I would say no, it is not corrrect.(posted 7899 days ago)The first part of the statement is that "They only process personal data relating to you on behalf of Abbey National".
Therefore; They process your personal data. This requires them to register as a data controller under the DPA, this requires them to respond with details/copies of your personal data.
I think they have made a mistake here, they have admitted that they process your personal data, and have then tried to state that they are not responsabile for it. This is not right.
I'd suggest that you discuss this with the IC on 01625-545700.
Good Luck.