A: Providing they meet the new rules, existing consents should still apply. Where personal data is processed for direct marketing, the individual’s right to object should clearly be brought to their attention
A: Yes it does apply to a specific individual, however you are able to call an organisation’s mainline.
A:The regulation says that consent “must be a freely given, specific, informed and unambiguous indication of the individual’s wishes”. Which means your text going forward beyond 28 May 2018 must comply with that statement, and any pre-selected tick boxes are not allowed.
A: No, it will either come under the lawful basis of “performance of a contract”, or it would be “Legitimate Interest” as you already have a relationship with them and it won’t be unexpected for them to hear from you.
A: If you cannot justify Legitimate Interest as the lawful basis, then you must rely on consent. If you buy data from a company that says they have obtained consent you need to be careful. The ICO guidance states “You must as a minimum include the name of your organization and the names of any third parties who will rely on the consent – consent for categories of third-party organizations will not be specific enough”
Any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer IP address.
A controller is the entity that determines the purposes, conditions and means of the processing of personal data, while the processor is an entity which processes personal data on behalf of the controller. Mago:Tech is, primarily, a processor.
A: According to the Regulation, consent decays with time. However, 6 to 12 months seems to be a reasonable time frame.