • Personal data related to another person without their explicit authority.
    • Personal data where the accuracy is subject dispute.

    Known as the Right to Erasure, or the Right to be Forgotten (Article 17, 19)

    You have the right to request the deletion of personal data we hold in relation to you under specific conditions like withdrawal of consent, or data no longer required.

    Some common limitations apply to Article 16, we will be unable to fulfil your request if it relates to: -

    • Personal data related to another person without their explicit authority.
    • Personal data which does not rely on consent as a lawful basis and as such is subject to our data retention policies.
    • Personal data which we are legally or regulatory obligated to retain.

    Known as the Right to Restrict Processing (Article 18, 19, 23)

    You have the right to request we temporarily stop collecting and using your personal data in certain situations, such as: - when you believe the data to be inaccurate, disputes over processing rights or if you prefer we retain data rather than delete it.

    Known as the Right to Data Portability (Article 20)

    Where possible, you have the right to receive a digital copy of the personal data you provided us to facilitate your move to a different service provider.

    Known as the Right to Object to Processing  (Article 21)

    You have the right to object to us collecting and using your personal data in certain situations, such as: - direct marketing.

    Known as the Right to Object to Automated Decision-Making (Profiling) (Article 22)

    You have the right to input into automated decisions (which affect you in a legal or a significant way) and have them reviewed manually by us.