Under the new GDPR data protection law starting in 25th May 2018, we have a number of lawful reasons that we can use (or 'process') your personal information. One of the lawful reasons is called "legitimate interests".
Article 6(1)(f) of the GDPR says that we can process your data where it "is necessary for the purposes of the legitimate interests pursued by [us] or by a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of [you] which require protection of personal data."
Broadly speaking, legitimate interests means that we can process your personal information if:
So, what does this mean?
When you provide your personal details to us, we use your information for our legitimate business interests of supporting the efficiency & profitability of professional services firms by providing integrated project management & professional services automation software. Before doing this, though, we will also carefully consider and balance any potential impact on you and your rights.
Some typical examples of when we might use this approach are for preventing fraud, direct marketing, maintaining the security of our system, data analytics, enhancing, modifying or improving our services, identifying usage trends and determining the effectiveness of our campaigns.
At CMap, our objective is to help our clients increase the overall efficiency & profitability of their businesses by providing a cloud-based software solution that automates project management processes and increases visibility over live project performance data.
We believe that professional individuals who want to achieve these objectives in their business would be interested to know about our product for their consideration. We will process the personal information you have supplied to us to conduct and manage our business to enable us to give you the most appropriate marketing, information, service and products and provide the best and most secure experience. These are what we consider to be our "legitimate interests".
The following are some examples of when and why we would use this approach in our work:
Before engaging with you via direct marketing, we will always try to speak to you on the phone beforehand to introduce our company and gauge your interest in receiving further communication from us. However, sometimes this is not possible; for example you may be in a meeting or out of office. Therefore, it is within our legitimate interests to send you direct marketing so that you can read about what we do in your own time.
Under GDPR Legitimate Interests Recital 47, it states that:
The ICO gives further guidance on this by stating we must also adhere to the Privacy and Electronic Communications Regulation (PECR).
CMap Software is a business-to-business organisation. Under PECR, it is considered best practice for business-to-business organisations to enable individual employees to opt-out of receiving direct marketing.
CMap Software provides you with the option to opt-out of any of our communications at any time in accordance with PECR regulations (UK) and European Directive 2002/58/EC (EU), commonly known as the 'e-Privacy Directive' (ePD). If you decide you do not want to receive direct marketing communication from us, you can either unsubscribe via the link inserted at the footer of our marketing emails, or reply directly to any marketing email and you will be added to our 'do not email' list. If you also would like to opt-out of receiving calls from us, just let us know and we'll also add you to our 'do not call' list.
In order to do this, we will need to keep hold of some basic information information about you (e.g. full name, job title, email address, telephone number) in order to respect your preferences for being contacted by us.
When we process your personal information for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your permission or are otherwise required or permitted to by law).
For more information about your rights, please read our Privacy Policy
Remember, you can change the way you hear from us or withdraw your permission for us to process your personal details at any time by using our contact form on the Contact Us page.
We understand that the timescale for companies choosing to engage in a business contract with us can range from a few weeks to a few years (for example, if you are in a multi-year contract with your current supplier).
Our Marketing is primarily written for decision makers at professional services organisations. Roles (Roles) we target include senior management, C-suite, VPs and the board; Finance and Operations (both systems and projects).
Due to the nature of the Roles we target, and the varying timescales involved in customers choosing CMap as a software vendor, we feel it’s appropriate to retain your data for a maximum of 8 years. This 8 year retention period is taken from the date of last engagement.
We regularly review, verify and, delete the personal data of anyone who is not covered by the above Roles. This data is deleted within 1 years from the date of last engagement.
If you no longer work at an organisation where you received marketing communications from us, we delete all of your personal data associated with that company as soon as we are notified that you have left the business (for example, by an automated email response to a marketing campaign; or when notified by an employee at your former workplace).
This includes the following personal data:
If you would like further information anything discussed above, feel free to get in touch via the Contact Us page
