To comply with GDPR, Boulden Management Consultants has carried out a Legitimate Interests Assessment which is documented below
Boulden Management Consultants has a legitimate interest to process personal data relating to technical experts, decision makers and budget holders in medium-to-large organisations. The data is gathered from publicly available sources and directly from the companies concerned.
The processing is necessary in order to supply Boulden's clients with information about training programmes, and also articles and information about business related topics that may be of interest to them; a lawful business objective specifically identified by the Privacy and Electronic Communications Regulations 2003 (PECR). Recital 47 of the GDPR identifies direct marketing as a legitimate use of personal information.
The data subjects are senior business people with decision making and budgetary responsibilities, and technical experts and can reasonably expect to be contacted with marketing material relating to their professional roles.
The data collected is limited to names of senior managers and directors, their job titles, company addresses, company telephone numbers and corporate email addresses. If a person leaves their role, their name and contact details are deleted from the database.
If a data subject requests that their data is removed from the database, it is suppressed so that it cannot be accessed or added again at a later date.
In supplying accurate, regularly updated and targeted data on business topics, Boulden Management Consultants provides a valuable service to professional business people. In the absence of having access to this information our corporate clients would have more limited access to important ideas, information and training opportunities, which would have a detrimental effect on the success of their businesses and the wider economy.
Boulden Management Consultants has updated its privacy policy to show that we are relying on legitimate interests to process data.