Under the GDPR, a company can only process personal data under the legal basis for processing.
Article 6 of the GDPR lists the bases under which it’s lawful to process personal data. If a company does not use any of them, it must not collect, store or use any kind of personal data in any way.
Legal bases for the processing of personal data under the GDPR are as follows:
Consent of data subject: a company may process personal data if the data subject has consented to such processing. Consent of the data subject has to be freely given, specific, informed, and unambiguous.
Performance of a contract: a company may process personal data if it is necessary to perform a contract with the data subject or take steps requested by the data subject prior to entering into a contract.
Legal obligation: a company may process personal data if it is required to do so under the applicable law, court order, authority’s instruction, etc.
Vital interest: a company may process personal data if it is necessary to protect the vital interests of the data subject or another person. For example, various apps which monitor and provide the COVID-19’s morbidity and recovery statistics process the personal data on this basis.
Public interest: a company may process personal data if it performs a task that carries a public interest or exercises its official authority. For example, law enforcement agencies may process personal data on this basis.
Legitimate interest: a company may process personal data if it is necessary for the legitimate interest of the company. Such legitimate interest should not override the interests or fundamental privacy rights and freedoms of the data subject.
Snov.io relies on several bases for personal data processing:
- Consent of the data subject, to process the registration form information and cookies
- Performance of a contract, to process the personal data client or user voluntarily provides to Snov.io.
- Legitimate interest, to process some cookies and information necessary for the provision of services.
- Legal obligation, to maintain the records of processing activities.
If you have any other questions about Snov.io platform, don’t hesitate to contact us at email@example.com or via live chat.