Legal Basis for collecting and processing data

Necessary to fulfill our contractual obligations to you

  • Delivering the services you request
  • Personalising your experience
  • Communicating with you on, for example, service-related issues
  • Sharing with vendors and service providers
  • To transfer, transmit, store or process your data outside the EEA (excluding marketing – see Your Consent)
 

Your consent

  • Marketing communications and newsletters
  • To transfer, transmit, store or process your data outside the EEA for marketing purposes e.g. mailchimp
 

Our legitimate interests or the legitimate interests of a third party, where not outweighed by your interests or fundamental rights and freedoms

  • Product research and development (justification: collecting the data and then processing the data anonymously or pseudo anonymously does not interrupt you (unless you consent) or take away from the experience of using our services but provides significant potential benefit to us, you and future customers)
  • Providing anonymous data to the marketing industry (justification: collecting the data and then processing the data anonymously does not interrupt you or take away from the experience of using our services but provides significant potential benefit to you and the industry)
  • Improving the efficiency of our marketing and advertising and sharing with advertising (and analytics) partners (Justification: as a niche business we will never have the resources to pay for untargeted adverts.  As such targeted adverts are an essential part of maintaining a healthy business. We believe that us separately gaining consent from you in addition to the consent the advertising networks get from you would be more invasive than any additional targeting of the adverts themselves.  We minimise the impact to you by:
    • only using networks who:
      • gain your consent before they show you targeted adverts and offer opt-outs
      • process the data in ways that do not give us further personal data about you
    • controlling the number of times you may see our adverts to prevent unreasonable irritation
    • being transparent in our privacy policy and on our website that your data may be used in this way
  • Non-financial third party services on our website (Justification: although many of these services provide part of our overall service for your direct benefit, we realise that data is collected about you by these third parties. We believe the price of that is massively outweighed by the cost savings in not developing the services ourselves and indeed, even if we did, there are potentially other advantages to you from us doing this (e.g. it could help YouTube provide better video recommendations to you if you are a registered user)
  • Sharing/transferring to any potential new owner of the business
  (The above assessments were formed having digested guidance provided by the DPN and others.)  

Compliance with a legal obligation

  • Data for legal purposes
 

Tasks carried out in the public interest

  • Providing anonymous but public data to the biomass industry
 

Like the Brain? Sign up for the packed-full-of-tips monthly newsletter