Request a Call
We encourage you to read our privacy and cookies policy.
The General Data Protection Regulation (GDPR) came into effect on May 25th 2018 and it governs how data about individuals must be processed and stored.
As a data provider since 1973, we take our responsibilities under the GDPR extremely seriously and have worked with industry experts to ensure that our processes and practices are compliant, and that our customers can make use of our data in confidence. Here, we鈥檙e delighted to share our approach with you.
It is a set of laws concerning how personal data must be processed and stored, with a view to giving individuals greater control over how their data is used. Even after leaving the EU, the UK will continue to adopt the GDPR as part of its domestic legislation. The GDPR ensures that data is treated with respect, kept secure, used fairly, responsibly and in a transparent way.
6686体育投注官网 draws contact data from publicly-available, public-sector sources, such as local planning authorities, public tendering websites and expenditure plans.
This information is then extensively and continually researched to identify individuals involved in live construction projects. The vast majority of these contacts are corporate individuals. Whilst this is still categorised under GDPR as personal data, it can be used within the current legislative framework for business-to-business sales and marketing purposes, assuming the Privacy and Electronic Communications Regulations (PECR) are also adhered to.
In order to verify all personal data held in our database, and to confirm people鈥檚 involvement in live construction projects, our research team make calls to all newly-identified contacts. A follow-up email is then sent which confirms their inclusion in our database, includes a copy of our privacy policy – as stipulated by the GDPR – and gives them a reminder of the ways in which they can exercise their rights and opt-out from being included. Only then is their data made available in the 6686体育投注官网 database.
Contacts can opt-out of inclusion at any stage and our database is updated in real-time, over 30,000 times a day, to ensure that it always shows an individual鈥檚 most up-to-date status.
Our processes have been audited for GDPR by lawyers at DLA Piper and Ernst & Young. We are accredited members of the Data & Marketing Association (DMA) who have assessed our processes to ensure they are up to the standards of their DMA code. We are also registered with the Information Commissioner as a data controller, and we have appointed a dedicated Data Protection Officer to ensure that our business continues to be compliant.
Yes. Our data is provided to customers based on the legitimate interest of enhancing marketing efficiencies for buyers and sellers within construction and related markets. Legitimate interest is one of the six lawful grounds for processing data under the GDPR. Our legitimate interest in collecting this type of data has been audited and fully documented.
No. In a business-to-business context, opt-in consent is not required for 6686体育投注官网 to share this data with its third-party customers. In any event, in the circumstances of 6686体育投注官网鈥檚 business, properly informed opt-in consent is not realistic or practical.
As outlined under the GDPR, consent requests must include the name of any third-party controllers (ie. 6686体育投注官网 customers) who will rely on the consent.
Information Commissioner’s Office聽(ICO): “Make your consent request prominent, concise, separate from other terms and conditions, and easy to understand.聽Include:聽the name of your organisation; the name of any third-party controllers who will rely on the consent; why you want the data; what you will do with it; and that individuals can withdraw consent at any time.”
In our case, this would mean listing the company names of thousands of companies, which cannot realistically be done in a concise and easy to understand manner. Simply informing database contacts that their details may be shared with a generic group of third- parties, for example 鈥榦ur customers鈥�, does not constitute opt-in consent.
We would also need to re-contact all of those contacts every time a new third-party controller (i.e. a new 6686体育投注官网 customer) gained access to the database to ensure their consent remained in place, which is impractical and unrealistic.
Furthermore, the GDPR requires that consent must be informed, and that the individual must be fully-aware of what they are giving their consent for. In order to satisfy this requirement, our researchers would need to dictate a lengthy script and privacy policy containing an irreducible amount of information. As before, this cannot realistically be done in a concise and easy to understand manner.
By using legitimate interest as a ground for processing, 6686体育投注官网 customers can be assured that they are not at risk of relying on consent that is not legally robust in the eyes of the ICO, and that they will have access to the largest possible database of industry contacts with no data being withheld due to lack of consent.
No. Under the GDPR, once data has been exported from our system, our customer becomes the data controller and therefore must ensure that their collection, use, storage and retention of data complies with the GDPR. This is the case no matter where customers source sales and marketing data from.
We encourage all customers to take independent advice to understand what can and cannot be done with data sourced from database providers such as 6686体育投注官网. This could include the completion of a legitimate interest assessment, through which customers can demonstrate their GDPR compliance if required.
In addition to the GDPR, customers must also consider electronic marketing communications are also covered by PECR.
Legitimate interest is one of the grounds for processing data as specified by the GDPR. The ICO states that, 鈥�It is likely to be most appropriate where you use people鈥檚 data in ways they would reasonably expect and which have a minimal privacy impact, or where there is a compelling justification for the processing鈥�. For business-to-business purposes, where customers are utilising 6686体育投注官网 data to identify companies and individuals that are likely to have a need for their products and services, this is appropriate.
A legitimate interest assessment (LIA) is a risk-assessment based on our customer鈥檚 specific context and circumstances for processing data.
The Privacy and Electronic Communications Regulations (PECR) are a set of rules that sit alongside the GDPR and give people specific privacy rights in relation to electronic communications.聽PECR sets out different rules for marketing to companies and marketing to private individuals (ie. not business contacts). In general, the rules on marketing to companies are not as strict.聽PECR states that private individuals can only be contacted via email or by text message with informed and specific consent.聽Accordingly, in order to safeguard our customers, email addresses and telephone numbers are removed from this data if it is collected.
Yes, as long as you have identified grounds for doing so under the GDPR via a legitimate interest assessment and you comply with the Telephone Preference Service (TPS).
Yes, as long as you have identified grounds for doing so under the GDPR via a legitimate interest assessment and you comply with PECR.
No, customers’ mailing lists are their own responsibility and are separate databases from that of 6686体育投注官网鈥檚.
It鈥檚 highly likely that contacts who have unsubscribed from customers’ marketing will remain in the 6686体育投注官网 database; therefore it鈥檚 vital that customers maintain their own suppression lists internally.
Our privacy policy sets out how an individual can file a request to be removed from the database. An individual can also make this request via our preference centre. Our database is updated in real-time 24 hours a day so any requests for removal received will be actioned and updated within hours.
Any requests from contacts to be removed from the 6686体育投注官网 database will be actioned promptly, therefore it鈥檚 imperative that customers refer back to our website for the most recently updated information.
The GDPR specifies that personal data must not be held for longer than you need it. Customers should consider what this means to them as a data controller, and be able to justify it. As above, customers should be aware that if they retain and use out-of-date data for marketing purposes, they may contact individuals who have opted-out of inclusion which could lead to a complaint.
Our processes are secure and in line with industry best practise. All data is stored in encrypted form using market-leading technology.
Privacy policy
If you have any queries regarding 6686体育投注官网 data and the GDPR, please get in touch.