Need of explicit consent
I work with the events industry and wanted to find out that what if one of my sales agent received a contact list from one of his client. are we legally allowed to get in touch with those contacts as they might all be relevant to the events we host? So basically under legitimate interest? Or we would need explicit consent from the contacts to contact them?
Assign topic to the user
You need to verify if the client has consent from contacts to share data with third parties. If the client did not acquire consent, you need to give them information and acquire consent under article 14 GDPR. Legitimate interest does not include the processing to invite to hosted events.
Here you can find more information about consent and GDPR
- Is consent needed? Six legal bases to process data according to GDPR: https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/
- Everything you need to know about the GDPR Privacy Notice: https://advisera.com/articles/gdpr-privacy-notice-6-key-elements-to-include/
- How does GDPR affect digital marketing? https://advisera.com/eugdpracademy/blog/2019/02/20/how-does-gdpr-affect-digital-marketing/
If you want to learn how to comply with EU GDPR requirements you may consider enrolling in our free training EU GDPR Foundations course: https://advisera.com/training/eu-gdpr-foundations-course//
Dear Alessandra,
Thank you for your response.
Just slightly unclear with one thing
If the client did not aquire consent then can we atleast get in touch with the contacts to collect their consent to be contacted or first the client will have to do their bit around collecting consent for their data to be shared with 3rd party?
Tecnically, your client is the data controller who should acquire consent before sharing its clients' data with third parties. You could send a cold email under legitimate interest and acquire consent acting as a data controller.
Comment as guest or Sign in
Mar 19, 2021