Yes, Dealfront is legal as our databases only encompass business related data. We take privacy seriously and strictly follow and adhere to the requirements and principles of the General Data Protection Regulation (“GDPR”).
As far as personal data is processed, we performed a comprehensive data protection impact assessment in order to assess our processing activities. With regard to such business related personal data like professional email addresses or job titles, a legal basis under the GDPR is required for collecting, storing and processing this personal data in our system. Dealfront’s legal basis is legitimate interest according to Art. 6 (1) lit. f GDPR.
Here is how it works:
Legitimate Interest in the context of the GDPR
Legitimate interest – as one of the legal bases outlined in the GDPR – means a company can collect and process personal data if they have a legitimate reason to do so and the rights and freedoms of the individual concerned do not override this legitimate interest.
A company must conduct a so-called balancing of interests test to weigh their interest against the individual’s rights and freedoms. The company must consider whether their legitimate interest in processing personal data outweighs the individual’s right to privacy.
How does the company do that?
The company must consider whether their legitimate interest in processing personal data is more important than the individual’s right to privacy.
The balancing test involves a few steps:
Identify the legitimate interest
Asses the necessity and proportionality of the processing
Consider any potential impact on the individual’s rights and freedoms
What have we done to ensure our compliance?
In accordance with external legal counsels we carefully performed such a balancing of interest test.
In addition, we have taken the following measures to ensure our ongoing commitment to privacy and data protection:
PrivacyCockpit: We have developed our state-of-the-art privacy tool to enable anyone to swiftly take control of their personal data and exercise all rights under the GDPR.
Privacy Center: Our Privacy Center is designed to provide customers and prospects with a comprehensive overview about our privacy practices and all data protection-related processes and documents.
Comprehensive Information Security and Privacy Programs: We are ISO 27001 and ISO 27701 certified and have built our information security and privacy programs based on the highest known standards in the industry.
Ongoing Training of Dealfront’s staff: In order to support our compliance efforts, ensure comprehensive privacy and security training and to spread awareness across our organization, we conduct regular mandatory privacy and security training sessions and security awareness campaigns.
--
Questions, comments, feedback? Please let us know by contacting our support team via the chat or by sending us an email at support@dealfront.com.