Rico GroupLegitimate Interests Assessment - Rico Group

See all sectors in this division

Legitimate Interests Assessment

To comply with GDPR, Rico Logistics Limited has carried out a Legitimate Interests Assessment which is documented below

Purpose of Processing
Rico Logistics Limited has a legitimate interest in process personal data relating to decision-makers and budget holders in medium-to-large organisations in the UK. The data is gathered from publicly available sources and directly from the companies concerned in accordance with our obligations of confidentiality.

Lawful Business Objective
The processing is necessary in order to supply Rico Logistics Limited’s prospective clients with data for business-to-business marketing purposes; a lawful business objective specifically identified by the Privacy and Electronic Communications Regulations 2003 (PECR). Recital 47 of the GDPR identifies direct marketing as a legitimate use of personal information.

Reasonable Expectation
The data subjects are business people with decision making and budgetary responsibilities and can reasonably expect to be contacted with marketing material relating to their professional roles.

Adequate, Relevant & Limited
The data collected is limited to senior managers and directors’ names, job titles, company addresses, company landline telephone numbers, and corporate email addresses. If we are made aware that a person leaves their role, their name and contact details are deleted from the database.

If a data subject requests that their data is removed from the database, it is suppressed so that it cannot be accessed or added again at a later date.   We will typically hold the data for 3 years unless a request for it to be removed is made.

Valuable Service
In supplying accurate, regularly updated and targeted data, Rico Logistics Limited provides a valuable service to companies requiring a logistics service.

Rico Logistics Limited has updated its privacy policy to show that we are relying on legitimate interests to process data.

What is Legitimate Interests?

Legitimate Interests is one of the six lawful bases for processing personal data under the GDPR (General Data Protection Regulation). You must have a lawful basis in order to process personal data in line with the ‘lawfulness, fairness and transparency principle.

Legitimate interests might be your own interests, or the interests of the third party receiving the data, or a combination of the two.

The latest guidance from the Information Commissioner says that legitimate interests may be the most appropriate basis when:

“the processing is not required by law but is of a clear benefit to you or others; there’s a limited privacy impact on the individual; the individual should reasonably expect you to use their data in that way, and you cannot, or do not want to, give the individual full upfront control (i.e. consent) or bother them with disruptive consent requests when they are unlikely to object to the processing.”

You can read the Information Commissioner’s guidance on legitimate interests in full on the ICO website